pub fn classify_tier(invocation: &CommandInvocation) -> CommandTierExpand description
Classify a program invocation into a governance tier. This is a conservative default: anything not recognized as read-only is treated as a mutation so a novel tool cannot slip through as inspection.