Function trust_path 

pub fn trust_path() -> Result<PathBuf, ConfigError>

~/.rpi/agent/trust.json (per-cwd project trust decisions — read-only parity with pi; rpi does not gate resources behind trust in v1).