Function security_status 

pub fn security_status(
    root: &Path,
    analyzer: Option<&str>,
    project: &str,
    layers: &[FindingsLayer],
    now: &str,
) -> ToolSecurityStatus

Build the tool-surface security status document.

root and analyzer govern the machine half; project and layers govern the repository half. They are separate arguments because they are separate facts, and the caller has to supply them from separate places — the asset root from the host, the layers from the resolved project’s store.