pub fn configured_hook_ceiling() -> (SafetyLevel, Option<&'static Level>)Expand description
The auto-approve ceiling the HOOK evaluates at, from the write-protected user config
(~/.config/safe-chains.toml, level = "…"). No config, or an unknown name → the default
developer band (SafeWrite, no engine level) — fail-safe. Honored ONLY from the user config,
never a repo .safe-chains.toml; the file is write-denied, so an agent cannot set its own ceiling.