pub fn level_ceiling(
name: &str,
) -> Option<(SafetyLevel, Option<&'static Level>)>Expand description
Resolve a level NAME to its (3-band ceiling, engine level for admits), or None for an unknown
name. The ceiling gates the projected verdict; the engine level (when present) classifies per-level
via admits, exposing distinctions the 3-band projection flattens — editor (no destroy, no
sibling write) vs developer, and the upper band (git push, bulk-object-read, sudo). paranoid/
reader are pure ceilings (their read/inert bands need no admits), and developer IS the default
band, so those carry no engine level. Legacy aliases (safe-write) canonicalize first.