Function options 

pub fn options(
    risk: &str,
    has_object: bool,
    derived: bool,
    kind: &str,
    always_risk: &str,
) -> Vec<String>

The choices offered, in the fixed order once, task, run, always, reject, stop. Remembered options (task, run, always) only for a call with a resolved object whose arguments were not copied from content the attempt read (derived); “for this run” never for high risk; “always” only for a command (run, network) whose argv is not high risk without the network (always_risk: an exact allow-list entry is committed, reviewed policy).