pub fn permissions_sandbox_escalation(
cap: &CapabilityConfig,
) -> SandboxEscalationExpand description
P5-10 (§2 module 12, §3.1 capabilities.permissions.sandbox.escalation):
parses via crate::sandbox::SandboxEscalation::parse (the alias-
normalizing parser every sandbox-adjacent string in this crate uses);
an absent or unrecognized value fails safe to
crate::sandbox::SandboxEscalation::Deny (the type’s own Default),
never silently to Allow.