pub fn merge_reduction_capability(
trusted: Option<&CapabilityConfig>,
project: Option<&CapabilityConfig>,
) -> Option<CapabilityConfig>Expand description
Merge the project-layer reduction module without allowing an untrusted
repository to widen an explicit trusted disable. Reduction is the one
capability a project may enable when the trusted layer is silent, but an
explicit false on either the module master switch or a documented pass
gate is narrowing and therefore dominates true from the other layer.
Settings still deep-merge so a sibling project key cannot discard trusted
gates that it did not mention.