Function is_trusted 

pub fn is_trusted(config: &Config) -> bool

§2 module 14 trust + D-10: is this workspace trusted to load/run config-declared plugin code? See the module doc comment’s “Trust model” section. false whenever crate::Config::trust_enabled is false (the master gate — matches every OTHER module’s “disabled means the setting underneath is never consulted” contract) OR crate::Config::trust_default isn’t exactly TrustDecision::Always.