Function command_requires_approval 

pub fn command_requires_approval(command: &[String]) -> bool

Returns whether the command crosses an inline-code boundary that must be admitted by an enforceable sandbox or explicit human approval.

This is deliberately separate from command_might_be_dangerous: inline interpreter programs are not forbidden outright, but their source text can perform arbitrary effects that argv-level command classification cannot prove safe.