Function load 

pub async fn load(project_root: &Path, trusted: bool, offline: bool) -> Loaded

What chest gives a run of yapi in project_root: the project manifest, only when trusted, and the user’s global one, each when it installs anything. Each puts back what its lock pins and is missing, unless offline, and skips stale or unlocked entries with a warning. It never writes a lock or .gitignore.