security-contractAvailable
Workflow trust
Fails closed for project-owned custom Python unless --trust-workflow is present.
Trust is evaluated from the stored source and source kind on every invocation. Batch has no interactive approval prompt and does not persist the switch. Trusted source can use Python's normal user-level file and process capabilities; review the project before granting trust. Missing trust returns the dedicated trust category at exit 2.