Load the durable approvals file, migrating forward if needed.
Never throws: a missing file, unreadable file, or corrupt JSON all
degrade to the empty default (ask every time) rather than crashing the
approval gate — a config-file bug must never make mutating tools MORE
permissive by accident, and "ask every time" is the safe failure mode.
Load the durable approvals file, migrating forward if needed.
Never throws: a missing file, unreadable file, or corrupt JSON all degrade to the empty default (ask every time) rather than crashing the approval gate — a config-file bug must never make mutating tools MORE permissive by accident, and "ask every time" is the safe failure mode.