Function authorize 

pub fn authorize(
    caller: &CallerContext,
    safety_class: Option<SafetyClass>,
    execution_mode: ExecutionMode,
) -> SecurityDecision

Authorizes one dispatch: affinity scope + the trusted-local inline rule, deny-by-default for unclassified targets.

Trusted-local callers bypass affinity entirely — this keeps LoopbackDev/TrustedGateway behavior identical to the pre-authz world, where scope checks were skipped outside Mounted auth.