Function cert_override_decision 

pub fn cert_override_decision(
    store: &TrustStore,
    host: &str,
) -> CertOverrideDecision

Policy for ServerCertificateErrorDetected handlers (store only — no session). Prefer cert_override_decision_full for production hooks.