Function hermetic_enabled 

pub fn hermetic_enabled() -> bool

2026-09-25: Whether hermetic mode is on: set_hermetic(true) was called or METRALE_HERMETIC=1. Resolved on first call and cached; read by the SSM snapshot lookups in metrale-cache (snapshot.rs, snapshot_tier.rs).