Constant WHOLE_CONFIG_SENTINEL 

pub const WHOLE_CONFIG_SENTINEL: &'static str;

Sentinel dropped_security entry used when the whole config is replaced by Config::default() (unparseable TOML, unsupported future schema, broken migration chain, or a root that cannot be salvaged section-by-section). In that case every security-critical section is lost at once, so the posture is degraded and the serving gate must refuse to start without an explicit operator override — exactly as it does for a single dropped section.