isConfigured
true for sinks whose callee was in the cfg's sinks list. false for taint that reached an instruction the user did NOT declare as a sink (a return, a store, an unrelated call, …) — calleeSymbol/calleeDemangled are empty, and dataFlowDAG/feasibleFacts may be empty too (the C++ side doesn't compute per-call-site DAGs for unconfigured leaks today).