Yes, it's at the top level. You can also use the pnpm cli to set config options

globally in your pnpm rc file:
pnpm config set --global trustPolicy no-downgrade

locally in your project:
pnpm config set --location=project trustPolicy no-downgrade
(unfortunately this removes comments)

saw them live last year. Tickets are expensive AF and the venue used to be a shithole. looks pretty nice nowadays

@biomejs.dev this is what happens when you lie about full support in your release announcements.