Module path_jail 

Path jail: keep agent-facing paths inside a source root.

Absolute paths, .. traversal, and symlink hops that leave the root are rejected.

Functions

absolute_root 🔒

normalize_lexically 🔒

resolve_existing_prefix 🔒

Canonicalize the longest existing prefix so symlink hops are visible.

resolve_under_root

Resolve path so the result is inside root.