pub fn resolve(sandbox: &Path, path: &str) -> Result<PathBuf>Expand description
2026-09-26: Resolve path inside sandbox. The check is lexical, because
the target usually does not exist yet: a relative path, or an absolute one
already under sandbox, is accepted unless it has a .. component or
resolves, through an existing symlink, outside the sandbox.
This is not a privilege boundary: bash runs any command, and a symlink
created after this check is not seen.