Function excuses 

pub fn excuses(root: &Path, paths: &[String], attestation: &Attestation) -> bool

2026-09-26: Whether an unchanged closure excuses every one of paths, the paths that survived the path boundary. true only when all are under kernels/ and every target they affect still hashes to what the record attests.