Function bind_session_rooted 

pub fn bind_session_rooted(session_id: &str, cwd: &Path, root: &Path)

Bind a session whose cd cannot leave root. Isolation uses this so a conversation shell cannot walk back onto the source tree.