Function capsule_writable_roots 

pub fn capsule_writable_roots(placement: &RuntimeDirPlacement) -> [&Path; 2]

The trees a session placed at placement lets its commands write, as derive_interpreter_runtimes takes them: the workdir root and the records group, which holds every session’s temporary folder.