Module validate 

Functions

validate_git_ref

validate_no_control_chars

Reject strings containing control characters (bytes < 0x20) except newline (0x0A) and tab (0x09). This prevents agents from accidentally passing invisible characters in CLI arguments.

validate_root