pub fn classify_bash(
command: &str,
allowed_roots: &[String],
) -> Option<&'static str>Expand description
If a Bash command matches a mutation pattern and is not scoped to one of
allowed_roots, return the human reason; otherwise None. A command is
treated as scoped when it textually references an allowed root. Output-file
targets are the exception: they are resolved lexically from the process cwd
and every target must fall under an allowed root.