Function ensure_outside_git 

pub fn ensure_outside_git(rendered: &Path, git_dir: &Path) -> Result<()>

Rejects a rendered worktree path that lies inside the repository’s .git directory (spec §6).