pub fn retrieve_checked(id: &str) -> Result<String, ArchiveResolveError>Expand description
Resolve a canonical archive ID under the current policy: untrusted handles never supply path components, the read never leaves the store, and source-bound archives are re-admitted against their source.