Function may_probe_path 

pub fn may_probe_path(path: &Path) -> bool

Returns true when this process may stat/read_dir/canonicalize path without risking a macOS TCC privacy prompt in lean-ctx’s name.

Heuristic call sites (project-marker probes, session/root matching) must consult this before touching paths from persisted state; security boundaries (PathJail) are exempt — they only ever canonicalize paths the client explicitly asked to access, in which case a prompt is legitimate.