pub fn canonicalize_secure(path: &Path) -> Result<PathBuf>Expand description
SECURITY canonicalize: always resolves symlinks, even under ~/Documents in a
launchd-standalone process. PathJail relies on this to detect symlink jail
escapes (#356 must never weaken the security boundary). A standalone process
only reaches here for a path the client explicitly asked to access, where a
one-time TCC prompt is legitimate — unlike the self-initiated heuristic
probes that safe_canonicalize suppresses.