pub fn build(
blueprint: &Blueprint,
config: &Config,
workdir: &Path,
) -> Option<Result<GrantReport, String>>Expand description
Build the report for blueprint under config.
None when the blueprint declares nothing - the overwhelmingly common case,
where every surface should stay silent. Err when the user’s own grant
list does not compile: that is worth saying out loud, because the same list
is a hard spawn error.
workdir resolves relative entries, exactly as it does at spawn. Callers
outside a run pass the current directory, which is what lev run defaults
to.