Function resolve_under_roots 

pub fn resolve_under_roots(
    file_path: &str,
    allowed_dirs: &[String],
) -> Option<PathBuf>

Resolve file_path against the allowed dirs and verify the canonical path lives under at least one of them. Returns None when the file is missing or the path traversal lands outside the sandbox.