Function report 

pub fn report(path: &Path) -> RootAccessReport

Describes a runner root’s access control without changing it.

This is what a configured custom root gets, and what service status reports about the default one. It creates nothing, permissions nothing, and is safe to call on a path this product does not own.