pub fn sanitize_for_project(hc: &HarnessConfig) -> (HarnessConfig, Vec<String>)Expand description
§3.3’s monotonic-tightening rule for a project-layer HarnessConfig:
strip/narrow everything an untrusted repo must not control, recording
what it touched. Mirrors userconfig.rs::sanitized_for_project’s
contract on the new unified schema (see the module note above).