Module filesystem 

Safe headless filesystem runtime adapter.

Structs

FilesystemLimits

Bounds applied by the headless filesystem adapter.

FilesystemWorkspace

A safe headless adapter rooted at one canonical workspace directory.

Functions

is_public_evidence_path

Classify recorded paths before exposing change evidence. This lexical filter does not authorize filesystem access; reads still require bound directory handles.