Module paths 

Structs

SandboxConfig

Configuration for sandbox path validation behavior.

SandboxPath

A path that has been validated to be within a SandboxRoot.

SandboxRoot

A validated root directory for sandboxed operations.

Enums

SandboxError

Errors that can occur during path sandbox operations.

Functions

cache_dir

Returns <XCHECKER_HOME>/cache

ensure_dir_all

mkdir -p; treat AlreadyExists as success (removes TOCTTOU races)

link_count

Get the link count for a file.

spec_root

Returns <XCHECKER_HOME>/specs/<spec_id>

xchecker_home

Resolve xchecker home: