The path of a generated file inside the workspace root. The shared confinement helper proves
that the joined path stays inside the root: a name that climbs out with "..", a path that
points elsewhere, or a folder that is a symbolic link is refused before anything is written.
The path keeps the spelling of the root the caller gave, so the file that is written is the
one the caller reports.
The path of a generated file inside the workspace root. The shared confinement helper proves that the joined path stays inside the root: a name that climbs out with "..", a path that points elsewhere, or a folder that is a symbolic link is refused before anything is written. The path keeps the spelling of the root the caller gave, so the file that is written is the one the caller reports.