package com.correx.core.toolintent

import java.nio.file.Path

/**
 * Workspace containment policy shared with the future in-place write-seam
 * (sandboxing thread). [workspaceRoot] is the only writable/allowed tree;
 * [privilegedLocations] are hard-deny targets (system dirs).
 */
data class WorkspacePolicy(
    val workspaceRoot: Path,
    val privilegedLocations: List<Path> = emptyList(),
)
