Function resolves_locally 

pub fn resolves_locally(path: &Path) -> bool

Whether resolving path stays on local storage and cannot climb out of what it names: no .. components and, on Windows, no UNC, verbatim-UNC, or device-namespace prefix. Resolving such a path would make the daemon open a network share or device while merely checking it, so a scoped principal’s path is tested lexically first and refused without being resolved.