Two new trust checks resolve a project through the storage backend, and nothing calls them.
A storage-backend workspace-trust probe exists but is uncalled; live trust checks still use local paths.
What's wrong with this entry?
Two new functions resolve whether a project is trusted by locating its git root through the storage backend rather than the local filesystem, one returning early unless the backend reports it is serving the workspace itself. Nothing in the bundle calls either; the live trust checks still use the local path helpers.
- One variant goes through the backend's host-file layer, the other is a plain local-path equivalent.
- Same theme as other changes here that move workspace access behind the storage backend.
e.hostFiles.serving("workspace") !== "host"
Strings lifted out of the shipped bundle, so the claim above can be checked against them.