What's changed
- Support nested read-only, read-write, and copy-on-write grants with the most specific path taking precedence.
- Allow a read-write parent grant to cover the sandbox working directory and sibling repositories.
- Reject conflicting access modes for the same path and undefined mode values.
- Protect nested grant capture state from sandbox access and clean it up safely after setup failures.
- Reject copy-on-write roots containing mounted subtrees to avoid inconsistent views and exposure of hidden host content.
Full changelog: v0.1.0...v0.2.0