namespace StellaOps.Bench.PolicyEngine; internal static class PathUtilities { public static bool IsWithinRoot(string root, string candidate) { var relative = Path.GetRelativePath(root, candidate); if (string.IsNullOrEmpty(relative) || relative == ".") { return true; } return !relative.StartsWith("..", StringComparison.Ordinal) && !Path.IsPathRooted(relative); } }