sandboxinfra

func PersistGrant ¶

func PersistGrant(grant sandboxdomain.Allowed) error

PersistGrant adds an approved grant to the userspace ~/.infer/sandbox.yaml. A write grant goes first so it wins over a narrower read-only entry, a read grant goes last so it never shadows a write entry. A grant inside a config dir is refused and stays session-only.