Covers the confined preview read: file contents with truncation and binary handling, traversing paths and out-of-checkout symlinks refused, a missing file reading as nothing, and the path guard's rejections.

## Before writing SPEC.md files

Read https://raw.githubusercontent.com/brillout/sdd/refs/heads/main/sdd.md
