Covers the workspace path rules: normalization to a workspace-relative form, and rejection of every path that would escape the workspace while allowing look-alikes that stay inside.

## Before writing SPEC.md files

Read https://raw.githubusercontent.com/brillout/sdd/refs/heads/main/sdd.md
