Folder permissions

The runtime reads what you grant and nothing else. That is enforced by what it is given, not by a setting you have to trust.

• Folders are granted explicitly, one at a time. Nothing is read until you do.
• Under Docker, documents are mounted read-only: the runtime cannot write to them even if it tried.
• Symbolic links are not followed, so a link cannot walk the runtime out of the folder you granted.
• System directories are refused outright.
• Your original documents are never modified. The index is a separate thing, and removing it leaves them alone.

Revoking a folder does not yet remove its index by itself. Removing the collection does. We would rather say that than describe a behaviour we have not built.