jochen
c4d9b515ea
A path inside a container is not a fact about the machine — /run/secrets and the directory a server keeps its data in are the software's own contract, true in any mesh that runs it. Only the host side of a mount names where it landed. The first sweep matched path-shaped strings, so it counted both halves of every mount and every in-container location a value mentioned: 798. Counted by role — directory and file resources, the host side of mounts, accesses, and the targets of binds, grants, receives and secrets — it is 698 across 70 definitions.