WSL Workspace Connector

Key features

• bash toolruns inside the WSL distribution as the configured username (empty = the distro default user, often root), so it can read and write anywhere in the distro.
• The Windows ACL sandbox cannot wrap wsl.exe — its children run on the Linux kernel side — so WSL itself is the isolation boundary and the DSH file policy does not apply to bash.
• File tools (read/write/edit)go through the Windows-side WSL 9P share and run under the DSH file policy.
• Under workspace-write, reads work anywhere but writes are restricted to the session workspace
• switch the file policy to danger-full-access to also allow writes outside it.