Repository boundary Make changes only through paths inside this checkout. ~/.config and ~/.pi may resolve here; use repository paths so scope is explicit.