So a couple things
- since this is a snap, the -snap suffix on the name is redundant- why not just call it terragrunt?
- Can you please provide more details on what filesystem access is required (what files, are these hardcoded or specified by the user, do the need read-only access or write / execute as well etc) - and can you also let us know which of the supported categories for classic confinement that terragrunt fits into - see Process for reviewing classic confinement snaps