Thanks for the extra information. Typically for the access you described plugs: [ home, removeable-media ] in a strict mode snap is sufficient, since projects you described (AIUI) are not going to live in toplevel dot directories. Eg, with using plugs like the above, people can put .dunner.yaml and .env files in:
- ~/project1/.dunner.yaml
- ~/code/project2/.dunner.yaml
- /media/$user/$dev/external-code/project3/.dunner.yaml
- …
All that isn’t available is ~/.foo/.dunner.yaml. It seems like this would be sufficient? If not, can you explain the use cases for when projects are stored in top level dot directories?