ipmb

(version 1)
(allow default)
(debug deny)

(define (home-subpath home-relative-subpath)
  ;; should be able to use something like (param "HOME_DIR") here, but it's not working for me
  (subpath (string-append "/Users/pete" home-relative-subpath)))

;; can't write anywhere or read /Users by default
(deny file-write*)