boost

No clear malware behavior is present. The principal security issue is that --restore accepts an unauthenticated snapshot whose path fields can direct destructive filesystem operations outside the intended user and archive directories when used with --apply. Treat restore files as trusted-only and constrain all resolved paths before applying.