Validate controlled storage roots, initialize runtime volumes safely, and keep generated files private. 校验受控存储根目录，安全初始化运行时卷，并确保生成文件保持私有权限。
infstellar