Private/Assert-NSPEntraPairingStatePath.ps1

function Assert-NSPEntraPairingStatePath {
    <#
    .SYNOPSIS
        Refuses to write a queue inside a Git checkout. A queue holds PII.
    #>

    [CmdletBinding()]
    param([Parameter(Mandatory)][string]$Path)

    $folder = Split-Path -Parent ([IO.Path]::GetFullPath($Path))
    while ($folder) {
        if (Test-Path -LiteralPath (Join-Path $folder '.git')) {
            throw "'$Path' is inside the Git checkout '$folder'. A queue holds personal data and stays out of Git. Choose a path outside it."
        }
        $parent = Split-Path -Parent $folder
        if ($parent -eq $folder) { break }
        $folder = $parent
    }
}