The writes the runtime may actually perform, given what a hook returned.
Defence in depth, and the threat is specific: record throws on a bad
key, but nothing stops a hook returning a hand-built {kind:"record", name: "../../settings"} object literal that never went through the constructor.
Everything that is not a well-formed write with a valid key is dropped here,
before any path is computed from it.
The writes the runtime may actually perform, given what a hook returned.
Defence in depth, and the threat is specific: record throws on a bad key, but nothing stops a hook returning a hand-built
{kind:"record", name: "../../settings"}object literal that never went through the constructor. Everything that is not a well-formed write with a valid key is dropped here, before any path is computed from it.