Function allow_artifacts 

pub fn allow_artifacts(
    schema: &KindSchema,
    share: &Share,
    root: &Path,
    version: &str,
) -> Vec<Artifact>

The shell tool’s allow-lists, one per schema that carries x-majordomus-allow, under the share directory: a repository-relative path when the share is inside the repository, absolute otherwise.