doc clarification, add makefile

Makefile

@@ -0,0 +1,4 @@
+.PHONY: make
+
+make:
+	cargo build --release

docs/require.md

@@ -17,8 +17,7 @@ A name is one or more dot-separated segments; each segment may contain
 `A–Z a–z 0–9 _ -`. Dots map to directory separators, so `require "db.migrations"`
 looks for `db/migrations.lua`. Paths (`/`, `..`), absolute names, and empty
 segments are rejected — a module can only ever be loaded from inside the
-search roots, which keeps `require` compatible with the sandbox: it is the
+search roots.
-only file access scripts have.
 
 ## Search roots
 

src/stdlib/require.rs

@@ -5,8 +5,7 @@
 //! directory (the CWD in the REPL) followed by the entries of
 //! `$A_INCLUDE_PATHS` — through the standard `?.lua` / `?/init.lua` templates.
 //! Because a name may only contain identifier-like segments, a module can
-//! never name a file outside the roots; `require` is the sandbox's only file
+//! never name a file outside the roots.
-//! access.
 //!
 //! Each file is executed once and its return value cached by canonical path,
 //! so repeated requires — even under different names or through symlinks —