Archive member names need to be checked before extraction. Implement the path policy so names that could escape the intended root are rejected without treating misleading string prefixes as safe paths.
Build the implementation in Rust under /app, with /app/run.sh as its entry point. Read one JSON request from standard input and write one JSON result to standard output. Input is a list of path strings. Return accepted and rejected preserving original order and duplicates. Accept only nonempty relative POSIX paths with no backslash, colon, NUL or empty, dot, dot-dot components; directories ending in / are rejected too. Decode percent escapes once before validation, rejecting any remaining percent sign to prevent ambiguous double decoding. Return original path strings in the result. This task models lexical screening only; filesystem symlink handling is outside its contract.
Reject inputs that violate an explicit validation rule with exit status 2, no standard output, and {"error":"invalid_input"} on standard error. For valid input, exit with status 0. Keep the implementation reusable for new inputs; it must work offline and must not depend on the example data being the only data it receives.
Repair or replace the unfinished /app/run.sh and add source files under /app. Malformed JSON must use the same invalid-input response. Do not read /tests or /oracle from the application.