Path traversal via symlinks with .. segments is now detected correctly in the git-controlled directory check. The old implementation could miss cases where a symlink in the path was followed by a .. component that escaped the intended root. (search for "would overwrite tracked literal" near the symlink traversal logic)
The fetchSession error log is now counter-based, reporting "N times in a row" rather than always showing a fixed count. Previously the message was hardcoded as "10 times in a row." (search for "fetchSession failed")
Bridge setMode commands that are rejected (invalid mode) now fall back to 'default' mode with a warning instead of leaving the bridge in an indeterminate state. (search for "bridge setMode '" and "rejected (")
