What's wrong with this entry?
When writing a file, Claude Code now verifies that the parent-directory symlink resolution has not changed between when permission was checked and when the write actually happens.
- If symlinks shift between the permission check and the write, the write is blocked with: "Refusing to write X: its parent-directory symlink resolution changed after permission was checked."
- The approved directory list is stashed at check-time (keyed by tool use ID) and compared at write-time, preventing TOCTOU races where a symlink is replaced after approval.
New guard logic (search for "its parent-directory symlink resolution changed after permission was checked")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.