{"version":"2.1.193","anchor":"write-path-symlink-verification","canonical_anchor":"write-path-symlink-verification","heading":"Write-Path Symlink Verification","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.193\/e\/write-path-symlink-verification","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.193","markdown":"### Write-Path Symlink Verification\n\n**What**\n\nWhen writing a file, Claude Code now verifies that the parent-directory symlink resolution has not changed between when permission was checked and when the write actually happens.\n\n**Details**\n\n- If symlinks shift between the permission check and the write, the write is blocked with: \"Refusing to write X: its parent-directory symlink resolution changed after permission was checked.\"\n- The approved directory list is stashed at check-time (keyed by tool use ID) and compared at write-time, preventing TOCTOU races where a symlink is replaced after approval.\n\n**Evidence**\n\nNew guard logic (search for `\"its parent-directory symlink resolution changed after permission was checked\"`)"}