DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.
Path resolution across file tools and git pointer parsing now validates symlinks more carefully: network automount paths are flagged, cross-filesystem symlinks outside the project root are rejected, and git .git pointer files that are themselves symlinks or point outside the project are blocked.
Evidence
Symlink-aware path resolver (search for "is a network automount path" and ".git pointer file is a symlink")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.