Path resolution across file tools and git pointer parsing now validates symlinks more carefully: network automount paths are flagged, cross-filesystem symlinks outside the project root are rejected, and git .git pointer files that are themselves symlinks or point outside the project are blocked.
Evidence
Symlink-aware path resolver (search for "is a network automount path" and ".git pointer file is a symlink")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.