What
Before relocating the local settings consent store to the canonical git repository root, Claude now verifies via POSIX uid semantics that the user owns the root directory, its .git entry, and its .claude entry.
Details
- If any of those entries are owned by a different user, the store stays at the current working directory (the pre-canonicalization behavior) and a warning is logged.
- On platforms without uid semantics (Windows), canonicalization is skipped and logged as POSIX-only.
- Protects against shared-repository scenarios where a foreign-owned repo root could have its consent state hijacked.
Evidence
Ownership check log messages (search for "localSettings: not canonicalizing the consent store to")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.