The shell's current working directory reported back after commands is now validated against several conditions before being trusted. Ignored cases are logged at warn level:
- Contains a dot-segment (
/./or/../) - Is a network path (UNC path on Windows)
- Crosses a foreign automount host
- Resolves through a network symlink or junction
- Is not an absolute path
- Is not a directory (stat check)
- Is not readable
Evidence
"shell cwd read-back contains a dot-segment; ignoring" (search for "dwu")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.