You'll notice
Useful3 Signal2
When a command writes several paths, the strongest denial wins instead of the first one found.
What's wrong with this entry?
Anonymous. No account, no email.
What
When a command writes to several paths, the checker now collects every blocking result and returns one that cannot be waived by the permission classifier if there is one, instead of stopping at the first hit found. An older redirection and process-substitution checker was removed in the same change.
Evidence
classifierApprovable
Strings lifted out of the shipped bundle, so the claim above can be checked against them.