Trusting your home folder no longer silently trusts every project beneath it.
What's wrong with this entry?
Deciding whether you have already accepted the trust prompt for a directory used to search every parent folder up to the filesystem root, so trusting something like your home directory silently trusted everything beneath it. The search is now bounded to the enclosing repository root and returns "not trusted" as soon as it would step above it.
- The bound is a prefix check against the resolved repository root, so an accepted ancestor outside that root is rejected.
- The old
skipCanonicalKeyProbeoption is renamedadvisoryNoFsProbeand still performs the unbounded walk, without touching the filesystem.
hasTrustDialogAccepted
Strings lifted out of the shipped bundle, so the claim above can be checked against them.