You'll notice
Useful3 Signal3
Diffs now explain that withheld hunks are held by a provenance check stricter than read permissions.
What's wrong with this entry?
Anonymous. No account, no email.
What
The diff tool's restricted field now states that withheld hunks are held back by a content-provenance check stricter than read permissions: symlinked and hardlinked files in a worktree are refused here even where reading them is allowed. Statistics for those files stay visible.
Evidence
symlink and hardlinked worktree files are refused here even where read_file serves them
Strings lifted out of the shipped bundle, so the claim above can be checked against them.