{"version":"2.1.252","anchor":"hardened-pinned-tmpdir-write-target-verification-on-macos-w","canonical_anchor":"hardened-pinned-tmpdir-write-target-verification-on-macos-w","heading":"Hardened pinned-tmpdir write-target verification on macOS, with new recovery guidance","tier":"notice","area":"Task Output","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.252\/e\/hardened-pinned-tmpdir-write-target-verification-on-macos-w","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.252","markdown":"### Hardened pinned-tmpdir write-target verification on macOS, with new recovery guidance\n\nmacOS path verification for task output is now more robust against symlink aliasing tricks.\n\nOn macOS, resolving a write target against the pinned tasks directory is now more robust: a new check walks up each segment of the resolved path, confirms it's a directory, and compares device\/inode against the pinned file descriptor to verify the path is a safe, link-free alias of the pinned directory. Refusals are now logged at warn level, and failures during task-output swaps include actionable recovery text.\n\n- Area: Task Output\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5"}