You'll notice
The symlink-confinement scanner now fails closed on automount and NT-namespace path spellings it cannot resolve.
The workspace-confinement path-traversal scanner, used to validate .claude settings paths against symlink escapes, now explicitly detects automount and NT-namespace-transiting path spellings. Since it cannot safely resolve these itself, it now refuses and fails closed rather than attempting to walk them.