{"version":"2.1.257","anchor":"filesystem-symlink-confinement-scan-now-handles-automountnt","canonical_anchor":"filesystem-symlink-confinement-scan-now-handles-automountnt","heading":"Filesystem symlink-confinement scan now handles automount\/NT-namespace paths","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257\/e\/filesystem-symlink-confinement-scan-now-handles-automountnt","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257","markdown":"### Filesystem symlink-confinement scan now handles automount\/NT-namespace paths\n\nThe symlink-confinement scanner now fails closed on automount and NT-namespace path spellings it cannot resolve.\n\nThe workspace-confinement path-traversal scanner, used to validate `.claude` settings paths against symlink escapes, now explicitly detects automount and NT-namespace-transiting path spellings. Since it cannot safely resolve these itself, it now refuses and fails closed rather than attempting to walk them.\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5"}