{"version":"2.1.260","anchor":"artifact-read-permission-new-scratchpad-symlink-escape-chec","canonical_anchor":"artifact-read-permission-new-scratchpad-symlink-escape-chec","heading":"Artifact read permission: new scratchpad-symlink escape check","tier":"notice","area":"Artifacts","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.260\/e\/artifact-read-permission-new-scratchpad-symlink-escape-chec","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.260","markdown":"### Artifact read permission: new scratchpad-symlink escape check\n\nArtifact reads now specifically catch symlinks that escape the scratchpad sandbox.\n\nThe Artifact read-tool permission check now separately detects when a published path is a symlink that resolves outside the scratchpad carve-out, rather than treating it the same as a screened\/dangerous name. This case requires user approval too, with its own distinct explanatory message.\n\n- Area: Artifacts\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5"}