You'll notice
Each copied file in an artifact publish is now individually permission-checked.
When an artifact publish includes copied files, each source slug is now checked individually via a permission helper with a copySource flag before the batch copy proceeds, in addition to the existing batch verification.