You'll notice
File-publish source verification now has a dedicated refusal for files it can't safely confirm, guarding against symlink spoofing
What
Before publishing a staged file, Claude Code verifies that the source file is what it appears to be. This check now uses a dedicated refusal response when a file's path can't be safely verified, for example because a symbolic or hard link makes the true source unclear. Previously this case was handled by a separate, duplicated deny object.
Why
This hardens the publish path against symlink or hardlink tricks that could otherwise be used to substitute a different file than the one that was actually staged.