What
The safety scanner that Claude Code runs before uploading a working tree already refused uploads containing 'forged' paths or 'alias' (8.3 short-name) paths. It now also refuses uploads in three more cases:
- a 'same-bytes' entry: a file in the index that is byte-for-byte identical to a file meant to stay local, placed there by something other than the upload process itself
- a 'hardlinked' changed file: a file that is a second hard link to something outside the tracked tree
- an 'unexamined' file: a path that could not be safely inspected
Why
These checks close off ways a local-only file's contents could end up uploaded indirectly, either by being duplicated under a different name, linked from outside the tree, or slipping past inspection.