Claude Code's Read tool (which opens files) and Glob tool (which finds files by name pattern) now flag paths that start with any of these macOS special prefixes:
/.vol
/.file
/.nofollow
/.resolve
The macOS system itself decides where these paths lead, and they could reach a network drive. Reading or searching them now asks for your approval instead of going ahead automatically.
Why
This is an extra safety layer. It stops these unusual paths from being used to reach files, including ones on network drives, that Claude would otherwise need permission to open.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeFixed permission dialogs and attachment checks reading a path under macOS's /.vol, /.nofollow or /.resolve (which can reach a network mount)…
