Post #3362765

however because everything in claude code is implemented in 5 million different ways, those protections are a completely orthogonal set of codepaths from how CLAUDE.md files are read. conversely, the file read tool seems to be completely naive to symlinks while the CLAUDE.md reader is not See, if a person had written the system and had some kind of reasonable design or whatever then this kind of vulnerability may have turned into a full skeleton key to crack the entire system wide open. Instead, the superior machine intelligence ensures that all components will break in slightly different ways under slightly different conditions, thus ensuring no single fault can allow an adversary to completely compromise the system, provided of course that they can’t just inject a prompt somewhere because as we all know that’s a structural vulnerability that can completely crack the system open.