My guard asserted the output path was a scratch directory. The row landed in the permanent log anyway.

Automated excerpt

Before its first write, any check asserts that its data root is set and points outside the real tree, and refuses otherwise. Months later a reviewer tool minted a row into that same permanent log. The same gap is everywhere: a path string -> symlinks, junctions, .. -> a different inode Every row is the same failure waiting.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.