M

Author

M. Patel

Backend dev. Writes when something breaks. Currently shipping a B2B agent product with one cofounder.

AI dev workflow

Claude Code Security in 2026: What GhostApproval Changed

GhostApproval showed my Claude Code approval box a fake filename while the write went to my SSH keys. Anthropic called it outside its threat model, so the fix was mine. Here is the field log: what the symlink flaw does, who patched, and the three setup changes that held.

6 min read77