- Updated `shared/path_utils.py`: `validate_path_is_safe` now walks up the directory tree to verify the first existing ancestor is not a symlink, preventing bypasses via non-existent intermediate directories. - Updated `tests/test_symlink_attack.py`: Added regression test `test_non_existent_directory_symlink_bypass`.