Keep writes out of sensitive dotfiles and claude folders by checking canonicalized basenames before granting permission.