---
id: 6d622384-58cb-4fc6-8775-11400240f9d3
author: null
created: 2026-10-27T19:53:10.427470838Z
---
Fixed in PR #61 (`3df93c3a-bd5e-43f4-bb73-0f3dd886eeb1`, commit `ee6e71b`, merged `e834a46`). CI run `2026-10-27T19-50-04.907798288Z` passed; full `cargo test`, `node --test tests/pages_inbox.test.mjs`, fmt, and clippy green.

`.forge`, `.forge/wiki`, `.forge/releases`, and `.forge/releases/out/<ver>` are resolved with `paths::repo_subdir` and must stay inside the checkout; `sorted_entries` skips symlinks; patch/CI-log reads use `read_text_capped`/`read_bytes_capped` with the 256 KiB cap. Verified external wiki/release artifacts/patch/CI logs and a symlinked `.forge` root never reach `dist/`; tests in `tests/review5_hardening.rs`.