Development record

abcd ignores a ~/.abcd.noindex/filter-roots file that fails its ownership, mode or symlink checks without saying so: the core has no output channel, so a checkout its owner listed to keep its content filters running silently gets them switched off, and the reads that depend on them (an LFS checkout's status) degrade with no notice. Found in lane X round 3 of the security-drain-2026-10-09 run.