fix: exercise semantic safety and reject file symlinks