GhostApproval: When the AI Approval Prompt Lies

A symlink attack against AI coding agents turns human-in-the-loop confirmation dialogs into a consent bypass, and the agent knows it’s lying.