"both bugs point to the same bigger problem. The IDE, the language server, the assistant, and the project folder are all negotiating what is trusted. And that boundary is messy. It includes config, symlinks, workspace trust, MCP server configuration, environment variables, local files, cloud credentials, and whatever the assistant or plugin can reach."