Changelog 04c863a test: compare flipCase results with OS-native separators 3ded167 fix: authorize every path an operation touches 081d204 docs: add CLAUDE.md