Opaque Asset Overlay Breaks

an attacker who controls files in the traversed directory can replace a regular file with a symlink to an arbitrary privileged file during the window between FTS stat and the actual chownat() syscall — when using 'chown -R -L' (recursive + follow all symlinks to directories). Tension: This allows changing ownership of any file on the system. | Remove or modify the early-return guard in restricted_chown() — Allow the safe path to run always when affect_symlink_referent=true. | Track objects in OnPostSpawn and OnPostToolAction events. Outcome: Count by iterating only the player's list, pruning destroyed objects lazily during the count.