A path written as ${dir:<id>} can resolve under the agent's home, and a literal /home path may be it; both escaped the check (hq ADR 0266).