chore: bump version to 1.15.3 and update the security audit report following core protection and file operation refinements.

lib/core/app_protection.sh

@@ -561,7 +561,7 @@ should_protect_path() {
             ;;
     esac
 
-    # 5. Protect critical preference files
+    # 5. Protect critical preference files and user data
     case "$path" in
         */Library/Preferences/com.apple.dock.plist | */Library/Preferences/com.apple.finder.plist)
             return 0
@@ -570,6 +570,10 @@ should_protect_path() {
         */ByHost/com.apple.bluetooth.* | */ByHost/com.apple.wifi.*)
             return 0
             ;;
+        # iCloud Drive - protect user's cloud synced data
+        */Library/Mobile\ Documents* | */Mobile\ Documents*)
+            return 0
+            ;;
     esac
 
     # 6. Match full path against protected patterns

lib/core/base.sh

@@ -85,6 +85,7 @@ declare -a DEFAULT_WHITELIST_PATTERNS=(
     "$HOME/Library/Caches/JetBrains*"
     "$HOME/Library/Caches/com.jetbrains.toolbox*"
     "$HOME/Library/Caches/com.apple.finder"
+    "$HOME/Library/Mobile Documents*"
     "$FINDER_METADATA_SENTINEL"
 )
 

lib/core/file_ops.sh

@@ -57,6 +57,13 @@ validate_path_for_deletion() {
         return 1
     fi
 
+    # Allow deletion of coresymbolicationd cache (safe system cache that can be rebuilt)
+    case "$path" in
+        /System/Library/Caches/com.apple.coresymbolicationd/data | /System/Library/Caches/com.apple.coresymbolicationd/data/*)
+            return 0
+            ;;
+    esac
+
     # Check path isn't critical system directory
     case "$path" in
         / | /bin | /sbin | /usr | /usr/bin | /usr/sbin | /etc | /var | /System | /System/* | /Library/Extensions)