Now that macOS 26.1 has been released, this bug now has different behaviour. It still isn't correct. If anything, it's more wrong than it was before. I think you filed this as FB20915052; however, this is also a known issue (r.161870449). As of 26.1, when you encode a security-scoped bookmark to file:///, what you decode will be a bookmark to file:///.nofollow/. So the decode method now succeeds, but the value is wrong. There is a bug here, but it's not exactly what you think. The .nofollow syntax is a new part of the core system that allows components to construct paths that the lower level system guarantees will not be resolved or followed. This makes it simpler to protect against TOC/TOU attacks by allowing one component of the system to resolve a particular path, then pass that path to another component while guaranteeing that the second component won't inadvertently cause a second resolve. Unfortunately, the bug here is that parts of Foundation aren't handling this correctly when the path refere