diff --git a/.github/scripts/check-host-boundary.sh b/.github/scripts/check-host-boundary.sh
index b68bdfab..e8cb654f 100755
--- a/.github/scripts/check-host-boundary.sh
+++ b/.github/scripts/check-host-boundary.sh
@@ -92,6 +92,11 @@ src/terminal/search.rs|.is_absolute()
 # can be handed a path. Always `std::env::temp_dir()` on this machine.
 src/terminal/view.rs|std::fs::create_dir_all
 src/terminal/view.rs|std::fs::write
+# The source side of a paste/drop upload into a remote pane: the paths the
+# clipboard or desktop hands over are on this machine by construction, so
+# asking whether one is a directory is a local read. The remote side of the
+# copy goes over SFTP.
+src/terminal/view.rs|std::fs::metadata
 
 # Asking whether a file would be *launched* rather than shown before handing it
 # to the desktop opener. Only reachable behind `host_id.is_local()` — a path on