diff --git a/CLI/cmux.swift b/CLI/cmux.swift
index 2ad2a8b9..cc3ee89e 100644
--- a/CLI/cmux.swift
+++ b/CLI/cmux.swift
@@ -8327,8 +8327,8 @@ struct CMUXCLI {
         }
 
         let searchRoots = [
-            executableURL.deletingLastPathComponent(),
-            executableURL.deletingLastPathComponent().deletingLastPathComponent()
+            executableURL.deletingLastPathComponent().standardizedFileURL,
+            executableURL.deletingLastPathComponent().deletingLastPathComponent().standardizedFileURL
         ]
         for root in searchRoots {
             guard let entries = fileManager.enumerator(
diff --git a/tests/test_cli_version_memory_guard.py b/tests/test_cli_version_memory_guard.py
index 0a1c5bd1..6252ea5e 100644
--- a/tests/test_cli_version_memory_guard.py
+++ b/tests/test_cli_version_memory_guard.py
@@ -83,6 +83,8 @@ def build_fixture(root: str, cli_path: str) -> str:
     with open(os.path.join(contents_path, "Info.plist"), "wb") as handle:
         plistlib.dump(info, handle)
 
+    # Regular files are enough here because the fallback scan keys off the
+    # ".app" suffix before it ever tries to inspect bundle contents.
     for index in range(JUNK_APP_COUNT):
         open(os.path.join(resources_path, f"junk-{index:05d}.app"), "wb").close()