The whole hunk
from line 598, old and new numbered
/
lines
from line 598
598598* shell-execution settings such as `apiKeyHelper` and `statusLine`
599599* the sandbox binary settings `sandbox.bwrapPath`, `sandbox.socatPath`, and `sandbox.ripgrep`
600600* Sandbox settings that intercept traffic, inject credentials, or weaken isolation, such as `sandbox.network.tlsTerminate` and the proxy port settings. [Security approval dialogs](/docs/en/server-managed-settings#security-approval-dialogs) lists them all.
601* managed CLAUDE.md content
602601
603602[Approval memory](/docs/en/server-managed-settings#approval-memory) covers how long an approval lasts and when the dialog appears again.
604603