{"name":"allowUnsandboxedCommands","slug":"allowunsandboxedcommands","family":"setting","title":"Settings keys","noun":"settings key","description":"Windows sandbox decisions now hinge on configured strict mode rather than a runtime toggle.","description_source":"entry","described_by":{"version":"2.1.234","anchor":"windows-sandbox-decisions-keyed-on-configured-strict-mode"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":{"version":"2.1.285","released_at":"2026-09-29 17:32:09","spans":2}},"aliases":[],"entries":[{"version":"2.1.285","anchor":"sandbox-allowunsandboxedcommandsfalse-also-honored-from-a","heading":"Turning off unsandboxed commands is honored from an additional settings source","line":"Setting `allowUnsandboxedCommands` to false is now also read through a second settings lookup","released_at":"2026-09-29 17:32:09","reason":"found in this entry's text, named in this entry"},{"version":"2.1.285","anchor":"sandboxmanaged-settings-descriptions-for-denyread-and-netwo","heading":"New descriptions of how settings files combine for sandbox rules","line":"New text explains that project settings cannot re-open paths denied for reading, and that some project-level network values are ignored","released_at":"2026-09-29 17:32:09","reason":"found in this entry's text"},{"version":"2.1.285","anchor":"sandbox-overrides-locked-description-broadened","heading":"Sandbox lock on unsandboxed commands now described as covering your own settings","line":"`overrides_locked` is now described as true when `allowUnsandboxedCommands: false` comes from a `--settings` file or user settings","released_at":"2026-09-29 17:32:09","reason":"found in this entry's text, named in this entry"},{"version":"2.1.285","anchor":"sandbox-settings-schema-descriptions-expanded","heading":"Sandbox settings carry clearer descriptions","line":"Descriptions for sandbox settings are fuller, including that sandbox.enabled defaults to false; behaviour is unchanged","released_at":"2026-09-29 17:32:09","reason":"found in this entry's text"},{"version":"2.1.282","anchor":"sandbox-project-settings-excludedcommands-are-ignored-whe","heading":"Repositories can no longer exempt commands from a sandbox an admin has locked down","line":"When running commands outside the sandbox is forbidden, `sandbox.excludedCommands` entries in a project's own settings files are ignored","released_at":"2026-09-24 15:56:22","reason":"found in this entry's text"},{"version":"2.1.282","anchor":"sandbox-command-exclusions-are-refused-when-user-settings-ar","heading":"Sandbox exclusions now fail clearly when user settings are turned off","line":"Adding a sandbox command exclusion now fails with an explanation when user settings are off, instead of reporting a success that did nothing","released_at":"2026-09-24 15:56:22","reason":"found in this entry's text"},{"version":"2.1.282","anchor":"sandbox-exclude-command-refused-when-unsandboxed-commands","heading":"Excluding a command from the sandbox can now be refused under a strict setup","line":"When commands outside the sandbox are forbidden, excluding a command is saved to user settings or refused, not saved to local settings","released_at":"2026-09-24 15:56:22","reason":"found in this entry's text, named in this entry"},{"version":"2.1.280","anchor":"three-new-hidden-cli-settings-edit-commands-for-the-vs-code","heading":"Three new hidden CLI settings-edit commands for the VS Code extension","line":"Three new hidden CLI commands let the VS Code extension edit skill, sandbox, and Chrome settings","released_at":"2026-09-22 15:44:39","reason":"found in this entry's text"},{"version":"2.1.280","anchor":"new-skill-state-sandbox-and-claude-in-chrome-settings-writ","heading":"New skill-state, sandbox, and Claude-in-Chrome settings-write APIs","line":"Three new internal settings-write functions handle per-skill state, sandbox mode, and Claude-in-Chrome default-enabled toggle","released_at":"2026-09-22 15:44:39","reason":"found in this entry's text"},{"version":"2.1.251","anchor":"eval-runs-that-grant-a-shell-tool-now-refuse-to-run-without-","heading":"Eval runs that grant a shell tool now refuse to run without a sandbox","line":"Eval runs with a shell tool refuse to start without a sandbox, and hide your credential files.","released_at":"2026-08-28 15:34:26","reason":"found in this entry's text"}],"entries_total":13,"docs":[{"source":"claude-code","path":"agent-sdk\/python","title":"Agent SDK reference - Python","documented":false},{"source":"claude-code","path":"managed-settings","title":"Deploy managed settings","documented":false},{"source":"claude-code","path":"monitoring-usage","title":"Monitoring","documented":false},{"source":"claude-code","path":"sandboxing","title":"Configure the sandboxed Bash tool","documented":false},{"source":"claude-code","path":"settings","title":"Claude Code settings","documented":false},{"source":"claude-code","path":"settings-example","title":"Example settings files","documented":false},{"source":"claude-code","path":"settings-reference","title":"All settings","documented":false}],"docs_total":7,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/allowunsandboxedcommands","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}