You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.221,
ImprovementsSection of the release
What
The sandbox system-prompt block substitutes $TMPDIR for the temp directories only on Windows or when the sandbox mode is something other than relaxed; otherwise the temp directories are filtered out of the listed write-allow paths entirely.
Details
Gate is the platform check plus the sandbox mode check, not a config flag.
Relaxed mode on non-Windows: temp paths simply do not appear in the write-allow list shown to the model.
Windows or non-relaxed: the paths collapse into the single $TMPDIR placeholder.
Evidence
$TMPDIR
Strings lifted out of the shipped bundle, so the claim above can be checked against them.