Sandbox instructions now hide or collapse temp directory paths depending on your platform and sandbox mode.
What's wrong with this entry?
The sandbox system-prompt block substitutes $TMPDIR for the temp directories only on Windows or when the sandbox mode is something other than relaxed; otherwise the temp directories are filtered out of the listed write-allow paths entirely.
- Gate is the platform check plus the sandbox mode check, not a config flag.
- Relaxed mode on non-Windows: temp paths simply do not appear in the write-allow list shown to the model.
- Windows or non-relaxed: the paths collapse into the single
$TMPDIRplaceholder.
$TMPDIR
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.236
macOS sandbox re-applies read and delete denials inside writable folders
Both mention sandbox
-
v2.1.236
Sandbox proxy no longer writes to sockets that have gone away
Both mention sandbox
-
v2.1.236
IPv6 hosts through the proxy
Both mention sandbox