A trailing slash in your host credentials file path no longer changes whether the rule matches.
What's wrong with this entry?
The file named by CLAUDE_CODE_HOST_CREDS_FILE is now run through the same path normaliser as sandbox allow/deny entries and permission deny rules, so a trailing slash no longer changes whether the rule matches.
- Sandbox deny and allow filesystem entries, permission deny rules and the host credentials path all share one trailing-separator-aware normaliser when sandbox rules are built.
- Previously each of these handled paths its own way.
CLAUDE_CODE_HOST_CREDS_FILE
Strings lifted out of the shipped bundle, so the claim above can be checked against them.