{"version":"2.1.229","anchor":"two-new-sandbox-diagnostics-for-ipv6-misconfiguration","canonical_anchor":"two-new-sandbox-diagnostics-for-ipv6-misconfiguration","heading":"Two new sandbox diagnostics for IPv6 misconfiguration","tier":"use","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.229\/e\/two-new-sandbox-diagnostics-for-ipv6-misconfiguration","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.229","markdown":"### Two new sandbox diagnostics for IPv6 misconfiguration\n\n`claude doctor` now flags badly written IPv6 entries in your sandbox network rules.\n\n**What**\n\n`claude doctor` now flags unbracketed or non-canonical IPv6 addresses in allow and deny network domain entries, and credential `injectHosts` entries that can never match their destination because they are bracketed, carry a zone id, or are not canonically compressed. Each says to rewrite the entry as the bare, canonically-compressed address.\n\n**Evidence**\n\n`Sandbox credential injectHosts entries can never match their destination`\n\n- Area: Sandbox\n- Names: `claude doctor`, `injectHosts`\n- Tier: Use it now\n- Useful: 3\/5\n- Signal: 2\/5"}