You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.232,
ImprovementsSection of the release
What
When a project's settings set sandbox.bwrapPath, sandbox.ripgrep or sandbox.socatPath, those keys now appear in the summary shown before you trust the folder, and their presence disqualifies the settings file from the shortcut that auto-trusts files containing only environment variables.
Details
The three keys are reported by name, for example sandbox.ripgrep.
A separate check gates the quiet-trust path, so such a file always requires an explicit decision.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed sinceAnthropic's documentation has since written up sandbox.ripgrep, on All settings.| Values taken whole | Takes the value whole from the highest source that sets it, without combining entries or fields from lower sources. When the highest source doesn't set it, takes it whole from the next source down | [`sandbox.credent…settings-referencesee the edit
How sure we are
Two sources agreeTwo things we can check say the same as this entry.
Anthropic's documentation agreesAnthropic's documentation has since written up sandbox.ripgrep, on All settings.
Anthropic's release notes agreeImproved the managed settings approval dialog: shows endpoint URLs, uses clearer wording for telemetry-only changes, skips routine…
