What probably matters to youSection of the release
What
A hidden sandbox command group adds install, which sets up the Windows sandbox user and network filters and self-elevates through a single UAC prompt, and status, which prints availability and install state as JSON. Both are registered on every build but refuse to run outside native Windows, when the Windows sandbox is not enabled, or when policy excludes the platform.
Details
install prints a JSON {status, message} result and exits 0 only when status is "ok".
status prints {available, installed, policyLocked, reasons}; policyLocked comes from a check for sandbox settings locked by administrator policy.
Usage
claude plugin sandbox status
claude plugin sandbox install
Evidence
Install the Windows sandbox user and network filters. Self-elevates (one UAC prompt). Prints a JSON {status, message} result and exits 0 only when status is "ok"., Print Windows sandbox availability and install state as JSON {available, installed, policyLocked, reasons}.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
