Under the hood
Useful3 Signal3
Artifact sandbox inputs are cleaned inside the sandbox, so host checks never read through sandbox-controlled traps.
What's wrong with this entry?
Anonymous. No account, no email.
What
Calls out of the artifact sandbox into Claude Code can now run a sanitize step inside the sandbox before the host side sees the value, so host code never reads through sandbox-controlled property traps while validating or checking consent.
Details
- Sanitize failures, including length caps and unreadable values, take the wrapper's normal error path.
- Marked in source as a security-hardening change.
Evidence
INTAKE sanitize, VM-side
Strings lifted out of the shipped bundle, so the claim above can be checked against them.