Source Intelligence

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

All of v2.1.242 Home All releases olderv2.1.241 v2.1.243newer
Claude Code v2.1.242

Sandbox requirements attached to a remote call are enforced before Bash spawns

You'll notice
Useful3 Signal4
Sandbox

Commands arriving with sandbox constraints are refused unless a fully confining sandbox exists.

What

When a call arrives with constraints attached, Bash now refuses to run it unless a fully confining sandbox is available, and refuses outright if the constraints carry extra file read/write deny lists, which cannot yet be enforced locally. Both refusals emit sandbox telemetry and the command never starts.

Details
  • Only applies when the incoming call actually carries constraints; ordinary local Bash calls are unaffected.
  • The deny-list refusal is unconditional rather than degrading to an unsandboxed run.
Evidence

This call carries file deny lists that cannot be enforced here yet; the command was not run.

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.242 →