What
The check that decides which tool input fields prevent a tool call from running on a remote device now filters dangerouslyDisableSandbox out of that list, so its presence alone no longer forces local execution.
Details
- The filter is a build-time set containing only that one name plus an empty spread, so further exemptions can be added without changing the surrounding code.
- In the previous build the same helper returned the refusing-field list unfiltered.
Evidence
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundledangerouslyDisableSandbox
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up dangerouslyDisableSandbox, on Monitoring.
* For Bash tool: includes `bash_command`, `full_command`, `timeout`, `description`, and `dangerouslyDisableSandbox`, plus `git_commit_id` and `git_branch` when a `git commit` command succeeds. `git_commit_id` is the full commit SHA when th…monitoring-usage see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up dangerouslyDisableSandbox, on Monitoring.