A Bash call using dangerouslyDisableSandbox can still run on a remote device instead of being forced local.
What's wrong with this entry?
The check that decides which tool input fields prevent a tool call from running on a remote device now filters dangerouslyDisableSandbox out of that list, so its presence alone no longer forces local execution.
- The filter is a build-time set containing only that one name plus an empty spread, so further exemptions can be added without changing the surrounding code.
- In the previous build the same helper returned the refusing-field list unfiltered.
dangerouslyDisableSandbox
Strings lifted out of the shipped bundle, so the claim above can be checked against them.