What
When building the sandbox policy, Claude Code now checks whether each settings source is enabled. Permission rules and sandbox.filesystem entries from a disabled source are skipped and logged; disabled project and local sources also have their sandbox.credentials entries dropped. Previously those entries were applied anyway.
Details
- Applies on every sandbox policy build, with no flag to restore the old behaviour.
- The skip is recorded at info level, naming the disabled source.
Evidence
Sandbox: ignoring permission rules and sandbox.filesystem entries from disabled setting source
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundlesandbox.filesystemsandbox.credentials
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Added since
A small documentation edit on Configure the sandboxed Bash tool touched a line naming sandbox.filesystem after this was published.
You can also deny write or read access using `sandbox.filesystem.denyWrite` and `sandbox.filesystem.denyRead`, and re-allow specific paths within a denied region using `sandbox.filesystem.allowRead`. When read rules overlap, the rule with …sandboxing see the edit
Confirmed since
Anthropic's documentation has since written up sandbox.credentials, on All settings.
| Values taken whole | Takes the value whole from the highest source that sets it, without combining entries or fields from lower sources. When the highest source doesn't set it, takes it whole from the next source down | [`sandbox.credent…settings-reference see the edit
Added since
A small documentation edit on Configure server-managed settings touched a line naming sandbox.credentials after this was published.
An approval for `sandbox.credentials` or `sandbox.network.tlsTerminate` also covers the [`sandbox.network.allowedDomains`](/docs/en/settings-reference#sandbox-network-alloweddomains) entries in those same delivered settings, because both s…server-managed-settings see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
A small documentation edit on Configure server-managed settings touched a line naming sandbox.credentials after this was published.