Under the hood
Useful2 Signal3
Each turn now tells Claude which sandbox it is running in, re-sent only when it changes.
What's wrong with this entry?
Anonymous. No account, no email.
What
A new piece of per-turn context, computed from the active tool set, tells the model what sandbox it is running in. It is added on both the queued-prompt path and the per-turn attachment list, and is compared against the previous one so it is only re-sent when it changes.
Details
- It sits alongside the existing date-change and agent-listing-delta context items, and is handled the same way as the agent listing when diffing.
- Nothing in the code shown gates the attachment itself.
Evidence
fi("sandbox_instructions", () => Promise.resolve(QQ(t.options.tools, o)))
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.236
macOS sandbox re-applies read and delete denials inside writable folders
Both mention sandbox
-
v2.1.236
Sandbox proxy no longer writes to sockets that have gone away
Both mention sandbox
-
v2.1.236
IPv6 hosts through the proxy
Both mention sandbox