You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
SandboxArea: what it touches
New FeaturesKind: in v2.1.247,
New FeaturesSection of the release
What
The sandbox description sent with each turn is re-rendered and compared with the last one in the transcript, so policy changes reach the model while the session is running. When sandboxing is turned off, the description goes empty and the model is told that the command sandbox has been disabled and the earlier instructions no longer apply.
Details
The description is produced only when the Bash tool is available and sandboxing is enabled locally; no remote flag is involved.
The disabled notice is a fixed sentence built around the Bash tool name.
The attachment type is stripped before token-count caching, as the agent listing delta already was.
Evidence
command sandbox has been disabled. Commands now run without sandbox restrictions; the earlier sandbox instructions no longer apply.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
