You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.248,
ImprovementsSection of the release
What
The sandbox layer raises named errors instead of generic ones, so a failure says which stage broke: init, an unavailable bridge, no sandbox for this shell, a command too long, or a policy refusal carrying its own reason.
Details
Ships with a schema for per-host network policy entries: an action of allow or deny plus optional HTTP methods.
Evidence
SandboxPolicyRefusalError
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
