A filesystem-grant-free sandbox mode exists with no visible caller in this build.
What
The sandbox configuration builder gained a mode that suppresses most filesystem grants, leaving a policy-only sandbox. Nothing in the code read for this build shows what turns the mode on.
Details
- When active it drops
permissions.additionalDirectories, allow entries derived from permission rules, andsandbox.filesystem.allowWrite/allowReadentries coming from anything other than a policy settings source. - It also drops the network fields
allowUnixSockets,allowLocalBindingandhttpProxyPort.
Evidence
...(u ? [] : e.permissions?.additionalDirectories || [])
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agree
Fixed an additionalDirectories entry containing a null byte crashing startup, or breaking /add-dir and later settings updates when it came…