Under the hood
Bash remote execution lists which input fields decide whether an existing permission still covers a call.
The Bash tool's remote-execution config now includes a decidingInputFields list covering command, run_in_background, and dangerouslyDisableSandbox, used to decide whether an existing remote-execution permission still applies to a given call.
Names in the bundlerun_in_backgrounddangerouslyDisableSandbox
Documented inclaude-code/agent-sdk/python
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up dangerouslyDisableSandbox, on Monitoring.
* For Bash tool: includes `bash_command`, `full_command`, `timeout`, `description`, and `dangerouslyDisableSandbox`, plus `git_commit_id` and `git_branch` when a `git commit` command succeeds. `git_commit_id` is the full commit SHA when th…monitoring-usage see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up dangerouslyDisableSandbox, on Monitoring.