A new refused.sandbox_custody message covers the case where a local sandbox cannot run a command while also protecting its credential files. Claude Code now refuses to run and explains the situation, instead of silently failing or running the command unprotected.
New sandbox refusal message for protected credential directories
Claude now refuses with a clear message when the sandbox can't run a command while still protecting credential files.
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.259,
ImprovementsSection of the release