{"version":"2.1.259","anchor":"new-sandbox-refusal-message-for-protected-credential-directo","canonical_anchor":"new-sandbox-refusal-message-for-protected-credential-directo","heading":"New sandbox refusal message for protected credential directories","tier":"notice","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.259\/e\/new-sandbox-refusal-message-for-protected-credential-directo","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.259","markdown":"### New sandbox refusal message for protected credential directories\n\nClaude now refuses with a clear message when the sandbox can't run a command while still protecting credential files.\n\nA new `refused.sandbox_custody` message covers the case where a local sandbox cannot run a command while also protecting its credential files. Claude Code now refuses to run and explains the situation, instead of silently failing or running the command unprotected.\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}