Under the hood
Auto-mode's classifier now runs on tools that declare per-call network allow/deny lists, instead of skipping them
What
In accept-edits mode, Claude Code's auto-mode classifier normally has a fast path that lets certain tool calls through without full classification. That fast path now also checks whether a tool declares sandbox network lists (allow or deny lists of network hosts) for a given call. If it does, the call no longer takes the fast path and instead goes through the classifier as normal.
Why
This means tool calls that carry their own per-call network restrictions get properly reviewed by the classifier rather than being waved through automatically, which matters for anything that reaches out over the network.