Bash commands now reuse the network access list computed when permission was checked, instead of recalculating it at run time
When Claude Code runs a shell command inside its sandbox (a restricted environment that limits what a command can access), it now carries forward the network access list that was already worked out during the permission check for that command, and hands it directly to the process that actually runs the command. This is done through a small cache (holding up to 256 entries) keyed to the specific command, so the cached list is only reused if the command text still matches.
This keeps the network rules used at execution time consistent with the ones the user (or policy) already approved, rather than recomputing them separately and risking a mismatch.