When the filesystem sandbox (the mechanism that confines what files a command can read or write) is set to 'relaxed' mode, the permission-prompt summary no longer lists specific allowed and denied directories. Instead it plainly states that the sandbox does not confine commands to particular directories for reading or writing. Configured working and deny paths are still shown, but only as informational context. The summary also reminds Claude to leave Claude Code's own configuration, hooks, and skills, as well as git's hooks and configuration, untouched unless specifically asked to change them.
A directory list implied restrictions that relaxed mode doesn't actually enforce; the new wording states plainly what relaxed mode does and doesn't do, while still warning against touching sensitive configuration.