Under the hood
Sandbox network classifier's internal enable-check was simplified from several conditions to two
What
The internal logic that decides whether Claude Code's sandbox network-egress classifier (the mechanism that restricts which network destinations a sandboxed process can reach) applies was reduced from checking several separate conditions down to two. A related mode check used at multiple call sites was also renamed as part of this cleanup.
Why
This is an internal simplification of how the sandbox decides when to apply network classification; it should make that decision path easier to follow, though the finding doesn't indicate any change in which sessions actually get sandboxed network restrictions.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Whether this changes which sessions actually get the network classifier applied, or is purely an internal refactor, is not stated.