{"version":"2.1.271","anchor":"sandboxed-command-network-lists-now-default-enabled-tengu-f","canonical_anchor":"sandboxed-command-network-lists-now-default-enabled-tengu-f","heading":"Sandboxed command network lists now default-enabled (tengu_flickering_rain)","tier":"soon","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.271\/e\/sandboxed-command-network-lists-now-default-enabled-tengu-f","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.271","markdown":"### Sandboxed command network lists now default-enabled (tengu_flickering_rain)\n\nSandboxed command network allow\/deny lists now default to enabled if the controlling flag can't be read\n\n**Unclear.** The `tengu_flickering_rain` gate itself currently reads off for this site's account and for the anonymous baseline, but no reading has been taken under this release, so it's unclear what this build actually ships with.\n\n**What**\n\nThe check that decides whether to register network allow\/deny lists for sandboxed commands (`commandNetworkListsOffered`) now looks at a flag called `tengu_flickering_rain`, and falls back to enabling the lists (`true`) if that flag can't be read. Previously this fell back to a different flag that defaulted to off.\n\n**Why**\n\nIf the flag lookup ever fails or is unavailable, sandboxed commands will now have network allow\/deny lists registered by default instead of going without them.\n\n- Flag `tengu_flickering_rain`: On for this account, and not off by default (read for one account on one subscription tier against v2.1.271; this account: on, anonymous baseline: on, compiled default: on) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Sandbox\n- Tier: Nothing to try yet\n- Useful: 2\/5\n- Signal: 3\/5\n- Present in the build but not switched on"}