You'll notice
Diagnostics now report whether autoAllowBashIfSandboxed is on and where that value came from
What
A settings snapshot used for diagnostics and telemetry now reports whether the autoAllowBashIfSandboxed setting is enabled, along with where that value was set from: unsupported, policy, default, or settings.
Why
This makes it easier to see, when diagnosing a session, whether bash commands are being auto-allowed because they're sandboxed, and whether that behavior comes from a policy, a default, or the user's own settings.
Names in the bundleautoAllowBashIfSandboxed
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up autoAllowBashIfSandboxed, on Agent SDK reference - Python.
| `autoAllowBashIfSandboxed` | `bool` | `True` | Auto-approve bash commands when sandbox is enabled |agent-sdk/python see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up autoAllowBashIfSandboxed, on Agent SDK reference - Python.