Under the hood
Sandbox rule resolution now merges startup read rules with runtime rules, and reports a startup_read_rules count
What
Claude Code's sandbox (the restricted environment tool calls run inside) now combines a set of startup read rules with the runtime rules it already computed, instead of returning only the runtime set. Telemetry for this process also now reports a startup_read_rules count.
Why
This means the sandbox's effective rule set reflects permissions established at startup as well as those computed while running, so reads that were allowed at startup should no longer be missed when rules are resolved later in a session.