Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
Internal ChangesKind: in v2.1.277,
Internal ChangesSection of the release
What
Claude Code's sandbox (the restricted environment tool calls run inside) now combines a set of startup read rules with the runtime rules it already computed, instead of returning only the runtime set. Telemetry for this process also now reports a startup_read_rules count.
Why
This means the sandbox's effective rule set reflects permissions established at startup as well as those computed while running, so reads that were allowed at startup should no longer be missed when rules are resolved later in a session.
