{"version":"2.1.277","anchor":"sandbox-rules-now-merge-startup-read-rules-with-runtime-rule","canonical_anchor":"sandbox-rules-now-merge-startup-read-rules-with-runtime-rule","heading":"Sandbox rules now merge startup read rules with runtime rules, plus new startup_read_rules telemetry","tier":"internal","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.277\/e\/sandbox-rules-now-merge-startup-read-rules-with-runtime-rule","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.277","markdown":"### Sandbox rules now merge startup read rules with runtime rules, plus new startup_read_rules telemetry\n\nSandbox rule resolution now merges startup read rules with runtime rules, and reports a startup_read_rules count\n\n**What**\n\nClaude Code's sandbox (the restricted environment tool calls run inside) now combines a set of startup read rules with the runtime rules it already computed, instead of returning only the runtime set. Telemetry for this process also now reports a `startup_read_rules` count.\n\n**Why**\n\nThis means the sandbox's effective rule set reflects permissions established at startup as well as those computed while running, so reads that were allowed at startup should no longer be missed when rules are resolved later in a session.\n\n- Area: Sandbox\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 2\/5"}