You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Bash SafetyArea: what it touches
ImprovementsKind: in v2.1.277,
ImprovementsSection of the release
Unclear The finding does not say what kinds of commands the new exclusion check matches.
What
When sandboxing and "auto-allow if sandboxed" are both enabled, Claude Code could previously let a Bash command run without asking for approval. Now that auto-allow also requires that the command does not match a new exclusion check, meaning some commands that would have been auto-allowed before will now still require approval.
Why
This tightens the conditions under which sandboxed Bash commands skip approval, reducing the chance that a command that shouldn't be auto-approved slips through.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtThe finding does not say what kinds of commands the new exclusion check matches.
