The sandbox is the restricted environment Claude Code runs commands in. When the setting that blocks reads outside allowed folders is saved, Claude Code refreshes the sandbox's configuration. It now checks whether that refresh actually happened. If not, it reports sandboxRefreshed: false and logs the reason sandbox_refresh_skipped.
Why
Previously it reported success even when the refresh did not happen. Now you are no longer told the new setting has taken effect when the sandbox did not pick it up.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeImproved screen-reader output in /mcp: a disabled server is read as "off" instead of "pending"
