You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.285,
ImprovementsSection of the release
What
allowUnsandboxedCommands set to false stops commands from running outside the sandbox (the limits on what commands run by Claude can reach). Claude Code used to read it only from the sandbox settings and from settings passed on the command line. It now also treats it as false when a second, more general settings lookup returns false.
Why
The restriction may now apply in more places than before.