What
The sandbox is a restricted environment that limits what commands Claude runs can reach. It now keeps track of whether it has logged a one-time notice for each of three kinds of setting coming from a repository:
- network allowances
- filesystem grants
- allowed domains
These sit beside an existing notice for ignored excluded commands. This points to the sandbox dropping these repository-supplied settings and noting it once each time.
Why
If you rely on a project's own settings to widen what the sandbox allows, those widenings may no longer apply.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not confirmed that these repository settings are actually dropped, or under which conditions.