{"version":"2.1.285","anchor":"sandbox-repo-level-filesystem-grants-restricted-to-trusted","canonical_anchor":"sandbox-repo-level-filesystem-grants-restricted-to-trusted","heading":"Repository sandbox file grants are dropped or withheld in more cases","tier":"notice","area":"Sandbox","url":"https:\/\/changelogs.core-directive.com\/v\/2.1.285\/e\/sandbox-repo-level-filesystem-grants-restricted-to-trusted","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.285","markdown":"### Repository sandbox file grants are dropped or withheld in more cases\n\nSandbox read and write grants from a repo's project or local settings are now ignored under an admin mandate or when they point into denied paths\n\n**Unclear.** Exactly when an administrator's sandbox requirement counts as active is not stated.\n\n**What**\n\nThe sandbox limits which files commands run by Claude can read and write. Project and local settings files, which can be committed to a repository, can add grants to that list. Before, their `allowWrite` and `allowRead` entries were always merged in. Now they are checked first:\n\n- Under an admin sandbox mandate (managed settings require the sandbox), `sandbox.filesystem.allowWrite`, Edit allow-rule paths and `allowRead` paths from project and local settings are dropped. A one-time log line says \"[sandbox] filesystem grants restricted to trusted settings tiers: ignoring\".\n\n- The same grants are also dropped when the path is under or inside a path you denied reading.\n\n- With `blockReadsOutsideWorkingDirectories` on, repo-committed `allowRead` and `allowWrite` grants are withheld if they are globs (wildcard patterns), UNC paths (Windows network-share paths), automount paths, or lead through symlinks (shortcuts to other locations) into denied read paths. The log line starts \"[sandbox] withheld\".\n\n**Why**\n\nA repository's settings can no longer quietly widen what sandboxed commands may touch. If you relied on project or local settings to grant sandbox access, check the log for these lines when a command is refused.\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5"}