Sandbox status now reports two more ways Linux isolation can be weaker

The sandbox is a restricted environment that limits what commands run by Claude can reach on your computer. Claude Code keeps a status summary of how the sandbox is set up. Besides whether it allows Unix sockets, whether it injects credentials and whether it weakens isolation, the summary now also includes:

• seccompUnavailable: whether seccomp, a Linux kernel feature that limits what a program may ask the system to do, is unavailable.
• ripgrepOverridden: whether ripgrep, the search tool Claude Code uses, has been overridden.

Both are only worked out on platforms other than macOS and Windows. The "weakens isolation" value is now worked out in a separate step.