{"version":"2.1.299","anchor":"git-runs-can-be-routed-through-an-os-sandbox-with-explicit-f","canonical_anchor":"git-runs-can-be-routed-through-an-os-sandbox-with-explicit-f","heading":"Git commands can now run inside an operating-system sandbox","tier":"notice","area":"Sandbox","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.299\/e\/git-runs-can-be-routed-through-an-os-sandbox-with-explicit-f","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.299","markdown":"### Git commands can now run inside an operating-system sandbox\n\nClaude Code's hardened git runner can run git inside an OS sandbox, and a sandbox problem is reported with exit code 126 and a stated reason\n\n**Unclear.** Nothing shows any part of Claude Code currently asking for sandboxed git runs, so it is unclear whether this affects anyone yet.\n\n**What**\n\nWhen Claude Code runs git through its hardened git runner (a stricter way of launching git), it can now run it inside an operating-system sandbox. A sandbox is a restricted environment that limits what a program is allowed to touch. Before this change, hardened git always ran directly, with no sandbox.\n\nSandboxing can only be requested for a hardened run. If it is requested for a run that is not hardened, Claude Code refuses the run and reports `run_not_hardened`. When sandboxing is requested, git ends up in one of three states:\n\n- Sandboxed: git runs inside the sandbox.\n\n- Unsandboxed: git runs without the sandbox.\n\n- Refused: git does not run at all.\n\nWhen a sandboxed run fails, Claude Code returns exit code 126 and gives one of these reasons:\n\n- Refused: the run was not allowed to start.\n\n- Stopped: the run went over its time limit or its output limit.\n\n- Output dropped: the run's output was thrown away.\n\nThere is now also an upper limit on how much output a hardened git run may produce.\n\n**Why**\n\nThis lets Claude Code put tighter limits on the git commands it runs for you. If git fails with exit code 126, the reason Claude Code gives tells you whether the sandbox refused the run, stopped it, or dropped its output.\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: no"}