Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.300 ·

Sandbox rule text now covers all commands, not just Bash

The strict sandbox text now says every command the model runs must be sandboxed, and the prefetch memory message no longer names a 64 MiB limit

You'll notice Improvements
JSON All of v2.1.300
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.300,
ImprovementsSection of the release

Unclear It is not clear whether the sandbox now actually covers more commands or only the wording changed.

What

A sandbox is a fenced-off area where commands run with limited access to your machine and network. The text for the strict sandbox setting no longer mentions Bash. It now reads: "All commands invoked by the model must run in the sandbox unless they are explicitly listed in excludedCommands."

Claude Code can load files ahead of time in case they are needed, which is called prefetching. When it stops doing this to save memory, its message no longer says 64 MiB. It now says the unused prefetched files "would exceed their limit in memory".

Why

The sandbox wording now reads as applying to every command the model runs, and the prefetch message suggests the memory limit may no longer be fixed at 64 MiB. Commands listed in excludedCommands remain the exception.

Read from
Names in the bundleexcludedCommands
Since it was published

The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.

Confirmed since Anthropic's documentation has since written up excludedCommands, on SSH remote sessions in Claude Desktop on 3P. * **Shell commands that Claude runs with its Bash tool**: Claude Code's sandbox keeps them from writing under the path on a host where it runs, which on Linux needs Claude Code's [sandbox dependencies](https://code.claude.com/docs/en/sandb… third-party/claude-desktop/ssh-remote-sessions see the edit
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear whether the sandbox now actually covers more commands or only the wording changed.
Anthropic's documentation agreesAnthropic's documentation has since written up excludedCommands, on SSH remote sessions in Claude Desktop on 3P.

See this entry in the whole of v2.1.300 →

Feedback