Unclear It is not clear whether this changes which file reads are allowed in practice.
What
The sandbox is a restricted area that limits what commands run by Claude Code can touch. When Claude Code decides whether a file may be read, it now works out whether your computer itself allows the read as a separate value. Before, it reused the value saying whether the file was unreadable.
It also marks a read that was granted but that the host computer does not allow, as a grant outside the sandbox.
Why
This may fix a case where the sandbox's permission and your computer's permission for a file did not match.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear whether this changes which file reads are allowed in practice.