You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Unattended ServingArea: what it touches
ImprovementsKind: in v2.1.305,
ImprovementsSection of the release
What
Before serving unattended, Claude Code checks whether commands are confined by the sandbox, the restricted area that limits what commands can reach. If the sandbox cannot be asked, that check used to fail silently. It now logs the warning "unattended-serving consent: command sandbox could not be asked, taken as not confining" and reports the reason sandbox_failed_to_start. Commands are still treated as not confined.
Why
When unattended serving is refused because the sandbox did not start, the log now says so, which makes the cause easier to find.
