Unclear Which commands besides dd are covered, and whether the new path check makes prompts more or less frequent, is not settled.
Before Claude runs a shell command, Claude Code checks whether the command can run without asking you first, or outside the sandbox. The sandbox is a restricted environment that limits what a command can touch. Part of that check looks at arguments written like a variable assignment, in the form NAME=value.
One server flag, tengu_quiet_larkspur, used to decide from which argument onward such arguments were tolerated. Now:
ddhas its own rule, controlled by a separate flag,tengu_plain_sorrel- the existing set of commands still follows
tengu_quiet_larkspur - some assignments are let through only when every part of their value, split at colons, passes a check that it is a path
Both flags fall back to on when the server sends nothing. Before this release, the flag server returned on for both of them for this site's account and for an anonymous one.
This changes which shell commands Claude Code asks you about before running, or runs outside the sandbox. If you see more or fewer prompts for commands like dd, this is where they come from.
tengu_plain_sorrel On for this account, and not off by defaultThe flag server returned on for the one account this site reads, and nothing in this release compiles it off by default. The compiled default is shown below, and says which it is when we cannot read one: a fifth of gates compile in a string or a number rather than on or off, and most published releases have no gate table behind them at all. No client can see what the server returns for your account.
This account: on · anonymous baseline: on · compiled default in v2.1.307: on
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
tengu_quiet_larkspur On for this account, and not off by defaultThe flag server returned on for the one account this site reads, and nothing in this release compiles it off by default. The compiled default is shown below, and says which it is when we cannot read one: a fifth of gates compile in a string or a number rather than on or off, and most published releases have no gate table behind them at all. No client can see what the server returns for your account.
This account: on · anonymous baseline: on · compiled default in v2.1.307: on
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
tengu_umber_plover Not enough to sayNothing here resolved what this flag was doing on this version, so nothing here should be read as on or off.
This account: no value returned · anonymous baseline: no value returned · compiled default in v2.1.307: on
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.307. It isn't a statement about your account. What a flag value here can and cannot tell you
Which commands besides `dd` are covered, and whether the new path check makes prompts more or less frequent, is not settled.
New in this build: tengu_plain_sorrel