You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.307,
ImprovementsSection of the release
What
A sandbox is the restricted space Claude Code runs commands in. Claude Code has new instructions for the model about a sandbox that runs commands under its own separate user account. They say:
Results from this sandbox never include a <sandbox_violations> block, the section that normally lists what the sandbox blocked.
A blocked network connection shows up only in the command's own error output.
Files in the sandbox account's own folder cannot be opened by you or by Claude Code's tools, so temporary files that need opening belong in the scratchpad directory.
Why
The model gets a more accurate picture of how this sandbox behaves. It should spot a blocked connection from the command's error and keep files it needs to share where you can open them.