Unclear What Claude Code then does with a git command that could not be sandboxed is not stated.
What
The sandbox limits what a command can touch on your computer. When Claude Code runs headless (without its interactive screen), it can wrap git commands in the sandbox. If the sandbox hands back the command unchanged, meaning it did not actually wrap it, Claude Code no longer reports the command as sandboxed. Before, it always did.
Why
A sandbox that silently does nothing is no longer treated as protection that is in place.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
What Claude Code then does with a git command that could not be sandboxed is not stated.