{"version":"2.1.309","anchor":"sandbox-and-settings-watching-new-deny-state-and-extra-laun","canonical_anchor":"sandbox-and-settings-watching-new-deny-state-and-extra-laun","heading":"Sandbox tracks new write blocks for claude ssh binaries and symlinked paths","tier":"notice","area":"Sandbox","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.309\/e\/sandbox-and-settings-watching-new-deny-state-and-extra-laun","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.309","markdown":"### Sandbox tracks new write blocks for claude ssh binaries and symlinked paths\n\nThe sandbox adds write blocks for claude ssh binaries and for write-deny patterns reached through symlinks, and rebuilds when those remote values change\n\n**Unclear.** What the two new block rules stop, and when they apply, is not stated.\n\n**What**\n\nThe sandbox limits which files commands run by Claude may change. It gains two new write blocks, each controlled by a remotely served (GrowthBook) value:\n\n- A write block on claude ssh binaries, tracked as `sshStoreDenyApplied` and `builtConfigSshStoreDenied`.\n\n- A switch that applies write-deny patterns through symlinks (shortcuts that point to another file), tracked as `patternWriteDenyTwinsApplied` and `builtConfigPatternWriteDenyTwins`. When the sandbox settings are built, a flag (`Q4()`) is now passed to the code that builds the write-deny list.\n\nThese are recorded for each built sandbox setup, beside the existing host rules and configured denies. The sandbox now watches both remote values and rebuilds its settings during a session when either changes.\n\nOther changes in the same area:\n\n- The settings-file watch list and launch-path helpers now combine two sources of launch paths instead of one.\n\n- The Windows start flag changed from a yes\/no value to a start time.\n\n- `isOnButNotRunning` is now available from the sandbox manager.\n\n**Why**\n\nSandboxed commands can be blocked from writing in more places, and a change to these blocks can take effect without restarting Claude Code. Whether either block is applied for you depends on the remotely served values.\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: no"}