Unclear It is not clear when the option that turns this on is set, so it may not apply to every wildcard deny rule.
What
The sandbox is the walled-off area that limits which files Claude Code's commands can reach. A deny rule blocks a path. On macOS, a path can be a symlink (a shortcut) to a real path somewhere else, and Claude Code adds a matching rule for that real path.
This used to skip any rule containing a wildcard such as *, ? or [. Now, when a new option is set and the rule is one you wrote, Claude Code resolves the part of the path before the wildcard and adds the wildcard back on the end.
Why
Wildcard deny rules can now be enforced on both the shortcut and the real path, closing a way around them.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear when the option that turns this on is set, so it may not apply to every wildcard deny rule.