You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.310,
ImprovementsSection of the release
What
The sandbox limits what commands Claude Code runs can reach. Deny rules list paths they may not touch. Claude Code now notices deny entries that belong to another computer.
A new warning gives a count followed by "on another computer" and "not enforced", with the hint "/status for details".
The count comes from a new counter, sandboxDeniesOnAnotherHostCount. It starts at 0 and is passed to the status or doctor view.
New sandbox messages, deniesOnAnotherHostNotDescribed and denyEntryHostNotJudged, cover cases where Claude Code could not work out whether a deny entry names another computer. One reads "sandbox: whether a deny entry names another computer could not be worked out".
Why
If a deny rule names another computer, it does not protect anything on this one. The warning makes that visible, and /status shows the details.
