The sandbox is a restricted environment that limits what commands Claude Code runs can touch. It has a cleanup step that deals with files planted to make a folder look like a bare git repository (a git repository without a working copy of the files). That cleanup has been reworked:
- Files the cleanup cannot classify are now moved aside rather than removed
- Cases where the cleanup refuses to act, because a parent folder could not be resolved or was not in its standard form, are now logged
- The list of protected git files now also covers
config.worktreeandalternates, behind a new check that applies on Linux
This hardens the sandbox against planted .git files that could change how git behaves. Moving unrecognised files aside instead of deleting them means they are not lost.
tengu_mighty_thimble Not enough to sayNothing here resolved what this flag was doing on this version, so nothing here should be read as on or off.
This account: no value returned · anonymous baseline: no value returned · compiled default in v2.1.315: on
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.315. It isn't a statement about your account. What a flag value here can and cannot tell you