Sandbox cleanup moves suspicious files aside instead of deleting them

The sandbox limits what a command run by Claude Code can touch. After a sandboxed command finishes, Claude Code checks for files or folders the command may have planted that would make a folder look like a bare git repository, one with no working files. Instead of deleting such an entry, Claude Code now moves it aside whole under a name starting with .claude-sandbox-quarantine-.

If the move fails, Claude Code falls back to:

• removing the entry if it is a symlink, socket or hard link
• otherwise, setting its permissions to 000 in place so nothing can use it

It also gives the owner back full access to a folder whose permissions the command had changed. It does nothing if the folder containing the entry now points somewhere other than where it did when the sandbox was set up. This applies where the sandbox is active, outside Windows.