Unclear What the check does when the server sends nothing is not settled, so it is unclear whether it runs for you by default.
The sandbox, which limits what commands Claude runs can reach on your machine, has a new check. A hard link is a second name that points at the same file. If a file the sandbox is meant to keep off-limits has more than one hard link, the sandbox now fails to start with a message saying so. Until the extra link is removed, both of these are refused:
- commands run inside the sandbox
- running a command outside it with
dangerouslyDisableSandbox
The check only runs when a server-controlled switch is on.
A second name for a protected file could let a command reach it through the other path. If the check is on and you hit it, every shell command stays blocked until you remove the extra link.
What the check does when the server sends nothing is not settled, so it is unclear whether it runs for you by default.