Follow Discord
Sweep 03 Nov 2026 · 22:27Z Build v2.1.318 536 read Stable v2.1.311 Latest v2.1.318 Next v2.1.318 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.317 ·

Sandbox can refuse to run when a protected file has a second hard link

Behind a server switch, the sandbox refuses to start if a protected file has more than one hard link, blocking even dangerouslyDisableSandbox

You'll notice Improvements
JSON All of v2.1.317
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.317,
ImprovementsSection of the release

Unclear What the check does when the server sends nothing is not settled, so it is unclear whether it runs for you by default.

What

The sandbox, which limits what commands Claude runs can reach on your machine, has a new check. A hard link is a second name that points at the same file. If a file the sandbox is meant to keep off-limits has more than one hard link, the sandbox now fails to start with a message saying so. Until the extra link is removed, both of these are refused:

The check only runs when a server-controlled switch is on.

Why

A second name for a protected file could let a command reach it through the other path. If the check is on and you hit it, every shell command stays blocked until you remove the extra link.

How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtWhat the check does when the server sends nothing is not settled, so it is unclear whether it runs for you by default.

See this entry in the whole of v2.1.317 →

Feedback