You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release
What
Claude Code can run shell commands in a sandbox, a restricted environment that limits what a command can reach. Some sandboxed commands used to be approved automatically. That shortcut applied whenever the sandbox condition held.
Now, if a command matches one of your ask rules, Claude Code skips the automatic approval and asks you first. An ask rule is a permission rule saying Claude Code must always ask before running a command. This check is in two of Claude Code's permission paths.
Why
Before, a sandboxed command could run without the prompt your ask rule was meant to force. An explicit ask rule now wins over the sandbox shortcut.
