You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release
What
The sandbox is a set of limits Claude Code places on the commands it runs, so they can only reach what they are allowed to. On macOS, the sandbox now denies one system query that returns the arguments other running programs were started with. Before, that query was not blocked.
Why
Program arguments can hold private things such as file paths, tokens or passwords. A command running in the sandbox can no longer read them from other programs on your Mac.
