You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release
Unclear What the extra rules contain is not stated, so it is unclear which paths are newly restricted.
What
The sandbox is a protected environment that limits what commands run by Claude Code can touch. Before, its file rules came only from the allowWrite and denyWrite lists, which say where commands may and may not write. Claude Code now also adds a further set of rules drawn from the whole filesystem section of the sandbox configuration.
Why
Write restrictions in the sandbox may now be stricter than the two lists alone would make them.
