You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release
What
The sandbox, the restricted space that limits what Claude Code's commands can touch, protects more git-related locations:
glab's per-repository settings folder is now write-protected, with new warnings. glab is GitLab's command-line tool.
A repository's own worktrees are now taken into account. A worktree is an extra checkout of the same repository in another folder.
A .git folder in a folder further up is now handled. When the sandbox cannot examine it, it records that.
Some block rules are now skipped.
Why
The sandbox now covers more places where a command could change git or glab behavior.
Read from
Feature flag
tengu_mighty_thimbleNot enough to say
Nothing here resolved what this flag was doing on this version, so nothing here should be read as on or off.
This account: no value returned · anonymous baseline: no value returned · compiled default in v2.1.323: on
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
