Claim 9 — Claude Code dossier

CLAIM 9 / Claude Code

"Sandboxed bash tool: Sandbox bash commands with filesystem and network isolation, reducing permission prompts while maintaining security"

partial

Observed

The sandbox exists and is release-verified, but the boundary has had silent gaps: before v2.1.78, sandbox.enabled: true silently fell back to unsandboxed execution when seatbelt/bwrap was missing from the host. Two documented settings weaken it in place — sandbox.allowUnsandboxedCommands re-enables a per-command escape hatch, and sandbox.enableWeakerNetworkIsolation (v2.1.71) degrades macOS network isolation, documented by Anthropic itself as reducing security.

Evidence

[1]