Claude Code's filesystem permissions operate on two distinct layers that most teams conflate. Understanding the difference between sandbox roots and allowed paths determines whether your agent can read secrets, overwrite production config, or execute arbitrary binaries.
