Posts tagged “sandbox”

Claude Code's filesystem permissions operate on two distinct layers that most teams conflate. Understanding the difference between sandbox roots and allowed paths determines whether your agent can read secrets, overwrite production config, or execute arbitrary binaries.

Most Claude Code security failures stem from misunderstanding where permission modes end and sandbox boundaries begin. This post breaks down the four modes, `--allowedTools` whitelisting, and how bubblewrap restrictions work together to prevent unauthorized access.