Claude Code shipped a sandbox. Here's what it protects — and what it doesn't. - DEV Community
Bash-only scope, reads wider than writes, a permissioned escape hatch, fail-open, and no native Windows — plus the distinction that matters: containment isn't consequence isn't recovery.