Vibe Coding
Claude Code Tightens macOS Sandbox: Wildcard Read-Deny Rules Now Beat Allowed Read Regions
In 2.1.236 Anthropic changed macOS sandbox precedence so that wildcard read-deny rules now win inside regions that were otherwise granted read access. The previous ordering meant a broad allow could silently swallow a targeted deny, so a rule written to keep an agent out of `~/.ssh` or a credentials directory could fail to apply if a parent path was allowed. Anyone who wrote sandbox policy assuming the old precedence should re-read their deny rules, since they may now block more than intended.
↳ Follow the thread