Anthropic shipped OS-level sandboxing for Claude Code. If you run an agent

against a repo you care about, it's worth understanding precisely what moved —

because a fair amount of the commentary treats it as "agents are contained

now," and that's not what the documentation says.

I read the docs carefully, partly because I build a tool in adjacent territory