← All articles

Tagged "sandbox"

1 article

claude-code Claude Code's Deny Rules Don't Protect You — Here's What Actually Does Deny rules only block Claude's built-in tools. Bash subprocesses bypass them entirely. Sandbox mode is the real security boundary.