Type: url
Original: https://www.anthropic.com/engineering/claude-code-sandboxing
Status: partial
Summary
An Anthropic engineering post (Oct 2025) introducing two sandboxing features for Claude Code — a sandboxed bash tool built on an open-source sandbox runtime, and Claude Code on the web — which enforce filesystem and network isolation so Claude can run with fewer permission prompts. It argues that effective sandboxing needs both boundaries, reports an 84% reduction in permission prompts in internal usage, and describes how Claude Code on the web keeps git credentials out of the sandbox via a proxy.