Making Claude Code more secure and autonomous with sandboxing

Introduced sandboxing for Claude Code, comprising filesystem isolation (restricting access to specific directories) and network isolation (allowing connections only to approved servers). This is implemented using OS-level primitives (Linux bubblewrap, macOS seatbelt) and a new open-source sandbox runtime. The sandboxing significantly reduces permission prompts (84% reduction in internal usage) and enhances security by preventing prompt-injected Claude from modifying sensitive files or exfiltrating data. Claude Code on the web also utilizes this sandboxing for secure cloud execution, with a custom proxy service for git interactions.