Evidence record / claude-code

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-claude-code-deletion-prompts-narrow-while-unavailable-sandbox-write-fallbacks-are-refused

Deletion prompts narrow while unavailable sandbox write fallbacks are refused. 299 stops prompting for rm built at runtime inside a script the client cannot read unless CLAUDE_CODE_STRICT_INLINE_SHELL_RM_PROMPT=1 is set. 309 changes the dangerous rm/rmdir prompt in Desktop and VS Code bypass mode to immediate denial with a rewrite hint. For commands excluded from an enabled but unavailable sandbox, writes to sandbox write-list paths now ask and the unsandboxed fallback is refused there.

Channel: tagged-release. Half: both. Date: 2026-10-22.

Operator consequence: Re-test deletion policies that depended on a prompt and decide whether the strict inline-shell setting is needed. Check bypass jobs for the new denial path and exercise sandbox-unavailable writes. Reduced waiting does not mean those commands became approved.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-claude-code-deletion-prompts-narrow-while-unavailable-sandbox-write-fallbacks-are-refused

Profile citations

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact