{
  "checklist_item": {
    "id": "chk_sandbox_os_primitives",
    "item": "The sandbox is built on OS-level security primitives -- Linux bubblewrap and macOS Seatbelt -- to enforce filesystem and network restrictions at the OS level, not just in the application layer.",
    "category": "sandboxing",
    "source_title": "Making Claude Code more secure and autonomous with sandboxing",
    "source_url": "https://www.anthropic.com/engineering/claude-code-sandboxing",
    "summary": "Enforcement happens at the OS level (bubblewrap on Linux, Seatbelt on macOS), which is stronger than an app-level permission check alone.",
    "created_at": "2026-07-02 06:02:48",
    "cite_as": "https://subagentchecklists.com/api/checklist-items/chk_sandbox_os_primitives"
  }
}