{
  "checklist_item": {
    "id": "chk_sandbox_two_boundaries",
    "item": "Anthropic's Claude Code sandboxing draws two boundaries -- filesystem isolation (read/write confined to the working directory) and network isolation (an allowlist of domains via a proxy) -- so Claude can act freely inside the boundary without asking permission for every step, and is flagged immediately if it tries to leave it.",
    "category": "sandboxing",
    "source_title": "Making Claude Code more secure and autonomous with sandboxing",
    "source_url": "https://www.anthropic.com/engineering/claude-code-sandboxing",
    "summary": "The core two-boundary model: filesystem confinement to the working directory, and network confinement to an allowlist via a proxy.",
    "created_at": "2026-07-02 06:02:48",
    "cite_as": "https://subagentchecklists.com/api/checklist-items/chk_sandbox_two_boundaries"
  }
}