#sandbox
- Hazmat: open-source OS-level containment for Claude Code, Codex, OpenCode, and Cursor Agent tools
- Google Cloud launches Agent Compute Engine with per-agent microVMs Google tools
- Claude Code v2.1.236 adds ANTHROPIC_DEFAULT_MODEL, cross-session idle notifications, and macOS sandbox wildcard read-deny hardening Anthropic tools
- Claude Code 2.1.309 hardens sandbox and permission boundaries Anthropic tools
- Claude Code v2.1.216 adds filesystem sandbox opt-out and fixes worktree git isolation Anthropic tools
- GitHub Copilot CLI 1.0.76 adds sessions sidebar, enterprise sandbox floor GitHub tools
- Claude Code v2.1.221 adds Focus view and sandbox credential masking Anthropic tools
- GitHub Copilot CLI v1.0.79 Adds Kimi-K3 Support and Reworks Sandbox Auth Settings GitHub (Microsoft) tools
- Zed v1.16.2 — filesystem sandbox escape fix, GitHub Copilot Chat on GitHub Enterprise Cloud Zed tools
- OpenAI Ships codex-zsh v0.1.0: Versioned Patched zsh Binary for Codex Sandbox OpenAI tools
- Claude Code v2.1.222 fixes worktree destructive-git-command and hook-bypass safety gaps Anthropic tools