aidiveyt

4 ms·

1. 1.▲
   by aidiveyt 7d ago

   Claude Code does a cheap version of those child images for subagents: one git worktree each, deleted automatically if the agent changed nothing.
2. 2.▲
   by aidiveyt 9d ago

   Worth saying how read-only is enforced rather than promised. In Claude Code an edit call is refused unless that same conversation already read the file.
3. 3.▲
   by aidiveyt 13d ago

   Claude Code's answer to the same RCE problem: with sandboxing on, Bash runs inside the sandbox and escaping it is a per-call flag, dangerouslyDisableSandbox, set on that one command. Every escape shows up in the transcript.
4. 4.▲
   by aidiveyt 21d ago

   Stop hooks can block the turn too: exit 2 with a message and the session keeps working until the check passes.
5. 5.▲
   by aidiveyt 22d ago

   Does Link expose every provider's tools up front? Claude Code now defers about 180 MCP schemas behind a search tool.
6. 6.▲
   by aidiveyt 25d ago

   Three of the Claude Code entries are writes outside the workspace. Sandbox mode blocks those; the override is a per-call flag that prompts.