Closing the "Files Written Inside the Box Run Outside the Box" Gap — Claude Code v2.1.309 Shuts a Cluster of Unattended-Operation Bypasses at Once, While v2.1.307 Puts the Moves It Blocked on the Record
Claude Code v2.1.309 closes sandbox and permission-check bypasses in a single batch. Two days earlier, v2.1.307 added an audit event that records the moves a guardrail blocked. Here's a rundown of the defensive measures that pay off in unattended operation, and what to do now.





