CLAUDE LABJP
OPUS5 — Claude Code v2.1.219 makes Claude Opus 5 the default Opus model, with a 1M context window and fast-mode pricing of $10/$50 per million input/output tokensSONNET5 — Claude Sonnet 5 is now the default model for Free and Pro worldwide, with introductory pricing of $2/$10 per million input/output tokens through August 31SANDBOX — Claude Code adds sandbox.network.strictAllowlist, letting you deny any host that isn't on the allowlist for sandboxed commandsSTREAM — stream-json output now supports nested subagent forwarding, so you can trace inner exchanges across multi-layer agent setupsSKILL — The open-source Claude API skill, bundled with Claude Code, gives up-to-date Messages API and Managed Agents references across eight languagesVOICE — Voice mode now runs on Opus, Sonnet, and Haiku, reaches connected tools like Gmail and Slack, and speaks many more languagesOPUS5 — Claude Code v2.1.219 makes Claude Opus 5 the default Opus model, with a 1M context window and fast-mode pricing of $10/$50 per million input/output tokensSONNET5 — Claude Sonnet 5 is now the default model for Free and Pro worldwide, with introductory pricing of $2/$10 per million input/output tokens through August 31SANDBOX — Claude Code adds sandbox.network.strictAllowlist, letting you deny any host that isn't on the allowlist for sandboxed commandsSTREAM — stream-json output now supports nested subagent forwarding, so you can trace inner exchanges across multi-layer agent setupsSKILL — The open-source Claude API skill, bundled with Claude Code, gives up-to-date Messages API and Managed Agents references across eight languagesVOICE — Voice mode now runs on Opus, Sonnet, and Haiku, reaches connected tools like Gmail and Slack, and speaks many more languages
TAG

Networking

1 articles
Back to all tags
Related:
Claude Code1Sandbox1Security1Automation1
Claude Code/2026-07-25Advanced

Locking down Claude Code sandbox egress with strictAllowlist

Using sandbox.network.strictAllowlist in Claude Code v2.1.219 to tighten an automation pipeline's outbound traffic to a minimal allowlist, with a runnable script to discover real destinations and the pitfalls I hit.