WHY users should care
The quadratic slowdown is fixed. Long sessions were stalling for multiple seconds because message normalization cost grew O(n²) with conversation turns. Now it doesn't. If you've been hitting multi-second stalls or slow resumes in long sessions — this is the fix.
New sandbox control. sandbox.filesystem.disabled lets you skip filesystem isolation while keeping network egress control. Useful when you need full filesystem access but still want network guardrails.
Notable fixes
- OAuth token expiry mid-session no longer breaks auto-mode commands
- Resumed background agents now restore their agent prompt + tool restrictions (previously reverted to default)
- Worktree-isolated subagents can no longer escape via
git -C, --git-dir, or GIT_DIR/GIT_WORK_TREE
/verify and /code-review skills changed mid-session now appear in slash menu without restart
🔒 Worktree hardening worth noting
Several fixes target worktree isolation escapes. If you rely on worktree isolation for security boundaries, upgrade.
PR: https://github.com/anthropics/claude-code-docs/pull/1076
WHY users should care
The quadratic slowdown is fixed. Long sessions were stalling for multiple seconds because message normalization cost grew O(n²) with conversation turns. Now it doesn't. If you've been hitting multi-second stalls or slow resumes in long sessions — this is the fix.
New sandbox control.
sandbox.filesystem.disabledlets you skip filesystem isolation while keeping network egress control. Useful when you need full filesystem access but still want network guardrails.Notable fixes
git -C,--git-dir, orGIT_DIR/GIT_WORK_TREE/verifyand/code-reviewskills changed mid-session now appear in slash menu without restart🔒 Worktree hardening worth noting
Several fixes target worktree isolation escapes. If you rely on worktree isolation for security boundaries, upgrade.