When to use this
- When hardening a Claude Code setup and want native sandbox isolation enforced by default
- When running Claude in a shared environment where network and filesystem access should be scoped
- Before giving Claude access to production credentials and needing documented permission boundaries
How to use
-
Open the template on GitHub and copy its content:
config/sandbox-native.json -
Place the file inside
.claude/in your project (or globally in~/.claude/to share across all projects). - Replace placeholder values with your actual keys, endpoints, or preferences. Validate with a JSON/YAML linter before committing.