Claude Code Closes a Sandbox Bypass as Anthropic Details Watermarking and Biosafety Work

Claude Code: security hardening alongside everyday usability fixes

Across four point releases (2.1.235 through 2.1.238), Anthropic's two most consequential changes were security-focused. On macOS, wildcard read-deny rules in the Claude Code sandbox now take precedence inside otherwise-allowed read regions, extend to a matched directory's full contents, and can no longer be sidestepped by renaming a denied file — closing a concrete bypass path for sensitive files like .env. Separately, the new headersHelper mechanism lets a plugin marketplace or catalog entry run a command that mints HTTP headers, such as a short-lived token, for catalog and same-origin archive fetches; Anthropic scoped this new automation surface deliberately, having it run only when a user installs or updates that specific plugin, only after the command itself is displayed, and only with an interactive [y/N] prompt unless the user passes -y.

The remaining changes were incremental usability work: a fix to prompt caching for sessions routed through an LLM gateway or custom base URL, a fix to a whole-cache invalidation bug tied to language-server reconnects, a new built-in "Concise" output style, an ANTHROPIC_DEFAULT_MODEL environment variable, opt-in cross-session idle notifications, a readline-style Ctrl+W keybinding option, inline spellcheck, and terminal markdown rendering fixes for nested lists. The cadence — four releases addressing both a real sandbox bypass and a batch of ergonomic requests — is consistent with Anthropic's ongoing pattern of shipping Claude Code changes in short, frequent increments rather than larger batched updates.

Sources: Claude Code 2.1.236 release notes — Claude Code · Claude Code 2.1.238 release notes — Claude Code · Claude Code 2.1.237 release notes — Claude Code · Claude Code 2.1.235 release notes — Claude Code

Two service disruptions, both resolved the same day

Anthropic's status page logged two separate incidents on August 21. The first described elevated errors on requests to multiple Claude models; the second, broader disruption affected claude.ai, platform.claude.com, the Claude API, Claude Code, and Claude Cowork simultaneously. Both were marked resolved, with the posted updates limited to investigation notices rather than a root-cause account.

The fact that a single day produced two distinct incident postings spanning consumer, developer, and enterprise-facing surfaces is worth noting on its own, independent of any read on severity: it points to shared underlying infrastructure across Claude's product line, where a fault in request routing or model serving can surface across multiple products at once. No further detail on cause was provided in the status updates themselves.

Sources: Elevated errors on requests to multiple models — status.claude.com · Service disruption on Claude services — status.claude.com

Anthropic opens up on watermarking and Fable 5's biology safeguards

Anthropic published a technical explainer on how its text watermark works, laying out the mechanism by which a detectable signal is embedded in generated text and can later be verified — part of its broader effort around content provenance and identifying AI-generated output.

Separately, Anthropic detailed work to strengthen Fable 5's biology safeguards, describing improvements to the protections built into the model in this area. The post was published without an accompanying summary in today's feed, so its specific scope and any triggering circumstance are not detailed here beyond what Anthropic itself titled the disclosure.

Sources: How Claude's text watermark works — Anthropic · Improving Fable 5's biology safeguards — Anthropic

A new Chief Global Affairs Officer

Anthropic announced that Mariano-Florentino (Tino) Cuéllar will join the company as Chief Global Affairs Officer. The creation or filling of this specific role points to continued build-out of Anthropic's external-facing policy and international-engagement function as the company scales its footprint and regulatory exposure globally.

Sources: Mariano-Florentino (Tino) Cuéllar to join Anthropic as Chief Global Affairs Officer — Anthropic