Claude sandbox practically useless IMO. It gives read access to everything by default so its not deny-default.