claude-code security intermediate 10 minutes Claude Code's Deny Rules Don't Protect You — Here's What Actually Does Deny rules only block Claude's built-in tools. Bash subprocesses bypass them entirely. Sandbox mode is the real security boundary. Apr 11, 2026 →