v0.5.11 — the sandbox retires (Apple folded first)

[dea6cat]

Clyde's shell sandbox is retired. In its place: the ask.

What changed

• A shell command that names anything outside the project — an absolute path, ~, $HOME, or .. — now asks first. Even read-only. Even in all-in mode. So does a command that touches .git/config or .git/hooks.
• Read, Write, Edit, NotebookEdit, Glob, Grep, and a Bash cwd outside the project now ask instead of being refused. A yes covers that file — or that folder and everything under it — for the rest of the session. A no does not.
• Headless -p still denies. It cannot ask.

Why

Apple has deprecated sandbox-exec. A future macOS release could remove it and break every shell command, and Clyde should not depend on that. The guard is now the permission prompt alone, so a command you approve can write anywhere you can. Read the command before you say yes.

Housekeeping

• The sandbox block in ~/.clyde/settings.json is ignored — you can delete it. The unsandboxed option is gone, and so is the sandbox line in /doctor.
• Bonnie's hosted previews and the DuckDB data tool keep their own, unrelated isolation.
• Nothing to migrate. If a command that used to run silently now asks, that's the change: approve once, the session remembers.

Full history: CHANGELOG.md · What leaves your machine: EGRESS.md · Found something: SECURITY.md

---

This discussion was created from the release v0.5.11 — the sandbox retires (Apple folded first).