“When running at Anthropic, Claude Code operates within a sandbox that restricts its access to only authorized files and websites.”