Claude Code's sandbox.denyRead doesn't stop the Read tool(claudecodecamp.com)

https://www.claudecodecamp.com/p/claude-code-sandboxing-how-sandbox-works-and-what-it-doesn-t-protect