I stopped approving Claude Code's commands after discovering its built-in sandbox

I let Claude do whatever it wants.