Claude Code File System Boundaries in 2026: What `--add-dir`, Allowed Paths, and Sandbox Roots Actually Restrict

Claude Code's filesystem permissions operate on two distinct layers that most teams conflate. Understanding the difference between sandbox roots and allowed paths determines whether your agent can read secrets, overwrite production config, or execute