Three of the Claude Code entries are writes outside the workspace. Sandbox mode blocks those; the override is a per-call flag that prompts.