Beltdown: Escaping the Claude Code sandbox

Abstract

An investigation of how a coding agent invoked Git outside its sandbox and how a nested repository could use that execution path.