... I had Claude Code dig into it and looks like it's calling sandbox-exec.