Each time Claude Code starts, it enters a working folder and can only read project files within the currently authorized directory, adopting a sandbox-style directory permission design.