all posts

Building a bash wrapper that runs Claude Code inside a bubblewrap sandbox — restricting filesystem writes to the current project, locking down Claude's own config and code paths, and routing egress through a logging mitmproxy.