Codex does such sandboxing, fwiw. In practice it gets pretty annoying when e.g. it wants to use the Go cli which uses a global module cache. Claude Code recentl

Codex does such sandboxing, fwiw. In practice it gets pretty annoying when e.g. it wants to use the Go cli which uses a global module cache. Claude Code recently got something similar[0] but I haven’t tried it yet. In practice I just use a docker container when I want to run Claude with —-dangerously-skip-permissions. [0]: https://code.claude.com/docs/en/sandboxing https://code.claude.com/docs/en/sandboxing