3 ms·

Both Claude Code and Codex use sandbox-exec with Seatbelt to sandbox execution: - https://developers.openai.com/codex/security/#os-level-sandbox https://develo

Both Claude Code and Codex use sandbox-exec with Seatbelt to sandbox execution: - https://developers.openai.com/codex/security/#os-level-sandbox https://developers.openai.com/codex/security/#os-level-sandb... - https://code.claude.com/docs/en/sandboxing https://code.claude.com/docs/en/sandboxing

bootlooped 8mo ago
It weirds me out a bit that Claude is able to reach outside the sandbox during a session. According to the docs this is with user consent. I would feed better with a more rigid safety net, which is why I've been explicitly invoking claude with sandbox-exec.
- SignalStackDev 8mo ago
  [dead]