How we contain Claude across products
Anthropic published detailed sandbox strategies for Claude.ai, Claude Code, and Claude Cowork—using gVisor, Seatbelt/Bubblewrap, and full VMs respectively—to enforce hard boundaries via process isolation, filesystem limits, and egress controls, ensuring credentials cannot leak even if models find ‘creative’ paths.
入选理由:Claude.ai 使用 gVisor 实现容器级沙箱;Claude Code(本地运行)使用 macOS 的 Seatbelt / Linux 的 Bubblewrap;Claude Cowork 使用完整 VM(macOS: Virtualization framework, Windows: HCS)。





