How we contain Claude across products
Simon Willison's Weblog240 字 (约 1 分钟)
87
Anthropic published detailed sandbox strategies for Claude.ai, Claude Code, and Claude Cowork—using gVisor, Seatbelt/Bubblewrap, and full VMs respectively—to enforce hard boundaries via process isolation, filesystem limits, and egress controls, ensuring credentials cannot leak even if models find ‘creative’ paths.
入选理由：Claude.ai 使用 gVisor 实现容器级沙箱；Claude Code（本地运行）使用 macOS 的 Seatbelt / Linux 的 Bubblewrap；Claude Cowork 使用完整 VM（macOS: Virtualization framework, Windows: HCS）。
FeaturedArticle#Anthropic#Sandbox#Security Architecture#gVisor#VM英文
