Post #2130956

2026-04-30 10:42 UTC

Claude and I are having some relationship trouble. It accesses files outside the working folder without tell me, it decides to edit files when I didn&#39;t ask for it, and is generally opinionated. How do I lock it up into a cage?

Replies (10)

@xameer@mathstodon.xyz 2026-04-30 10:46

@andrejbauer@mathstodon.xyz how can you even entertain it , besides testing it or something , linke Prof Jhala did , in a lecture on Liquid Haskell?

Open ##2279897
@dginev@mathstodon.xyz 2026-04-30 10:47

@andrejbauer@mathstodon.xyz The way we do with any software? Containerize, or virtualize, or run on dedicated standalone hardware. There is a movement of people buying Mac mini to run OpenClaw, as one strange development.

Open ##2279900
@Andrev@types.pl 2026-04-30 10:59

@andrejbauer@mathstodon.xyz something I meant to do for ages is to create a new user, give them read permission on the system and write only on the current directory and have the harness be spawned with that user

Open ##2279902
@MartinEscardo@mathstodon.xyz 2026-04-30 11:28

@andrejbauer@mathstodon.xyz Have you seen this? https://www.thatprivacyguy.com/blog/anthropic-spyware/

Open ##2279903
@yforster@types.pl 2026-04-30 11:28

@andrejbauer@mathstodon.xyz do you use it from vs code? If yes, it's easy to hook up vs code with a docker container while mounting the directory you are working in, but nothing else. https://code.visualstudio.com/docs/devcontainers/containers

Open ##2279904
@peterb@mathstodon.xyz 2026-04-30 11:37

@andrejbauer@mathstodon.xyz A VM is the safest way to go; beyond that, it's really a verification scenario (which, frankly, you need to do anyway - even if it's only touching the files you asked it to, my experience is that the rhythm is something like "Wow, this is great, this is great, this is great, wait whaaaaaat the hell are you doing?")

Open ##2279905
@floralmess@mathstodon.xyz 2026-04-30 12:07

@andrejbauer@mathstodon.xyz I’m currently experimenting with bubblewrap (https://github.com/containers/bubblewrap) for this sort of thing, but will need to find another tool for a network proxy allowlist

Open ##2279906
@bradheintz@mathstodon.xyz 2026-04-30 12:37

@andrejbauer@mathstodon.xyz A virtual machine sharing a folder with the host is a cheap lockdown solution.

Open ##2279907
@eigil@mathstodon.xyz 2026-04-30 13:24

@andrejbauer@mathstodon.xyz I created a separate user for it, which only has access to the stuff I want it to work on, then run claude code from a shell logged into that account. This may be more annoying to do with the desktop app, not sure.

Open ##2279908
@cdrichards@mathstodon.xyz 2026-04-30 13:25

@andrejbauer@mathstodon.xyz “it’s my nature,” said the scorpion, as they both sank into the water

Open ##2279909