Tree: ef508b43a4

main

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'ef508b43a4'

${ noResults }

Commit Graph

2 Commits (ef508b43a4dd8516245884462b15f6a96cf4c95e)

Author	SHA1	Message	Date
Nicolas Massé	3a8281edbe	Run Claude Code in a rootless podman sandbox by default Claude Code runs in a pinned, checksum-verified image on an internal network with no egress and a dummy credential. A proxy container is the only way out: it records every request and swaps in the real credential, which never enters the Claude Code container. The host's cached feature flags seed the sandbox config so tools such as Monitor stay available. --sandbox host keeps the previous in-process mode. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	4 weeks ago
Nicolas Massé	c4f4171302	Initial end-to-end secret leak bench for Claude Code pytest suite that runs claude -p behind a recording API proxy and checks whether a canary secret reaches the wire, the transcript or the answer. Cases: cat, Read, env, unlabeled random value, known value, tail -f in foreground/background, Monitor. Subjects: bare Claude Code (control) and the redacted PostToolUse hook. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	4 weeks ago