3 Commits

Author	SHA1	Message	Date
Dan Guido	a1f3994cda	Harden devcontainer: pin digests, guard SYS_ADMIN, fix mount filters (#20) ... Address review feedback from #14–#19: - Pin base image and uv with SHA256 digests (#15) - Install fzf from GitHub releases instead of apt (#14) - Add SYS_ADMIN capability guard to prevent remount attacks (#16) - Fix mount filter to use target paths instead of source prefixes (#17) - Fix temp file leak in extract_mounts_to_file (#17) - Sort apt packages alphabetically (#18) - Remove unused Tailscale feature (#19) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-10 06:35:35 -05:00
Dan Guido	369b395361	Add bubblewrap and socat for Claude Code sandboxing (#9) ... These packages are required for Claude Code's native sandboxing on Linux: - bubblewrap: Provides filesystem isolation via Linux namespaces - socat: Enables the network proxy for domain filtering Without these, the /sandbox command shows installation instructions instead of enabling sandbox mode. Ref: https://code.claude.com/docs/en/sandboxing Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-30 19:19:14 -05:00
Dan Guido	91ff6f7c0c	Initial commit	2026-01-29 20:13:16 -05:00