The fact
A lightweight Docker wrapper (claude-pod) sandboxes Claude Code to the current project folder only, eliminating security exposure
Minimal solution (4 files, MIT-licensed) providing a practical permission model without complex dependencies
Click the link to read an article on the topic: