claude-cage
A lightweight Claude Code sandbox with git filtering, filesystem isolation, and optional network controls - sensitive files never enter Claude's workspace and it can't access your system without permission. Changes can flow back automatically. Concurrent sessions. Supports bubblewrap (Linux/WSL) and Docker.