A better way to limit Claude Code (and other coding agents!) access to Secrets

A new workflow drops Claude Code into a Bubblewrap-based sandbox, cutting Anthropic's client-side code out of the trust loop. Compared to spinning up Docker or juggling user accounts, Bubblewrap locks things down tighter - with less setup and cleaner OS-level walls around files, network access, and secrets.