So don't let them interact with anything external. You can push and pull to their git project folders over the local filesystem or network, they don't even need access to a remote.

▲

lll-o-lll 7 hours ago | parent [-]

Unless you are talking about running a local model, that’s not possible.

	▲	sanitycheck 4 hours ago \| parent [-]
		Obviously if you're running Claude Code you need a token for that and an internet connection, that's kind of a given. What I'm talking about is permission (OS level, not a leaky sandbox) to access the user's files, environment variables, project credentials for git remotes, signing keys, etc etc.