Running Claude code in an isolated, temporary VM, with no access to memory is a good start. You give it your repo, prompt and you get back PRs. Claude code on web is a convenient way to do that.

▲

pianopatrick an hour ago | parent [-]

given that claude has found vm escapes, you might consider going one step further and just getting a claude only laptop

	▲	pitched 7 minutes ago \| parent [-]
		You need a laptop that has no camera, mic, keyboard, or any type of input. No display, speakers, or any type of output. No Bluetooth, wifi, or any way to join a different network.