Clawk

TLDR Dev · 3 days ago

Clawk is a tool that runs coding agents like Claude Code inside disposable Linux virtual machines with restricted network access, preventing agents from affecting the host machine or accessing sensitive files while allowing them to install packages and execute code freely within the sandbox. The tool requires macOS 14+ on Apple silicon or Linux with firecracker support and provides features including network allow-listing, VM snapshots for hibernation, multi-repository ticket workflows, and automatic memory release for idle sandboxes. Users can run agents at full autonomy without per-action confirmation prompts because containment is enforced by the hypervisor boundary and network restrictions rather than permission checks.