Run any coding-agent CLI (claude, codex, aider, ...) behind two boundaries it can't ignore: a logging/enforcing egress proxy and a zero-install, kernel-enforced filesystem jail.
By chatting or signing in you agree to the Terms and chat-message logging (revocable in History).