clawkwork/clawk
Stack:
Go
Claude Code
Apple Silicon
Go CLI that runs Claude Code or Codex inside a disposable Linux VM: repo mounted in, root in the guest, allow-listed network — while your host files, keys and keychain stay out of reach.
Why it's interesting
It solves the full-auto dilemma: no per-command prompts and no --dangerously-skip-permissions on your real machine. The boundary is a hypervisor, not a prompt — and if the agent wrecks the VM, destroy && clawk starts fresh.