[tppts]

So does everyone just run with giving full permissions on Claude code these days? It seems like I’m constantly coming back to CC to validate that it’s not running some bash that’s going to nuke my system. I would love to be able to fully step away but it feels like I can’t.

[apitman]

I run my agents with full permissions in containers. Feels like a reasonable tradeoff. Bonus is I can set up each container with exactly the stack needed.

[apetresc]

Honest question, when was the last time you caught it trying to use a command that was going to "nuke your system"?

[tppts]

“Nuke” is maybe too strong of a word, but it has not been uncommon for me to see it trying to install specific versions of languages on my machine, or services I intentionally don’t have configured, or sometimes trying to force npm when I’m using bun, etc.

[dymk]

Maybe once a month

[glitchcrab]

I sandbox everything inside https://github.com/strongdm/leash

That way the blast radius is vastly reduced.