didericis 43453c66ea docs: add research note on remote Docker VM as an isolation upgrade ...

Argues that running claude-bottle unchanged on a remote Linux VM with
dockerd is the cheapest practical path to stronger isolation than
local Docker — preserves the v1 pipelock topology, requires zero code
changes, and shrinks the agent's blast radius from the developer
laptop to a disposable VM. Cross-references the existing
stronger-isolation-alternatives and local-vs-remote-agent-execution
notes so the research set composes cleanly.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-10 01:07:17 -04:00

..

.gitkeep

Initial commit

2026-05-07 22:45:36 -04:00

claude-code-token-revocation.md

docs: add research note on revoking Claude Code OAuth tokens

2026-05-07 23:13:42 -04:00

host-dispatch-to-container-agents.md

docs: replace stale .sh paths with claude_bottle/*.py equivalents

2026-05-10 00:27:25 -04:00

landscape-containerized-claude.md

Initial commit

2026-05-07 22:45:36 -04:00

local-vs-remote-agent-execution.md

Initial commit

2026-05-07 22:45:36 -04:00

network-egress-guard.md

docs: replace stale .sh paths with claude_bottle/*.py equivalents

2026-05-10 00:27:25 -04:00

oauth-token-exposure-to-claude.md

docs: replace stale .sh paths with claude_bottle/*.py equivalents

2026-05-10 00:27:25 -04:00

pipelock-assessment.md

docs: replace stale .sh paths with claude_bottle/*.py equivalents

2026-05-10 00:27:25 -04:00

remote-docker-vm-isolation.md

docs: add research note on remote Docker VM as an isolation upgrade

2026-05-10 01:07:17 -04:00

secret-exfil-tripwire-encodings.md

docs: add research note on multi-encoding secret exfil tripwires

2026-05-08 00:00:51 -04:00

stronger-isolation-alternatives.md

docs: add research note on stronger isolation alternatives

2026-05-10 00:38:46 -04:00

tea-token-isolation-via-proxy.md

docs: add research note on isolating tea token via proxy

2026-05-07 23:30:06 -04:00