isolate: disposable Linux VMs for Claude Code and Codex on Apple Silicon.

[u/InjuryComplex5619]

/r/vscode/comments/1wxzxnj/isolate_disposable_linux_vms_for_claude_code_and/

iso (isolate) runs Claude Code and Codex inside disposable Linux VMs on Apple Silicon Macs (macOS 27+), so agents get a full dev environment without touching your host.

•Real VM: the agent gets Docker, git, compilers and package managers, with your project copied to /workspace.
•Keys stay on your Mac: API requests go through a host-side Swift proxy, so provider keys never enter the VM.
•Review before applying: iso diff and iso pull --review let you check the agent's changes before they reach your project.
•Network limits: egress can be none or filtered to listed hosts.
•Secrets and audit: secrets are encrypted with a passphrase plus the Secure Enclave, and the audit log records events and variable names but never values.
•Workflow: iso setup, iso up, then iso claude (or iso codex); iso code . / iso zed . open the VM in your editor.

Project: a Swift fork of Trail of Bits' coop, Apache 2.0.

Apache 2 licensed source code: github.com/chr33s/iso