
tutorial
How to Sandbox Claude Code and Codex in NVIDIA OpenShell (Keep Them Off ~/.ssh)
Claude Code's own sandbox still lets shell commands read ~/.ssh. OpenShell hides your home dir and hands the agent a fake API key. Plus 3 setup gotchas.
aiaiagentssecurity