Security

Drydock: a sandbox for Claude Code and Codex on macOSDrydock runs Claude Code or Codex in a throwaway, hardware-isolated VM on macOS. No real API key inside, egress denied by default, only approved diffs get out. tech·2026