3 commits

Author	SHA1	Message	Date
Christopher Mühl	72dfde91a8	feat!: thin layer over Claude /sandbox + nftables CIDR block ... Drops bwrap orchestration, history overlay, forced --dangerously-skip-permissions, SANDBOX.md injection, env-file loading. claude --sandbox handles kernel isolation; claudebox manages settings.local.json sandbox.* keys and installs nftables rules matched on claude-sandbox.slice cgroup membership. New flake outputs: nixosModules.default + checks.wrapper-syntax. Docs updated to reflect the layered (not structural) FS guarantee. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-11 12:19:40 +02:00
Christopher Mühl	613d015cc1	fix: SHELL path, PATH isolation, --shell flag, nix-claude-code input ... - Resolve SHELL to nix store bash path (was /bin/bash which doesn't exist in sandbox) - Inject clean SANDBOX_PATH via makeBinPath (was leaking entire host PATH) - Add --shell flag to drop into sandboxed bash for manual verification - Use nix-claude-code flake for claude-code binary instead of host PATH discovery Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-09 14:59:43 +02:00
Christopher Mühl	0ed2d33117	feat(01-01): add flake.nix with writeShellApplication and all runtimeInputs	2026-04-09 11:11:11 +02:00