How we contain Claude across products
… Pattern 1: The ephemeral container claude.ai code execution Though best known as a chat interface, claude.ai also writes and runs code, generates files, and calls connectors. When Claude runs code inside claude.ai, it does so in a gVisor container on isolated infrastructure. …