This is awesome, I love how it lets claude code "go rogue" safely inside a container. I don't like how agents can screw with my filesystem so this isolation is good