My Paranoid Coding Machine Setup

The combination of running AI agents which can install and run anything with supply chain attacks / the Hackening has made me much more paranoid about my personal machine than I used to be. I've been slowly improving this, and finally moved all of my AI agents into a VM today. I'm sharing this to show how far you can take this, even if you have requirements like GPU access or the ability to run (something close enough to) Docker. This is a follow-up / longer version of a recent shortform . Goals I run Claude Code in a custom harness which currently disables all permission prompts. I'm not really that worried about Claude doing something dangerous on purpose, but I worry about: Claude breaking something by accident (mistyping a command that turns into rm -rf / ). Claude installing malware (most likely via a supply chain attack). My biggest worry is kernel exploits giving attackers access to my user account, allowing them to install a keylogger and steal my password manager vault [1] . Claude needs the ability to run Docker for testing, and shared access to my GPU for ML work. Non-Goals To get its work done, Claude needs access to many API keys (GitHub, OpenRouter, etc.). These keys