I’m building a project that helps provide more visibility to the agent-agent communication protocols recently introduced within Claude Code. As part of my research, I’ve been experimenting with running Claude Code in isolated docker containers and giving agents “hierarchies” (e.g., master / orchestrator / worker), but of course the question becomes “how isolated” can containers be before they are impediments to the pace of work? A few thoughts I have about this (interested in this group’s thoughts): 1) one has to run CC in yolo mode for multi-agent to be of any use today or else the human is the bottleneck; 2) CC in a gnome terminal in yolo mode can do a lot of damage on its own to anything it can see; 3) the mitigating control then is to limit what it can see / force it to an “append only” mode / monitor logs - and my vm is a form of isolation on its own. So logically, Docker isolation is interesting for environment set up and insulating OOM issues, etc., but not necessary security within the VM? Where would you establish the boundaries that balances keeping really bad things from happening while enabling the model to work at pace. submitted by /u/clash_clan_throw
Originally posted by u/clash_clan_throw on r/ClaudeCode