Development Sandbox
The repo ships a sandboxed development container with Go, Claude Code, and network isolation — all outbound traffic routes through a domain-allowlisting proxy, so an agent working in the sandbox can only reach explicitly permitted hosts.
Prerequisites
Section titled “Prerequisites”-
Copy the environment template and fill in your keys:
Terminal window cp .env.example .env# set LINEAR_API_KEY and GITHUB_PAT_MOCK_MACHINES -
Docker and Docker Compose installed.
Lifecycle
Section titled “Lifecycle”VS Code — Dev Containers: Reopen in Container (delegates to the Docker
Compose stack via .devcontainer/devcontainer.json).
Terminal:
make sandbox-build # build the imagemake sandbox-run # interactive session (runs the entrypoint)make sandbox-shell # plain bash shell (skips the entrypoint)Rebuild after changing Dockerfile.dev, docker-compose.yml, or the proxy
config (make sandbox-build). Tear down with docker compose down, or
make sandbox-clean to also remove the built image.