isolate: Disposable Linux VMs for Claude Code and Codex on Apple Silicon

isolate (iso) is an open-source tool that runs Claude Code and Codex inside disposable Linux VMs on Apple Silicon Macs (macOS 27+). This setup provides agents with a full development environment—including Docker, git, compilers, and package managers—without exposing the host system.

Security and Isolation

• API Key Protection: API requests are routed through a host-side Swift proxy, ensuring provider keys never enter the VM.
• Network Controls: Egress traffic can be disabled entirely or filtered to a specific list of hosts.
• Secrets Management: Secrets are encrypted using a passphrase combined with the Secure Enclave. Audit logs record events and variable names but never the actual values.

Workflow and Integration

• Change Review: Users can inspect agent modifications before they impact the project using iso diff and iso pull --review.
• Editor Support: The command iso code . or iso zed . opens the VM directly in VS Code or Zed.
• Basic Commands: The workflow involves iso setup, iso up, and then launching the agent with iso claude or iso codex.

The project is a Swift fork of Trail of Bits' coop, licensed under Apache 2.0.