claude-sandbox

Work through a pull request's review comments systematically: fan out read-only subagents to analyse each comment in parallel, group coupled findings, then apply fixes serially with one commit per logical fix and a reply + thread-resolve for each. Works for any reviewer — automated bots (CodeRabbit, Copilot, etc.) or humans. Use when a PR has many outstanding review comments to triage and address, when the user says "walk through the review comments", "address the PR comments", or "clear the review on PR #N".

Network egress, firewall, and lateral-movement design for this repo's bwrap Claude sandbox. The per-process egress jail (netns + pasta routing allowlist, ADR 0015, issue #56) is ON by default as of 2026-06-18, fail-closed, with a CLAUDE_SANDBOX_EGRESS_JAIL=0 escape hatch — overriding ADR 0005's earlier open-egress default. Surface BEFORE proposing or discussing ANY network change: egress filtering, firewall / nftables / iptables / DOCKER-USER, `--unshare-net`, netns / veth, pasta / slirp4netns, a CONNECT or SNI proxy, `HTTPS_PROXY` injection, VLAN / segmentation, Claude Code's native sandbox `allowedDomains`, or device-access networking (EPICS / Channel Access / pvAccess / PMAC).