clawk gives coding agents like Claude Code and Codex their own disposable Linux VM instead of your machine. Run `clawk` in any repository and the agent works inside a sandbox with a restricted network allow-list, forwarded ssh-agent for git push, and your files mounted read-only. The VM uses Apple Silicon's Virtualization.framework (Linux via firecracker is experimental) — no Docker daemon, no sudo, no extra host tooling.

Security rests on the hypervisor boundary: unknown outbound connections are blocked, host SSH keys never enter the guest, and a wrecked VM is one `clawk destroy && clawk` away. Agent conversations and repo state persist on the host; only the VM disk is lost.

Install via `brew install clawkwork/tap/clawk` on macOS 14+. Quickstart: `cd` into a project, run `clawk` to boot and attach Claude, then `clawk down` to pause or `clawk attach` to resume. Forward ports with `clawk forward add` and extend the allow-list with `clawk network allow`.

Multi-repo tickets use `clawk work INFRA-123` to create a sandbox with a git worktree per repository on a fresh branch, and `clawk pr` opens cross-linked PRs. Idle VMs suspend to disk, costing almost nothing.