Anthropic published a detailed engineering post on how it sandboxes Claude across Claude.ai, Claude Code, and Cowork — with gVisor, Seatbelt, Bubblewrap, and full VMs.