Comment by mlmonkey

> Then I lock down Claude Code’s permissions to only edit these two files and run run.sh. No direct Python execution, no pip installs, no network access, no git push, etc.

How does one run Claude Code without network access?