Dockered Claude: giving an AI agent the keys to my code without giving it the house (opens in new tab)

How I sandbox Claude Code in a Docker dev container on WSL so it can edit my code freely but never touch my host machine or read the files…