New post: Sandboxing AI dev tools in VMs with Lima Claude Code, Gemini CLI, Codex - they all can run arbitrary code on your machine and leak sensitive data. So does npm/pip. Here's how to isolate them properly while keeping a good dev experience: (Chris Hager ⚡🤖)