Claude YOLO Environment

A Docker-based Claude Code environment designed to protect both the host machine and inexperienced users from well-intentioned but potentially dangerous actions, while giving Claude Code maximum autonomy.

Overview

This environment provides a containerized workspace with comprehensive safety features including secrets scanning, git hooks, and command logging. It's designed for sales engineers, forward-deployed engineers, CTOs, and anyone wanting maximum autonomy with maximum safety.

Safety Features

Container Isolation

Git Safety Hooks

Pre-commit Framework

Logging System

All operations are logged to `/logs/`:

File Structure

```

claude-yolo/

├── src/claude_yolo/ # Python package (CLI tool)

├── terraform/ # Infrastructure as Code

│ └── azure/ # Azure deployment modules

│ ├── acr/ # Azure Container Registry

│ ├── aci/ # Azure Container Instances

│ ├── vm/ # Azure Virtual Machines

│ └── scripts/ # Helper scripts

├── examples/ # Demo applications

│ └── fastapi-hello-world/ # Simple FastAPI demo

├── demos/ # Sales engineering demos

│ └── sales-engineering/ # SE demo scripts and guides

├── docs/ # Documentation

├── tests/ # Test suite

└── .github/workflows/ # CI/CD pipelines

```

Available Tools

**Core:** git, gh, jq, ripgrep (rg), vim, nano, tmux, htop, tree

**Cloud:** aws, az, gcloud

**Kubernetes:** kubectl, helm, k9s, docker, docker-compose

**IaC:** terraform, tfsec

**Databases:** psql, mysql, redis-cli, mongosh

**Python:** uv (primary package manager), ruff, mypy, pytest, bandit, pre-commit

**Security:** gitleaks, detect-secrets, trivy

**Networking:** tailscale, openvpn, cloudflared, ttyd

**Utilities:** yq, httpie (http), curl, wget

**Build:** make, cmake, gcc/g++, Node.js 20

Networking Modes

Bridge Networking (Default)

Host Networking (For MCP OAuth)

**Decision tree:**

Volume Mounts

**Linux users:** Files created by the container are owned by UID 1001. If needed, adjust ownership with `sudo chown -R $USER ./home`.

Common Commands

```bash

Set up safety features for a new project

/home/developer/scripts/setup-project-safety.sh /workspace/my-project

View logs

tail -f /logs/safety/checks.log

tail -f /logs/git/operations.log

Python projects (use uv as primary package manager)

uv init .

uv add <package>

```

Azure Infrastructure

OpenTofu/Terraform modules for deploying claude-yolo to Microsoft Azure:

Available Modules

**ACR (Azure Container Registry):**

**ACI (Azure Container Instances):**

**VM (Virtual Machines):**

Quick Deploy Workflow

```bash

1. Deploy ACR

cd terraform/azure/acr

tofu init && tofu apply

2. Push image to ACR

cd ../scripts

./push-to-acr.sh --terraform-dir ../acr --project-dir /path/to/project

3. Deploy to ACI or VM

cd ../aci # or ../vm

tofu init && tofu apply

```

File Boundaries

**Safe to edit:** `/workspace/*`, `/config/*`, `/scripts/*`, `Dockerfile`, `docker-compose.yml`, `.env`

**Read-only:** `/opt/config-templates/*`, `/logs/*` (view only)

**Never touch:** System directories, volume mount points

Development Guidelines

When working in this repository:

1. **Infrastructure Focus**: Changes typically involve Dockerfile, docker-compose, or shell scripts

2. **Safety First**: Every new capability should consider security implications

3. **User Protection**: Target users may be inexperienced - protect them from foot-guns

4. **Balance**: Maximum Claude Code autonomy within safety constraints

5. **Logging**: Ensure new features log appropriately for transparency

6. **Documentation**: Keep CLAUDE.md and README.md updated

Target Users

Demo Resources

Important Notes