Why I Run My Coding Agent Inside a Devcontainer

I limit what Claude Code can touch to the inside of a container, so I can use auto mode without worrying, and I use named volumes to decide which environment reads and which one writes.