AI Insight Log

Jan 17, 2026 · Information Security

How the Django Co‑founder Used Claude to Reverse‑Engineer Its Own Sandbox

Simon Willison instructed Claude Cowork to explore its own application bundle, revealing that the AI runs inside a full Ubuntu 22.04 virtual machine on macOS via Apple’s Virtualization.framework, protected by a dual sandbox of VM isolation and Bubblewrap, with strict user and syscall restrictions.