Why I Stopped Letting Claude Code Touch My Main Drive

AI coding agents like Claude Code can potentially delete critical files or access sensitive folders like .ssh on a Windows C: drive. To prevent these risks, users should map agent workspaces to separate drive letters. Using subst.scsoi.com for local folders or drive.scsoi.com for WebDAV/cloud workspaces creates a sandbox. This ensures agents cannot access data outside their assigned drive, removing the need for Docker Desktop or VMs while protecting the main system from rogue commands.