ShellActive — a subsystem of fedora-desktop, not an independently-versioned package
CCY (Claude Code YOLO)
Rootless-Podman per-project sandboxing for AI coding agents — blast-radius containment
CCY runs Claude Code inside a disposable, rootless Podman container with permission prompts disabled, so an agent can work at full autonomy without the filesystem it can damage extending past the project it was launched in.
It is the containment layer underneath everything else here: policy enforcement (the hooks daemon) and quality gates (the QA/CI packages) both assume an agent is already sandboxed. CCY is what makes that assumption safe to make.
Lives inside the fedora-desktop repo rather than as a standalone package — it started as one piece of a broader "get a fresh Fedora box ready for development" toolkit and grew into its own subsystem.
Pipeline
- Rootless Podman
- No root daemon, no privileged containers — the isolation boundary holds even if the agent inside is fully compromised.
- Per-project, disposable
- Each container is scoped to a single project and torn down after use — no persistent state to leak between engagements.
- Built for --dangerously-skip-permissions
- Designed specifically so permission prompts can be safely disabled — the sandbox is the safety net, not the prompts.