Code running in the Claude environment can't make outbound network connections to anything more than a tiny list of domains (GitHub, PyPI, NPM) so DDoS targets are limited.

If I was Anthropic I'd have measures in place to rate limit network traffic from individual containers.

This would be interesting to test in a controlled way, curious what the CPU/time/memory quotas per run, isolation method, and syscall filtering look like.

Would appreciate pointers to any documentation or tests.