I use droneship, it basically feels the same as running locally (droneship run claude) but it runs in a cloud sandbox with easy egress control. It takes running snapshots that you can rollback and you can diff the workspace and pull to bring the changes back to your local.