JPMorgan is putting Claude Code inside a sandbox with no standing access to internal systems

JPMorgan is implementing a new environment called Devspace for engineers utilizing Claude Code, featuring a $2,000 monthly spending cap. Crucially, Devspace runs Claude Code in a containerized AWS environment, rather than directly on employee machines. This setup ensures the agent has an identity but no standing entitlements, with access granted only as needed for specific tasks. This approach aims to limit the blast radius if the agent makes errors, potentially becoming a standard architecture for enterprise coding agents with isolated workspaces and temporary permissions.