Sandboxing AI Coding Agents: Network Firewall + Restricted Shell Environment

Running Claude Code or other AI agents with unrestricted network access? Here's how I built a secure, isolated dev container with iptables firewall to control exactly what they can reach.