I have a few VMs that I can rebuild trivially. They only have the relevant repo on them. They basically only run Claude in yolo mode.
I do wish I could use yolo mode, but deny git push or git push —force.
The biggest risk I have using yolo mode is a git push —force to wipe out my remote repo, or a data exfiltration.
I ssh in on my phone/tablet into a tmux session. Each box also has the ability to have an independent environment, which I can access from wherever I’m sshing from.
All in all, I’m pretty happy with the whole situation.