clawk, a new open-source utility developed by clawkwork, introduces a streamlined method for securely deploying AI coding agents using disposable, network-restricted Linux virtual machines. The project addresses critical security vulnerabilities associated with granting autonomous coding models direct access to host development environments. By isolating agent operations within a dedicated virtual machine, clawk ensures that unrestricted commands, system-level package installations, and untrusted code execution cannot compromise the developer workstation or access sensitive credentials. The architecture eliminates reliance on traditional container runtimes or system-level daemon processes. Instead, clawk directly boots any OCI-compliant image into a copy-on-write ext4 disk, leveraging Apple Virtualization.framework on macOS Apple Silicon systems. Outbound network traffic is strictly controlled through a DNS-aware allow-list enforced at the userspace level beneath the guest operating system. This configuration permits access to standard package registries and development services while blocking unauthorized data exfiltration. Even root-level access within the virtual machine cannot alter these network policies. Workflow integration is designed for immediate deployment. Developers can activate a sandboxed agent environment with a single terminal command, automatically mounting the current repository and forwarding host-side SSH credentials. The tool supports seamless authentication with major AI coding assistants, including Claude Code and Codex, allowing them to operate with full permissions without requiring per-action confirmation prompts. All project files, version control data, and agent conversation histories are persisted on the host system. If the virtual machine requires reset, it can be instantly destroyed and rebuilt without data loss. Idle sessions automatically suspend to disk to conserve memory, and users can resume exact working states through snapshot functionality. Currently operating in a pre-1.0 development phase, clawk is distributed under the Apache 2.0 license. Native support targets macOS 14 and later on Apple Silicon, with experimental Linux compatibility available via Firecracker. The project remains actively maintained, with a development roadmap prioritizing multi-VM memory management and enhanced cross-platform compatibility. By decoupling AI agent execution from the host environment, clawk establishes a new local-first standard for secure, autonomous software development workflows.