Simon Willison tasked Claude Code with evaluating SmolVM as a secure sandbox for Python and JavaScript. The goal involved restricting RAM, CPU time, and network access to safely execute user-provided data transformations. The experiment stalled because the Claude Code container, itself a Firecracker guest, cannot run the required virtualization layers.