Start with your privacy boundaries
CCIso aims to protect local privacy and keep Claude working within boundaries you control. This guide explains what to check and how to respond to a finding.
Decide what you need to protect
Section titled “Decide what you need to protect”- Connection paths: which Claude processes are included, where they connect and whether the rules are active.
- Specific credentials: how proxy secrets are stored and whether named Claude credential files need tighter permissions.
- Check results: which items were observed, which lack evidence and what needs your attention.
Full private-folder isolation and per-request outbound content inspection are not implemented. If Claude must access only files you explicitly select, read the scope first. Connection status is not a file-access permission.
Choose a task
Section titled “Choose a task”What a first successful setup should show
Section titled “What a first successful setup should show”A complete first check should identify included entry points, processes that need restarting, credential permissions needing attention and the outcome of connection checks. Unknown items must remain unconfirmed rather than being treated as passed.
Core protection and checks are the same with or without activation. Establish whether that scope meets your needs before considering what activation adds.
References
Section titled “References”Reviewed on November 1, 2026: Anthropic’s network configuration, permissions and sandboxing. CCIso instructions describe macOS version 0.1.7.