Dan Tentler was having a presentation about Claude and Security, during that he mentions incus and wrote a product “Airlock” on top of incus:
This presentation is great in general.
EDIT: If you use an LLM like I did I recommend the same as he does and Stéphane told me a while ago, use a container for these tools, bind mount the minimal set of data. You may use an remote Editor like zed.