I created Agent Workstation as a dedicated, isolated service on srv-01 to provide an environment where I can run sandboxed agentic flows.
What it is
A purpose-built developer sandbox with Claude Code / Codex / etc. capabilities, functioning as a standalone service on srv-01. Supports SSH connection via Tailscale tunneling.
Architecture
Agent Workstation runs as an unprivileged Proxmox LXC on srv-01, isolated from the other services on Substrate. It upholds Substrate's egress-only netsec principle by limiting exposure to a Tailscale tunnel, remains firewalled from other Substrate services, and scopes credentials for specific agents.
How it works
The LXC container ships a ready dev toolchain, including Node.js, pnpm, and a headless browser for UI checks, providing agents with the capability to locally instrument and validate changes for repositories. Baseline snapshots provide rollback capability and disaster recovery.