augur runs Claude Code inside an isolated guest where it can build, run, and test Apple-platform code, while your host stays out of reach. Only the current directory is exposed; network egress is limited to an allowlist enforced on the host.

Why augur

• Xcode inside the sandbox — not just Linux. macOS VM mode boots a real macOS guest on Apple’s Virtualization.framework, with Xcode, xcodebuild, and the iOS Simulator preinstalled. Most agent sandboxes stop at Linux containers; augur gives the agent the full Apple toolchain without giving it your Mac.
• xcodebuild test works headless, over SSH. Tests that need testmanagerd normally require a GUI login session. The base VM is built with auto-login and a virtual display, so the agent can run every test type unattended. See Running xcodebuild test.
• One command, no GUI on macOS 27. On a macOS 27+ host and guest, augur build --macos provisions the VM’s account through macOS 27’s VZMacGuestProvisioningOptions. There is no Setup Assistant to click through, and the admin password is randomized per build. Older pairs fall back to a short manual step. See…