I noticed Cowork spins up a VM but the Claude code doesn't, so I opened it up to find out why

Found a 10GB VM bundle in Claude's app-support folder and spent the weekend taking it apart read-only. Notes: - Full Ubuntu ARM64 cloud image booted via Apple's Virtualization.framework, not a container or Seatbelt sandbox. The machineIdentifier bplist is the giveaway. - Control plane is a daemon (coworkd, internally sdk-daemon) speaking vsock RPC to the host. Runs as root with systemd hardening deliberately off, because the VM itself is the boundary. - Network egress runs through gVisor's userspace netstac