[nunez]

This is the paranoia talking, but given that Claude is going to be doing its own thing, I would put this box in its own VLAN or behind deny-all firewall rules to protect against network escapes.