Your code stays where it is.

Local only.The server listens on your own computer and refuses other machines and other websites.
One folder.The crew reads and writes only inside its folder. Links that lead outside are refused.
Commands wait.Every command the crew wants to run waits for your OK, unless you choose otherwise.
Secrets encrypted.Keys, tokens and credentials are encrypted before they touch the disk.
Undo.Every run is snapshotted in a private repository, separate from your own git history.
Know the limit.An approved command runs with your account's permissions unless you turn on the optional Docker sandbox. Prompts go to the providers you add keys for.