I run Arch Linux on my workstation. I originally ran Claude only in a VM, but have since "sandboxed" by simply adding additional users to my machine and running Claude in those user accounts. I use waypipe to run gui apps for those users on different KDE/Plasma activities so they remain somewhat isolated while I can run the various IDEs, Obsidian apps, etc. in their environments.
These days, I'm just running Opus 5.5 in Claude Code. I've tried OpenClaw and Hermes and didn't get anything interesting to happen. I tried OpenCode with a local Qwen model and it was ok, but slow.
I now run everything from Obsidian. I have QuickAdd commands for creating a new plan prompt, a plan workflow skill that builds the plan under the plan prompt in a subpage, with a handoff doc that's a subpage of the plan. I've got QuickAdd commands for "Send to Claude Session" that opens a tmux session keyed off the plan name so I can run separate sessions per-plan.
The plan workflow also maintains a global "Efforts" page that shows all active and completed plans. The former includes details like open PRs, % complete, next step, etc. and a color-coded button to show whether the session is executing, idle, or closed.
I maintain separate user accounts and obsidian vaults for each major project (work, personal project A, personal project B, etc.).