Lock Down the Machine: Workstation Security for Claude Codebeginner · ~60 min

The Password You Typed Fifteen Minutes Ago — Prove Nothing on Your Machine Reaches Root Without You

You already decide, one prompt at a time, what your AI assistant is allowed to do. But underneath that decision sits an older one your operating system made for you years ago: when you type your administrator password, how long does it stay typed?

On most machines the answer is fifteen minutes, and during those fifteen minutes any command that starts with sudo — yours, a script's, or an agent's — can become root without a single prompt. This project asks the question almost nobody asks about their own workstation: right now, at this second, what can reach root here without a human at the keyboard? And it answers it with commands whose output you can read yourself, rather than a reassuring feeling.

🤝 Want this built for you? Start a request — our AI scopes it, estimates a price range, and matches you with a vetted AI Advisor. →

Two ways to open it

Just this build

$40 one-time

Unlocks this full walkthrough on your account — no subscription, and no account needed until you check out. Advisor-grade build.

Best value Rovvi AI Advisor membership

$69 / month

Every Ambassador-exclusive build, first access to new ones, and your spot on the advisor-only needs board. Or $300/year.

Become an Advisor to unlock →

What you'll do

A short read-only report script you own that answers four things about your own machine on demand — whether your account is an administrator, whether root demands a password at this exact moment, whether any passwordless rule exists for you on this host, and what is sitting in your sudo drop-in directory — plus a deliberately shortened credential-cache window installed through a syntax-validated drop-in file with a tested escape hatch, and a completed drill in which you planted a harmless passwordless rule, watched your own report catch it and exit non-zero, removed it, and watched the report go clean again.