Claude Code 2.1.224 self-hosted environments: verify the trust boundary before rollout
Quick answer
Claude Code 2.1.224, released August 7, 2026, adds self-hosted environments for Team and Enterprise organizations. A new claude self-hosted-runner process can execute Claude Code cloud sessions on machines or containers your organization operates, including sessions started from the web, mobile, desktop, scheduled routines, or the CLI.
This is not a fully self-hosted Claude stack. Repository checkouts, build artifacts, files, and injected secrets stay on your infrastructure, but session prompts, responses, tool results, queueing, transcripts, and model inference still use Anthropic's control plane and api.anthropic.com. Anthropic makes no inbound connection to your network; runners and sessions initiate outbound connections.
Before connecting a real repository, pass seven gates: eligibility, trust-boundary acceptance, one-session runner isolation, default-deny egress, per-session credentials, verified session identity, and an end-to-end recovery test. If your goal is local inference, Zero Data Retention, Bedrock/Vertex/Foundry routing, or support for non-GitHub repositories, this public beta does not meet it today.
