Four words. Twenty-one characters including the spaces and the two dashes. That was the entire command. That was everything.
leash --open claude
Jay typed it for the first time on a Thursday morning with a cup of coffee balanced on a stack of O'Reilly books that he'd brought from home out of habit, even though none of them were relevant to the work anymore. The books were Go books, SRE books, books about distributed systems. The work was about something else now.
He pressed Enter.
The terminal output was sparse and purposeful. A container image pulled. A sandbox initialized. Cedar policies loaded—the ones Navan had written, the defaults that shipped with Leash, and the project-specific overrides from the config file. The agent's API key forwarded automatically from the environment. The MCP observer attached. The syscall monitor engaged.
And then Claude was there, inside the container, ready to work, fully monitored, fully governed, fully contained.
The whole process took four seconds.
"That's it?" Jay said, to no one in particular. Navan was across the room, headphones on. Justin was in a meeting.
Jay had spent years building infrastructure. He'd written deployment scripts that were hundreds of lines long. He'd maintained Ansible playbooks and Terraform modules and Kubernetes manifests that required entire teams to understand. He'd built systems where the distance between "I want to do a thing" and "the thing is happening" was measured in days, sometimes weeks.
Four words. Four seconds.
He opened the Control UI at localhost:18080 in a browser tab. There it was: a real-time view of what Claude was doing inside the container. File reads, tool calls, network requests. Every action visible. Every action auditable.
Jay gave Claude a task: refactor the error handling in a Go module. He watched the agent read the source files, watched it analyze the error patterns, watched it write new code. Every file access logged. Every write operation visible in the UI. The Cedar policy permitted writes to /workspace/src/** and denied everything else. The agent never tested the boundary. It didn't need to.
The refactor took eleven minutes. The code was clean. The tests passed. The audit trail was complete.
Jay leaned back. He thought about all the times he'd wished for exactly this: the ability to hand a task to something smarter and faster than him, without losing visibility, without surrendering control. The ability to trust, but verify. To delegate, but observe.
He opened his notes file and typed: leash --open claude. The simplest and most powerful command in the factory. Four words that change the relationship between human and machine.
Then he ran the command again. He had more work to delegate.
The contrast between years of Ansible playbooks and Terraform modules vs four words and four seconds. That's the whole paradigm shift in one paragraph.