Pre-release. sdlc.cc is not generally available. There is no completed customer deployment and no design partner yet, and per-class detection accuracy has not been published. What is and is not proven →
JOURNEY_SENTINEL_CLAUDE_CODE · Supported
Claude Code gateway
Privacy before Anthropic sees the prompt.
A native installer points Claude Code at https://api.sdlc.cc, not api.anthropic.com. Developers keep using Claude Code; your policy scrubs PII, credentials, and IDs on the way out. The installer verifies that your key can use the model gateway before saving it.
The problem Claude Code creates for security
Claude Code is a full model client in the terminal. Prompts can include customer records, secrets from the repo, and paste from tickets — and they leave as ordinary HTTPS to Anthropic unless you change the path.
It is not a browser tab
Browser Guard covers ChatGPT and Claude web. Claude Code talks to Anthropic’s API with environment-configured credentials. Extension policy never sees those requests.
Manual env edits do not scale
Asking every engineer to set ANTHROPIC_BASE_URL by hand fails onboarding, drifts across machines, and is easy to reverse. Pilots need a double-click installer.
Pointing at Anthropic bypasses you
If ANTHROPIC_BASE_URL still says api.anthropic.com, nothing at sdlc.cc runs. The installer refuses that origin and writes the gateway instead.
What the product does
One Supported path: install → quit/reopen Claude Code → model calls hit the sdlc privacy gateway with your tenant key.
Install in minutes
Installers are public. A messages-scoped key still comes from operator activation.
| Platform | Artifact | What you do |
|---|---|---|
| Windows | SdlcClaudeCodeGatewaySetup-windows-amd64.exe | Double-click → use Paste Key or Ctrl+V → scope check → fully quit Claude Code → reopen → -verify |
| macOS (Apple Silicon) | …-macos-arm64.dmg Fallback .app.zip |
Drag to Applications → open → use Paste Key → scope check → use the persistent menu-bar shield |
| macOS (Intel) | …-macos-amd64.app.zip | Open the app → enter key → use the persistent menu-bar shield |
| Linux | linux-amd64 binary | Run in a terminal; silent flags available for fleets |
Seeing INSUFFICIENT_SCOPE?
The key is valid, but it is not a model-gateway key. Ask your sdlc.cc tenant operator for the Model gateway, messages only profile, then run the installer again. Current installers reject the wrong scope before changing Claude Code.
# Windows silent / Intune
SdlcClaudeCodeGatewaySetup-windows-amd64.exe -silent `
-api-key sk_sdlc_... -gateway https://api.sdlc.cc
# Verify (any platform)
… -verify
# Must show https://api.sdlc.cc — never api.anthropic.comChecksums: SHA256SUMS. The current pilot DMG is unsigned; signed Windows MSI and notarized macOS DMG remain Planned (need release certificates). The .app.zip remains available as a fallback.
Who it is for
Engineering orgs on Claude Code
Teams that already live in Claude Code and need a governed path before prompts leave the company.
Security / privacy owners
You want evidence that model traffic is not aimed straight at Anthropic, with the same policy engine as Browser Guard and the Gateway API.
Anthropic SDK apps
Anything that honors ANTHROPIC_BASE_URL can use the same gateway origin and a messages-scoped key — not only the Claude Code UI.
What this covers — and what it does not
| Surface | Status | Boundary |
|---|---|---|
| Claude Code via installer → sdlc gateway | Supported | Calls that honor the installer-set env + messages-scoped key |
| Anthropic SDKs with the same env | Supported | Same gateway contract; streaming is buffered SSE |
| Claude web in managed Chrome/Edge | Supported | Use Browser Guard — different product surface |
| Claude Desktop GUI via env alone | Preview | May ignore env; prefer Desktop Guard or transparent proxy |
| Signed MSI / notarized Developer ID DMG | Planned | Unsigned pilot .exe / .app ship today |
| Uploads, images, voice, repo binary blobs | Unsupported | Text model path only for this gateway story |
Full truth table: support matrix. Do not claim store listings, Authenticode, or notarization until those rows move off Planned.
Why teams pick this over a wiki page of env vars
One guarded install
Windows and macOS use masked key fields with a dedicated Paste Key action, then verify messages authorization before writing user settings.
Refuses the wrong origin
The installer will not accept api.anthropic.com. Misconfiguration fails closed at install time.
Same engine as the rest of sdlc.cc
One policy, one audit model (counts and decisions — not raw prompts by default), shared with Browser Guard and the Gateway API.
Fleet path when you need it
Silent -silent -api-key for Intune / MDM, plus a script kit in the operator ZIP for advanced rollouts.
Get Claude Code on the gateway
- Download the installer for your OS from /downloads/.
- Request activation for a
sk_sdlc_*key with themessagesscope (Console or get-started). - Run the installer, enter the key, fully quit Claude Code, reopen, then
-verify. - Send a harmless test prompt and confirm traffic is not aimed at Anthropic’s public API host.
Pre-release pilot software. Pricing on the pricing page is illustrative until commercial terms are confirmed with buyers.