That’s a solid separation of concerns. Local control over the artifact is the real win. Don’t forget the API key lives on your side, not theirs. That’s the actual leverage point most people miss...
Yes - the Claude subscription runs on the owner's own account, so the key stays on their side of the box. Same logic as the signing keys here: never in the agent's context, and nothing goes out before a human clicks approve.
1