sandbox-exec
last updated: Mar 09, 2026
deprecated tool for running a mac app inside a policy sandbox, superseded by the App Sandbox capability as far as mac is concerned; however it's useful to us for running agents inside a policy-constrained sandbox anyway.
See agent-safehouse for a policy-generating wrapper for it