Agent Safehouse
lastmod 2026-03-09created 2026-03-092 edits
A local agent sandboxing tool for macOS
About
- A tool that uses the native macOS sandbox to isolate local AI agents so they cannot change anything outside the system
- Every agent runs in an independent sandbox environment and cannot access the user's home directory or other projects
- Applies a deny-first access model, so only explicitly allowed directories can be read and written
- Installation is done with a single Bash script and it runs right away, with no separate build or dependencies
- An LLM-based profile generation feature can automate least-privilege sandbox-exec configuration