macOS Seatbelt sandbox wrapper for Oh My Pi (omp) — strict read/write confinement with no extra dependencies - View it on GitHub