Sandbox your LLM coding agents on macOS so they can only touch the files they need - View it on GitHub