A little box to run AI agents in: policy-driven OS sandbox (Seatbelt on macOS, namespaces on Linux) - View it on GitHub