I’m using safe house [0] its a bash wrapper around sandbox-exec

0 https://agent-safehouse.dev/