agent-safehouse (https://agent-safehouse.dev) was my answer to this.

I was using Docker containers for sandboxing but it was annoying at times, not so much for the performance hit (which wasn’t noticeable running in OrbStack) but various little papercuts like no shared clipboard, node_modules pulling in Linux binaries or macOS binaries depending on whether I ran npm install from inside the sandbox or my own shell, etc.

With agent-safehouse, I get the isolation I want (more customizable than with Docker) without needing a VM or container.