Agent Safehouse

Go full --yolo. We've got you.macOS-native sandboxing for local agents. Move fast, break nothing. LLMs are probabilistic - 1% chance of disaster makes it a matter of when, not if.

[mkusaka]

macOSでkernelレベルのsandbox-execを使い、safehouse.sh単一スクリプトが作業ディレクトリのみ書込許可し~/.sshをdeny-firstで遮断します。