Pattern

OS-level sandboxing for local coding agents (Seatbelt, bubblewrap, sandbox-runtime)

Confine the shell commands a local coding agent runs to an allowed set of directories and network destinations, enforced by the operating system, so the agent can work with fewer approval prompts without being able to write anywhere or reach any host on the machine's network.

Classification Process-level filesystem and network isolation for agents running on a developer's machine.