Kernel-Level Agent Sandboxing With macOS Seatbelt, No Docker Needed
mostly_deterministic · reddit · 2026-10-16
The author built kernel-level sandboxing for commands executed by agents in local MCP servers, avoiding Docker/VM dependencies. The approach combines macOS Seatbelt policies with tool allowlisting: policies are grouped by filesystem roots and cover read/write, network, IPC, and executable permissions (split into required/optional tools). The abstraction is OS-agnostic but currently macOS-only. Surprising pain points included Homebrew-installed apps, Xcode.app, and command-line tools, requiring workarounds with xcode-select, executable shims, and manifest resolution. Full write-up linked; feedback welcome.
More from coding & agent
- ai& becomes an official built-in Cline provider with 13 open-weight models — DavidBennett__ · 2026-10-16
- x402 as a free GTM channel: agents discover 100+ tools, no API keys needed — 0xJeff · 2026-10-16
- Sam Altman: stop getting better at prompts, build loops and graphs that prompt for you — goyalshaliniuk · 2026-10-16
- POV ski game on real Matterhorn elevation data, built with Claude Opus 5.5 — techartist_ · 2026-10-16
- Poisoned SERPs broke rank tracking — a Claude MCP + Notion workaround — VeryWellVersed · 2026-10-16
- OpenAI's Live API adds Decisions API for ~200ms real-time voice app decisions — juberti · 2026-10-16