pythoninthegrass

Coding Agent Sandboxes — Comprehensive List

Compiled from awesome-lists (restyler/awesome-sandbox, webcoyote/awesome-AI-sandbox, bureado/awesome-agent-runtime-security) and a survey of vendor blogs / field guides published through 2026. Grouped by isolation primitive and then by deployment model.

1. OS-level primitives (no container, no VM)

These rely on kernel/userland features to constrain a normal host process. Lowest overhead, weakest boundary.

macOS Seatbelt / sandbox-exec — Apple's TrustedBSD-based MAC framework. Used directly by Codex CLI, Gemini CLI, and underneath Anthropic's srt.
Linux Landlock — Unprivileged filesystem/network LSM; default backend for Codex CLI on Linux.

TinyGPU Setup on macOS

Prerequisites

Python >= 3.11 (tinygrad 0.12.0 requires it)
uv (or pip)
numpy

1. Clone tinygrad and install it

Fix resilio sync permissions on synology raid pool

Group membership: rslsync wasn't in the users group. Added it by editing /etc/group directly (synogroup and usermod both failed on DSM):
```
sudo sed -i 's/^users:x:100:$/users:x:100:rslsync/' /etc/group
sudo synopkg restart resiliosync
```
Synology ACLs: The + on directory permissions indicated ACLs were in effect, which overrode the permissive POSIX bits. The ACL only allowed guest and administrators. Added an explicit entry for rslsync:

NOTE: I use [ArchLinux ARM][] with [sway][] wayland window manager and [pipewire][] for audio.

All of the functionality here works with NO need to run argononeup.sh script.

First time setup

As a one time setup, update pi bootloader EEPROM configuration:

sudo pacman -S rpi5-eeprom

sudo rpi-eeprom-config -e

Fixing Shift+Enter newline in VS Code terminal (Claude Code)

While exploring Claude Code’s /terminal-setup command (found via a /sta fuzzy search in v1.0.111), I noticed the default Shift+Enter binding for terminal input inserts an unwanted backslash before the newline.

Claude Code currently drops its keybinding into the standard VS Code profile (for example, ~/Library/Application Support/Code/User/keybindings.json on macOS). I spend most of my time in VS Code Insiders, so I copied the entry into ~/Library/Application Support/Code - Insiders/User/keybindings.json to make the shortcut available there, too.

	# herdr configuration
	# Place this file at ~/.config/herdr/config.toml

	# Show first-run notification setup on startup.
	# Missing also shows onboarding; set false after you've chosen.
	# onboarding = true

	[theme]
	# Built-in themes: catppuccin, terminal, tokyo-night, dracula, nord,
	# gruvbox, one-dark, solarized, kanagawa, rose-pine,

	<?xml version="1.0" encoding="UTF-8"?>
	<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
	<plist version="1.0">
	<dict>
	<key>Label</key>
	<string>com.user.headroom.proxy</string>
	<key>ProgramArguments</key>
	<array>
	<string>/Users/lance/.local/bin/headroom</string>
	<string>proxy</string>

	<?xml version="1.0" encoding="UTF-8"?>
	<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
	<plist version="1.0">
	<dict>
	<key>Label</key>
	<string>com.user.mole.nightly</string>
	<key>ProgramArguments</key>
	<array>
	<string>/opt/homebrew/bin/mo</string>
	<string>clean</string>

	[experimental]

	[completion]
	copilot = "github"
	activate_on_typing = true

	[save]
	autosave_delay = 3000
	format_on_save = false
	autosave = "after_delay"

	<?xml version="1.0" encoding="UTF-8"?>
	<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
	<plist version="1.0">
	<dict>
	<key>Label</key>
	<string>com.user.disable-rcd</string>
	<key>ProgramArguments</key>
	<array>
	<string>/bin/launchctl</string>
	<string>unload</string>