macOS-native sandboxing for local agents · HackerTrans