Privacy

App Sandbox for Mac notch developers

If you are extending NotNotch, App Sandbox is a host surface or a documented constraint. File pickers use the user-selected read-write entitlement rather than a blanket home-folder grant.

Last updated 2026-03-10

Host rules

Packages declare placements in manifest.json. App Sandbox may be openTab, liveActivity, or a first-party module.

Do not disable library validation

Unsigned third-party binaries stay manifest-only. That is intentional.

Back to the blog