Privacy
On-device App Sandbox on a Mac
App Sandbox is implemented in the native Swift app, not as a web view in the notch. File pickers use the user-selected read-write entitlement rather than a blanket home-folder grant.
Last updated 2026-03-09
Why native matters
A real Mac utility can follow Spaces, displays, and system appearance. App Sandbox is part of that host.
What stays in-tree
First-party App Sandbox lives in the app. Third-party packages cannot load unsigned code.