macOS-native sandboxing for local agents.