# Sandbox

Sandbox support provides platform-specific isolation for local execution.

## Supported Platforms

- Linux via Landlock
- macOS via Seatbelt

## Scope

Sandboxing complements authorization rules and secure file access. It is not the only security layer.

## Configuration Areas

- enabled or disabled state
- allowed paths
- denied paths
- excluded commands
- network-related restrictions

## Related Guides

- `security.md`
- `authorization.md`
