We actually use this in our CI system to limit write access outside of the build environment’s build folder. You can see some Julia code that generates the san

We actually use this in our CI system to limit write access outside of the build environment’s build folder. You can see some Julia code that generates the sandbox config rules here: https://github.com/JuliaCI/sandboxed-buildkite-agent/blob/main/common/mac_seatbelt_config.jl#L115 https://github.com/JuliaCI/sandboxed-buildkite-agent/blob/ma...