Neat! I’m definitely looking for something like this. My use case is running semi-trusted dev tools that come packaged. I need to run them, but I don’t want to

Neat! I’m definitely looking for something like this. My use case is running semi-trusted dev tools that come packaged. I need to run them, but I don’t want to trust them, but it’s too much of a faff to actually check, or run them in isolation (think dotnet tooling). What I would love to see is a blocking IO on reads and writes, and network requests. Would let me see if some script is attempting to exfiltrate my home dir/ssh/gpg keys. Not looking to fully secure, just for some more intuition about commands/scripts and their dependencies