3 ms·

Thanks! Landlock is the one I couldn't remember. Agreed about macOS's sandboxing being under-documented.