dank-openai 7f82397363 Restrict macOS scratch access to process sandboxes (#40961) ...

## Why

Filesystem helpers should not inherit access to system scratch directories beyond the paths granted by their filesystem policy, while ordinary processes still need scratch access for compatibility.

## What changed

- Move the `/tmp` and `/var/tmp` read/write grants, including their `/private` aliases, from the shared platform defaults into the process-only Seatbelt defaults.
- Keep process access to `/Applications` alongside the scratch-directory grants.

## Testing

Add a macOS Seatbelt test that verifies the generated policies and, when nested Seatbelt execution is available, confirms process scratch access, helper denial, and helper access to an approved project path.

GitOrigin-RevId: 26d83f09c131c1f1d000163b2f8929f601749719

2026-08-26 19:38:42 +00:00

..

src

Restrict macOS scratch access to process sandboxes (#40961)

2026-08-26 19:38:42 +00:00

BUILD.bazel

Restrict macOS preference reads to full-disk policies (#39811)

2026-08-20 23:18:55 +00:00

Cargo.toml

Support Windows sandboxing in the exec server (#34423)

2026-07-20 22:35:14 +00:00