If you use macOS, take a look at Agent Safehouse: https://agent-safehouse.dev

> macOS-native sandboxing for local agents. Move fast, break nothing.