Blog
Guides for sandboxing AI tools on the Mac — plus release notes (machine-readable at versions.json).
Help: Terminal, iTerm and the sandboxed shell
Why a terminal cannot run inside the sandbox, how the sandboxed shell works instead, every setting on the Shell tab, the command line, and each error message with its fix.
EN · DeutschScopeShelf 1.1.0 release notes
Sandboxed shell for terminal apps: one click opens a shell inside iTerm or Terminal.app that runs in the launcher's sandbox, with your own startup files, tool folders and a separate history. Presets for iTerm and Terminal, quick-pick of installed apps, one-click CLI install.
EN · DeutschScopeShelf 1.0.0 release notes
First public release: three protection zones, per-app network switch with domain filter, live audit log, menu bar agent, CLI with presets and doctor audit. Historical release; downloads are paused.
EN · DeutschUse Claude Code on Mac without constant permission prompts
Claude Code keeps asking for permissions? Run it inside a Seatbelt sandbox with clear folder boundaries instead of --dangerously-skip-permissions. Tested setup.
EN · DeutschCodex CLI in YOLO mode on Mac: limit file access
codex --yolo runs with your full user rights. Limit file access with a Seatbelt sandbox — step-by-step, tested with Codex CLI 0.153.4.
EN · DeutschRelease notes
1.1.2 2026-09-12
Hardening after review: ScopeShelf's self-protection is now actually active (it was not wired up in 1.1.1), including against renames and hardlinks; unsandboxed helpers (screen, tmux, nvim/emacs servers, Docker, Shortcuts) are unreachable; shells get a private temp folder; nothing listens with the network off; a .scopeshelf file can only grant folders inside its project. 21 escape attempts in the test script, all blocked. Details in the 1.1 notes: English · Deutsch
1.1.1 2026-09-12
Sandbox hardening against escape and shutdown: no writes outside home except temp folders and grants, no launching other apps, signals only inside the sandbox, ssh-agent blocked, ScopeShelf itself write-protected. Every rule has a real escape attempt in the test script. Details in the 1.1 notes: English · Deutsch
1.1.0 2026-09-11
Sandboxed shell for terminal apps, terminal presets, quick-pick, CLI install, help pages — full notes: English · Deutsch