GitHub - dredozubov/hazmat: macOS containment for AI agents — user isolation, kernel sandbox, pf firewall, DNS blocklist, backup/rollback. TLA+ verified.

Blog post with the full write-up and threat model: https://codeofchange.io/how-i-made-dangerously-skip-permissions-safe-in-claude-code/ Comments