seatbelt▌

Generate minimal, allowlist-based macOS Seatbelt sandbox profiles for application isolation. \n \n Profiles restrict file, network, process, and IPC access through deny-all defaults with explicit allowlists across 15+ resource categories \n Includes step-by-step profiling methodology: identify requirements, start minimal, add file/network access, test iteratively with sandbox-exec \n Supports parameter substitution (HOME, WORKING_DIR) and path filters (subpath, literal, regex) for flexible confi