Enable Bash sandboxing to auto-allow contained commands

The problem

Default mode prompts on every shell command, slowing tight edit-test loops.

The hack

Enable sandbox mode on supported platforms so sandboxed commands auto-run inside the defined boundary.

Why it works

Sandboxing is not a permission mode—it restricts what Bash can touch, letting safe commands proceed automatically.

Setup

1. Run `/sandbox` and follow the setup for your OS. 2. Define allowed filesystem roots and network domains carefully. 3. Confirm a simple `ls`/`rg` runs without a prompt while a disallowed network call still gates. 4. Combine with permission deny rules for defense in depth.

Prompt

/sandbox

Additional details

Source