Sandbox

A macOS FSKit extension mounted from the command line could stat its source folder but not read it. The extension sandbox was denying file-read-data on a plain path. Reinstalling the app then switched the module off in a way pluginkit does not undo.

Inside its sandbox, a coding agent hit "Could not find a working container runtime strategy" and "listen EPERM: operation not permitted 0.0.0.0:8080", filed every failure under "environment" and committed. On the host, three tests failed, and the skipped `next build` stayed broken for two months.