Containers
Run a session inside Apple's native container runtime, isolated from your Mac.
Running inside a container
A session can run inside Apple's native container runtime instead of on your host, so the agent gets its own isolated filesystem and toolchain. You pick the container profile when you create the session. The agent works exactly as it would locally, and none of its writes touch your machine. A risky command stays inside the box.
Container profiles require macOS 26 (Tahoe) on Apple Silicon, the same requirement as the runtime itself.
Set up once, reuse forever
Set a container up the way you want, then Save Snapshot to freeze that filesystem as the profile's baseline. New sessions boot from the snapshot with zero setup, and copy-on-write clones let several run in parallel without stepping on each other.