[woodruffw]

Thanks! Landlock is the one I couldn't remember.

Agreed about macOS's sandboxing being under-documented.