Stricter sandbox Per-instance sandbox: only allow writes to the folder tree where sandvault starts Stricter sandbox: https://gist.github.com/eugene1g/ad3ff9783396e2cf35354689cc6473e1 Multi-sandbox https://github.com/johanngj/sandvault/tree/feature/multi-sandbox