macOS App Sandbox
Official docs outline
6 sections- App Sandbox
Container-based isolation for macOS apps.
- Configuring the macOS App Sandbox
Enabling the sandbox and choosing entitlements.
- Entitlements
Capabilities requested by an app.
- Accessing files from the sandbox
Security-scoped bookmarks and user-selected files.
- Endpoint Security
Security monitoring of system events.
- TCC privacy preferences
Privacy-protected resources and usage descriptions.
Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.