agent_jail

https://github.com/jibranusman95/agent_jail

Forks a child process, applies Linux Landlock filesystem restrictions and POSIX resource limits (setrlimit), then runs your block. If the block times out, exceeds memory, or touches a disallowed path, the child is killed and the parent gets a typed exception. macOS uses Seatbelt (sandbox_init). Degrades gracefully on unsupported platforms.