I didn't like that Claude and codex effectively have the ability to do anything they want on my laptop and my local network - we've all read the horror stories of files accidentally being deleted - and while their permission classifier is getting better, it still requires a lot of trust. So I built Airlock for macOS which runs your agent in a virtual machine, and it will tell you exactly what it's run and what's changed before you bring anything back to your project. You can limit internet access to specific hosts, or block it altogether. It even works with Xcode projects (iOS and macOS developers rejoice). Technically you can run any command with Airlock - not just AI agents (`airlock run -- somecommand`).

It's free, requires no account, and has no tracking or analytics. I'm hoping Apple will approve it for Mac App Store distribution, but in the meantime you can download it directly from the website or using Homebrew.