If you are running MacOS, I would recommend Agent Safehouse. Well maintained and is built on existing sandbox-exec so you are not locked in and can always build your own rules independent of the CLI tool.
https://github.com/eugene1g/agent-safehouse/ https://agent-safehouse.dev/
Originally posted on HN https://news.ycombinator.com/item?id=47301085