I wanted to run codex-cli in a real sandbox on macOS. The goal was simple: keep the tool useful, but stop it from touching anything outside …