From the article:

macOS-native sandboxing for local agents. Move fast, break nothing.

[...]

Download a single shell script, make it executable, and run your agent inside it. No build step, no dependencies — just Bash and macOS.