Minor release (0.53.0) that clarifies how the default macOS Seatbelt sandbox profile actually behaves.
Changelog
[changed] macOS Seatbelt docs now describe the default permissive-open profile accurately: it denies operations by default, confines writes to the project folder, and allows broad file reads plus outbound network access—not “allow everything except writes.”
[changed] The same wording is aligned across the sandbox guide, configuration reference, and contributing docs, including the SEATBELT_PROFILE option list.
Under the hood
Sandbox image tag bumped to 0.53.0 alongside the CLI version.
Repo scripts gain an eval:coverage helper for internal eval coverage work.
Upgrade notes
If you rely on macOS sandboxing, re-read the permissive-open vs strict-open / restrictive-open descriptions—behavior intent is unchanged in the docs’ thrust (project-scoped writes, network allowed), but the default-deny framing is the correct mental model. Set SEATBELT_PROFILE if you need a stricter profile.
