Sandvault: Run AI agents isolated in a sandboxed macOS user account | Hacker News Reader