fun with sandbox-exec:
% operandi --openrouter "deepseek/deepseek-v4.1-flash" tui
[llm] backend=openrouter model=deepseek/deepseek-v4.1-flash
operandi · deepseek/deepseek-v4.1-flash
Type a task, or /help for commands. Ctrl-C aborts a turn, Ctrl-D quits.
· session log: ~/.operandi/sessions/20260928-190209.md
deepseek/deepseek-v4.1-flash › what's in /
⏺ Bash(cd / && ls -la / 2>&1 | head -50)
✔ 55ms ls: .nofollow: Operation not permitted ls: .resolve: Operation not perm…
⏺ The sandbox only lets me see part of it. What's readable at `/`:
**Directories:** `bin`, `Library`, `opt`, `private`, `sbin`, `System`, `Users`, `usr`
**Symlinks:** `etc → private/etc`, `home → …`, `tmp → private/tmp`, `var → private/var`
**Files:** `.file` (0 bytes, mode `----------`), `.VolumeIcon.icns`
Everything else — `Applications`, `cores`, `dev`, `Volumes`, `home`, and the `.nofollow`/`.resolve`/`.vol` entries — returns "Operation not permitted" (the sandbox profile denies them). This is a macOS root filesystem; the only writable/readable area for me is the current working directory.
2 iter · 0.442¢, 25865 prompt (12544 cached)/294 completion tok, 2 calls
ynniv
npub12a…x6fdh
2026-09-28 23:04:48 UTC
Author Public Key
npub12akj8hpakgzk6gygf9rzlm343nulpue3pgkx8jmvyeayh86cfrus4x6fdhSeen on
wss://relay.mostr.pubPublished at
2026-09-28 23:04:48 UTCEvent JSON
{
"id": "8065b62246d93e3ca5f479f65014e07ebf1a0005e7178ff2e4d723e39c656ed4",
"pubkey": "576d23dc3db2056d208849462fee358cf9f0f3310a2c63cb6c267a4b9f5848f9",
"created_at": 1790636688,
"kind": 1,
"tags": [
[
"r",
"wss://nostr.wine/"
],
[
"r",
"wss://nos.lol/"
],
[
"r",
"wss://nostr.bitcoiner.social/"
],
[
"r",
"wss://relay.damus.io/"
],
[
"r",
"wss://nostr-pub.wellorder.net/"
],
[
"r",
"wss://premium.primal.net/"
],
[
"r",
"wss://relay.primal.net/"
],
[
"r",
"wss://nostr.land/"
],
[
"r",
"wss://eden.nostr.land/"
],
[
"r",
"wss://relay.snort.social/"
],
[
"client",
"Primal Web"
]
],
"content": "fun with sandbox-exec:\n\n% operandi --openrouter \"deepseek/deepseek-v4.1-flash\" tui\n[llm] backend=openrouter model=deepseek/deepseek-v4.1-flash\noperandi · deepseek/deepseek-v4.1-flash\nType a task, or /help for commands. Ctrl-C aborts a turn, Ctrl-D quits.\n· session log: ~/.operandi/sessions/20260928-190209.md\n\ndeepseek/deepseek-v4.1-flash › what's in /\n⏺ Bash(cd / \u0026\u0026 ls -la / 2\u003e\u00261 | head -50)\n ✔ 55ms ls: .nofollow: Operation not permitted ls: .resolve: Operation not perm…\n⏺ The sandbox only lets me see part of it. What's readable at `/`:\n\n**Directories:** `bin`, `Library`, `opt`, `private`, `sbin`, `System`, `Users`, `usr`\n**Symlinks:** `etc → private/etc`, `home → …`, `tmp → private/tmp`, `var → private/var`\n**Files:** `.file` (0 bytes, mode `----------`), `.VolumeIcon.icns`\n\nEverything else — `Applications`, `cores`, `dev`, `Volumes`, `home`, and the `.nofollow`/`.resolve`/`.vol` entries — returns \"Operation not permitted\" (the sandbox profile denies them). This is a macOS root filesystem; the only writable/readable area for me is the current working directory.\n 2 iter · 0.442¢, 25865 prompt (12544 cached)/294 completion tok, 2 calls",
"sig": "04c9562ba42e4fd46d9056480ead1ffadb680e96b18cc2862ec2db6c647a1f86cb21b39a13fc9e4557e6e3cdefc249ac2b6bd7cebee1a0b3d693cb1625b4078f"
}