Running on macOS Using a Non Privileged Account
While not as secure as using Docker or Apple Containers, I often set up a new account on my Mac without admin privileges and no access to my iCloud account (so sensitive financial or medical data in, for example, ~/Documents is not accessible).
I consider this partial security, and I use it when experimenting with Hermes Agent, little-coder, etc.
If you want tighter security, use the next chapter on Apple Containers.
Dear reader, decide for yourself how secure you want your use of agentic coding to be.