Sandboxed

The macOS sandbox is a secure and highly refined safety measure, it's enabled for all AppStore apps without exception. However there is a lot of misconceptions or partially true details on how it operates. Sandboxed is here to clear that up, it's a simple and straightforward tool that you can use to figure out how an app behaves in a sandbox. There is a demo command that you can run before and after allowing access to a directory, showing that access to system binaries on specific directories is allowed. as long as you add the directory first. This applies to binaries signed by Apple, and it doesn't give you access to all of them, there are definitely restricted binaries as well, and this app lets you figure out which ones. And if you use a package manager or have your own binaries installed, those binaries will never run while using this app as the middleman.
Sandboxed also lets you see which of your other apps are Sandboxed and which are not.
Whether you are a developer, or just a curious individual Sandboxed is here not just so you know how it operates, but so you feel how it operates.