How it fits with your settings
Before Arro runs a command, it checks the command against your Allowed folders, Allowed sites and approval mode. The sandbox is a second layer under those checks. Your operating system starts the command with only the access those checks granted.What runs in the sandbox
A command the sandbox cannot be set up for does not run. The task reports the error instead of
running the command without it.
What a command can reach
Credential stores stay closed in both. Secret files like
.env stay closed in both on a Mac, and to
programs Arro writes on Windows. On Windows, Arro refuses a shell command that names one, but the
sandbox leaves it readable. The full list is under
Allowed folders.
When a program Arro wrote is refused a file, Arro asks for that folder the same way a task does, with
Allow, Always allow and Deny. After an approval the program runs again with the new
access. When a shell command is refused, the task sees what was blocked and works around it, or asks
you for the folder or site it needs.
On a Mac
On a Mac, Audimate uses the sandbox built into macOS. It works on every Mac the desktop app supports. A sandboxed command reaches the internet only through Audimate, which lets through the sites approved for any task running at the time. macOS’s own privacy prompts for Documents, Desktop and Downloads still apply on top of the sandbox, as described in macOS permissions.On Windows
On Windows, Audimate uses the sandbox built into recent versions of Windows 11. Each command reaches the sites approved for that command. The sandbox needs Windows 11, version 24H2 (OS build 26100.9278 or later) or version 25H2 (OS build 26200.9278 or later). To see your build, open Settings → System → About and look at OS build. If Windows Update brings your computer to one of these builds, restart Audimate to start using it. Inside the sandbox, commands run in PowerShell, because Git Bash cannot start there. PowerShell 7 from the Microsoft Store cannot start there either, so Arro uses a copy installed another way, or Windows PowerShell.On older versions of Windows
On Windows 10, and on Windows 11 before these builds, there is no sandbox. Shell commands still run, checked by your Allowed folders, Allowed sites and approval mode alone. Programs Arro writes need the sandbox, so Arro does not run them on these computers. It cannot read Word, Excel or PowerPoint files, or work out totals and filters over a data file. Updating Windows to one of the builds above turns these on.Related
Desktop app
Choose the folders, sites and approvals for background tasks.
Computer use
Ask Arro to act in your open apps and control when it stops.