isobox is a Go CLI that compiles one sandbox policy to each OS's native mechanism: Seatbelt on macOS, gVisor on Linux, and AppContainer on Windows. Instead of pretending every backend is equal, it uses an explicit capability model that flags where enforcement falls short, and a strict mode that refuses anything that isn't portable.
webframe is now a tool for scripting and testing pages, not just watching them. You can inject stubs, run test files after load, pass in secrets, set timeouts, and let the page set the exit status, and hidden pages run unthrottled on every platform.
The first release of webframe, which runs a web page like a program: it loads a URL in a hidden web view and wires its console to stdout, its exceptions to stderr, and stdin to a JavaScript REPL. It's a single ~5 MB binary that uses the webview your OS already has.