Zed

container-ishopen sourceeditor

The local IDE outlier: an OS sandbox is on by default for its terminal/fetch tools.

For its terminal and fetch tools Zed enables an OS sandbox by default (Seatbelt on macOS, bubblewrap on Linux): writes only inside open project directories, git metadata protected, network blocked by default. Hardcoded rules block rm -rf of /, ~, and $HOME. Opt out with allow_unsandboxed.