# buildSeatbeltProfile

**Kind:** Function

**Source:** [`atloria-monorepo/libs/agent-core/src/tools/bash-sandbox.ts`](https://github.com/sherkety/atloria/blob/main/atloria-monorepo/libs/agent-core/src/tools/bash-sandbox.ts#L31)

Build a macOS Seatbelt profile (SBPL) that:
- Denies everything by default
- Allows global file reads (metadata, data, xattr)
- Allows file writes only within rootDir
- Allows process exec/fork (needed for sh, node, npm, git, etc.)
- Allows signal sending to own process group

## Signature

```ts
function buildSeatbeltProfile(rootDir: string): string
```

## Parameters

| Name | Type |
|---|---|
| `rootDir` | `string` |

**Returns:** `string`