if you're on a mac and want computer use without the agent touching your personal stuff, here's how i do it

run agent-desktop inside a macOS VM. Apple's Virtualization framework boots a full guest in a window, and the agent only sees what's inside it.

you keep working on your mac and your agents runs inside the VM