How can I restrict Goose strictly to its working directory?

[jpadhye]

I'm interested in trying Goose to build macos app. But with its current settings I'm unable to restrict it to its working directory. I'm running it in manual mode. It blocks ls / command when I don't give it permission but lets other commands like tree operate even when I deny permission. I want it to be autnomous in the working directory but want to deny access outside the directory. Network access is okay as well.