iOS Sandbox Isolation Simulator

Every app on iOS runs inside its own kernel-enforced sandbox, unable to touch another app's files or reach a system resource without a signed entitlement. This simulator visualizes that model directly: colored app containers orbit a cluster of shared resources — contacts, camera, location and the file system — each firing periodic access requests. A request with a granted entitlement travels as a green beam straight to the resource; one without is stopped exactly at the sandbox wall as a red flash, never reaching its target. Click any app to inspect and toggle its four entitlements live, and trigger a simulated jailbreak escape attempt to see why kernel-level enforcement stops a sandbox breakout even when the app itself is compromised.