diff --git a/packages/cli/src/utils/sandbox.ts b/packages/cli/src/utils/sandbox.ts
index a17fa226..b7fc10f1 100644
--- a/packages/cli/src/utils/sandbox.ts
+++ b/packages/cli/src/utils/sandbox.ts
@@ -134,11 +134,12 @@ export function sandbox_command(sandbox?: string | boolean): string {
   }
 
   // look for seatbelt, docker, or podman, in that order
+  // for container-based sandboxing, require sandbox to be enabled explicitly
   if (os.platform() === 'darwin' && commandExists.sync('sandbox-exec')) {
     return 'sandbox-exec';
-  } else if (commandExists.sync('docker')) {
+  } else if (commandExists.sync('docker') && sandbox === true) {
     return 'docker';
-  } else if (commandExists.sync('podman')) {
+  } else if (commandExists.sync('podman') && sandbox === true) {
     return 'podman';
   }