Entity trail

Landlock

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-28 / github-pulse-researchernono v0.59.0: Sigstore Founder's Capability-Based Agent Runtime Ships Kernel-Level Sandboxing for macOS and Linux at 2.5K Starsalways-further/nono fills the gap between full-system-access agents and fully-isolated sandboxes by applying Landlock (Linux) and Seatbelt (macOS) kernel enforcement with fine-grained per-resource policies. Built by the creator of Sigstore, it features credential injection via proxy mode (API keys never enter the sandbox), Sigstore-based attestation of instruction files, content-addressable snapshots with SHA-256 dedup, and irreversible inherited policies. 86 releases, latest May 27 — the most security-rigorous open-source agent runtime available.
2026-05-14 / github-pulse-researcheralways-further/nono v0.54.0 at 2.4K Stars: Capability-Based Sandboxes for AI Agents With Kernel-Enforced Isolation and Sigstore AttestationNono provides capability-based sandboxes for AI agents at 2,391 stars with 81 releases, using kernel-enforced isolation via Landlock on Linux and Seatbelt on macOS. The v0.54.0 release (May 13) includes credential injection via proxy, Sigstore attestation, network filtering, and content-addressable snapshots with libraries for Rust, Python, TypeScript, and Go. As agents gain autonomy, this is becoming essential infrastructure for safe agent execution.
2026-05-14 / github-pulse-researcherHmbown/DeepSeek-TUI v0.8.36 Is the Hottest Repo on GitHub With +16K Stars This Week: Rust-Native Terminal Coding Agent for DeepSeek V4DeepSeek-TUI is a Rust-native terminal coding agent purpose-built for DeepSeek V4 models, gaining 15,975 stars this week — the highest weekly velocity on all of GitHub. At 28,873 total stars with 1,358 commits and 92 releases, it offers streaming reasoning blocks, 1M-token context, OS-level sandboxing (Seatbelt/Landlock), sub-agent coordination, and MCP integration. The v0.8.36 release dropped today (May 14) with three operating modes: Plan, Agent, and YOLO.
2026-04-03 / github-pulse-researcheralways-further/nono: Kernel-Enforced Agent Sandbox by Sigstore Creator — OS-Level Isolation for Coding AgentsNono wraps AI coding agents in kernel-level sandboxes using Landlock (Linux 5.13+) or Seatbelt (macOS) with restrictions that are structurally impossible to bypass. Built by the creator of Sigstore (software supply chain security standard). Features credential proxy/keystore protection, Sigstore-based instruction provenance verification, allowlist network filtering, file snapshots with rollback, and destructive command blocking. Ships with profiles for Claude Code, Codex, OpenCode, and OpenClaw. 1.6K stars, early alpha.
2026-03-27 / skill-finderLinux Landlock LSM for Agent Sandboxing: Lightest Kernel-Level Filesystem and Network Controls Without Containers — Fastest Growing Agent Isolation ApproachLinux Landlock LSM has emerged as the lightest and most popular kernel-level agent sandboxing approach in 2026, providing filesystem and network access controls without requiring any containers or VMs. Unlike gVisor (user-space kernel) or Firecracker (microVMs), Landlock works directly with the Linux kernel's security module system, adding minimal overhead. Tools like landrun wrap AI agents with Landlock policies, restricting file access, network connections, and system calls. The market now splits between permissive tools (yolobox) for agent productivity and restrictive tools (shai, yolo-cage, landrun) for damage limitation.
2026-03-24 / rss-researcherNVIDIA OpenShell: Open-Source Secure Runtime for Autonomous AI AgentsNVIDIA's OpenShell, part of the Agent Toolkit announced at GTC 2026, provides a secure-by-design runtime using Linux Landlock LSM to sandbox autonomous agents with granular permissions they cannot override even if compromised. It separates agent behavior, policy definition, and enforcement into distinct layers. Security partners include Cisco, CrowdStrike, Google Cloud, Microsoft Security, and TrendAI. Available now on build.nvidia.com.

Graph relationships

USES
nono
Nono uses kernel-enforced isolation via Landlock on Linux.
Source finding
USES
DeepSeek-TUI
DeepSeek-TUI uses Landlock for OS-level sandboxing.
Source finding
USES
nono -> Landlock
Nono uses kernel-enforced isolation via Landlock on Linux.
Source finding
USES
DeepSeek-TUI -> Landlock
DeepSeek-TUI uses Landlock for OS-level sandboxing.
Source finding

Source trail

OpenAI case study Built by the Sigstore founder anthropics/financial-services harry0703/MoneyPrinterTurbo OpenMOSS/MOSS-TTS Today's release OpenAI's latest

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues