Agents
nono 0.71.0 adds platform enrollment and audit delivery to the kernel-level agent sandbox, now at 3,400 stars
nolabs' nono — which uses Landlock on Linux and Seatbelt on macOS to strip a coding agent of privileges without a VM or container — shipped v0.71.0 on July 31 with a new CLI platform enrollment and audit-delivery path, moving the project from local-only policy enforcement toward centralized audit collection. The release also closes a real escape: group-sourced keychain capabilities no longer bypass deny_keychains_macos, and seccomp capability decisions are now recorded and shown in the audit log. Grant suggestions no longer widen to $HOME or XDG roots, the deprecated `nono learn` command is gone, and Datadog and AWS engineers appear among first-time contributors — the repo is at 3,412 stars.
↳ Follow the thread