nono v0.73.0 Added Authenticated WebSocket Tunneling Through TLS Intercept and Dropped OpenClaw From Its Built-In Sandbox Profiles
nolabs-ai/nono (3,605 stars, Rust, 'sandbox any AI agent in seconds') released v0.73.0 on 2026-08-10. The release adds authenticated WebSocket tunneling for CONNECT/TLS-intercept routes (#1443, contributed by a Datadog engineer), phantom-nonce redemption on absolute-form forward-proxy requests (#1589), glob pattern support in filesystem path fields (#1580), and per-variant golden vectors for audit event payloads (#1603). The prior v0.72.0 removed `openclaw` and `swival` as built-in profiles (#1582), added a static seccomp network baseline on Linux (#1590), made TLS intercept fail closed on non-granted endpoint approvals (#1585), and patched RUSTSEC-2026-0221. The direction is consistent: agent sandboxes are converging on fail-closed egress mediation rather than filesystem jails.
Source
↳ Follow the thread