Fetching from the wire…
Public story · 2026-03-01 · source-backed
github.com/always-further/nono — Landlock (Linux) + Seatbelt (macOS) sandbox with no escape API. Created by Luke Hinds (Sigstore co-founder). Fundamentally stronger than userspace sandboxing. Credential proxy injection keeps secrets outside the sandbox.
Each link below shares sources, entities, or timing with this story.
Claude Code uses Landlock / Shared entities / Same source domain / What happened next
Linked by a graph relationship (Claude Code uses Landlock); both cover Kernel, Landlock, Linux, Seatbelt; reported by the same outlet (github.com).
Claude Code uses Landlock / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude Code uses Landlock); both cover Landlock, Linux, Seatbelt; overlapping topics (agent, credential, sandbox).
Claude Code uses Landlock / Shared entity: Linux / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Claude Code uses Landlock); both cover Linux; reported by the same outlet (github.com).
Linked by a graph relationship (Claude Code uses Landlock); both cover Linux; reported by the same outlet (github.com).
Linked by a graph relationship (Claude Code uses Landlock); both cover Linux; reported by the same outlet (github.com).
Claude Code uses Landlock / Shared entity: Rust / Same source domain / What happened next / Tension
Linked by a graph relationship (Claude Code uses Landlock); both cover Rust; reported by the same outlet (github.com).
Linked by a graph relationship (Claude Code uses Landlock); both cover Rust; reported by the same outlet (github.com).
Linked by a graph relationship (Claude Code uses Landlock); both cover Rust; reported by the same outlet (github.com).