Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-02 · source-backed
nolabs' nono uses Landlock on Linux and Seatbelt on macOS to strip a coding agent of privileges without a VM. v0.71.0 closed a real escape: group-sourced keychain capabilities were bypassing deny_keychains_macos: and stopped grant suggestions from widening to $HOME or XDG roots. 3,412 stars, with Datadog and AWS engineers among first-time contributors.
Each link below shares sources, entities, or timing with this story.
Claude Code uses Seatbelt / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Claude Code uses Seatbelt); both cover Landlock, Linux, Seatbelt; reported by the same outlet (github.com).
Claude Code uses Seatbelt / Shared entities / Earlier coverage
Linked by a graph relationship (Claude Code uses Seatbelt); both cover Landlock, Linux, Seatbelt; earlier Landlock coverage from 2026-07-21.
Claude Code uses Seatbelt / Shared entity: Linux / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses Seatbelt); both cover Linux; reported by the same outlet (github.com).
Claude Code uses Seatbelt / Shared entity: AWS / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses Seatbelt); both cover AWS; reported by the same outlet (github.com).
Claude Code uses Seatbelt / Shared entity: Linux / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses Seatbelt); both cover Linux; overlapping topics (agent, among, coding).
Microsoft uses AWS / Shared entity: Linux / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft uses AWS); both cover Linux; reported by the same outlet (github.com).
Cursor partners with AWS / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor partners with AWS); both cover Landlock, Linux; reported by the same outlet (github.com).
Microsoft uses AWS / Shared entity: Linux / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft uses AWS); both cover Linux; overlapping topics (agent, closed, escape).