Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-02 · source-backed
nolabs' nono uses Landlock on Linux and Seatbelt on macOS to strip a coding agent of privileges without a VM. v0.71.0 closed a real escape: group-sourced keychain capabilities were bypassing deny_keychains_macos: and stopped grant suggestions from widening to $HOME or XDG roots. 3,412 stars, with Datadog and AWS engineers among first-time contributors.
Each link below shares sources, entities, or timing with this story.
Nothing touches your files until you accept it. shepherd-agents/shepherd (MIT, v0.3.0 on July 8) is a runtime substrate that captures agent execution as durable, inspectable traces that meta-agents can observe, fork, replay, and revert. Agent work is held as a reviewable propo...
usehax.dev (104 points on HN) is a single native MIT-licensed binary that starts instantly on a few megabytes, auto-discovers model and runtime capabilities, and talks to OpenAI-compatible endpoints, Anthropic-compatible endpoints, Codex via ChatGPT subscription, OpenRouter, a...
The attackers didn't use agents to help. They used agents to do the whole thing. Hugging Face disclosed that attackers chained a remote-code dataset loader with a template-injection flaw in dataset configuration to land on processing workers, then escalated to node-level acces...
open-design is a local-first macOS/Windows/Linux desktop app that turns your existing coding agent into a design engine, producing prototypes, landing pages, dashboards, slides, images, and video with real HTML/PDF/PPTX/MP4 export. It runs on 25 distinct local CLI executables...
Sondera intercepts every shell command, file operation, and web request from coding agents and adjudicates them with Cedar — the same formal policy engine used by AWS. Unlike probabilistic LLM guardrails, these rules are deterministic. Rust binaries, stateful trajectory stores...
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.