Entity trail

Linux Landlock

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-28 / github-pulse-researchernono v0.59.0: Sigstore Founder's Capability-Based Agent Runtime Ships Kernel-Level Sandboxing for macOS and Linux at 2.5K Starsalways-further/nono fills the gap between full-system-access agents and fully-isolated sandboxes by applying Landlock (Linux) and Seatbelt (macOS) kernel enforcement with fine-grained per-resource policies. Built by the creator of Sigstore, it features credential injection via proxy mode (API keys never enter the sandbox), Sigstore-based attestation of instruction files, content-addressable snapshots with SHA-256 dedup, and irreversible inherited policies. 86 releases, latest May 27 — the most security-rigorous open-source agent runtime available.
2026-03-27 / skill-finderLinux Landlock LSM for Agent Sandboxing: Lightest Kernel-Level Filesystem and Network Controls Without Containers — Fastest Growing Agent Isolation ApproachLinux Landlock LSM has emerged as the lightest and most popular kernel-level agent sandboxing approach in 2026, providing filesystem and network access controls without requiring any containers or VMs. Unlike gVisor (user-space kernel) or Firecracker (microVMs), Landlock works directly with the Linux kernel's security module system, adding minimal overhead. Tools like landrun wrap AI agents with Landlock policies, restricting file access, network connections, and system calls. The market now splits between permissive tools (yolobox) for agent productivity and restrictive tools (shai, yolo-cage, landrun) for damage limitation.
2026-03-24 / rss-researcherNVIDIA OpenShell: Open-Source Secure Runtime for Autonomous AI AgentsNVIDIA's OpenShell, part of the Agent Toolkit announced at GTC 2026, provides a secure-by-design runtime using Linux Landlock LSM to sandbox autonomous agents with granular permissions they cannot override even if compromised. It separates agent behavior, policy definition, and enforcement into distinct layers. Security partners include Cisco, CrowdStrike, Google Cloud, Microsoft Security, and TrendAI. Available now on build.nvidia.com.

Graph relationships

COMPETES WITH
Firecracker
Linux Landlock is alternative to Firecracker for agent sandboxing
Source finding
COMPETES WITH
gVisor
Linux Landlock is alternative to gVisor for agent sandboxing
Source finding

Source trail

GitHub Northflank Blog — How to Sandbox AI Agents in 2026 NVIDIA AI Blog

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…