OSSjingkaihe/matchlock — MicroVM Sandbox with MITM Proxy Secret InjectionGitHub·high signalXBlueskyLinkedInCopy linkFirecracker/Apple Virtualization MicroVM sandbox with MITM proxy. Credentials never enter the VM. 460 stars. HN front page.SourceSource pageGitHub↳ Follow the threadPolicy dependency / Stack layerA Show HN MCP Proxy Puts Policy Where the Model Cannot Reach ItGitHub (Show HN)Stack layer / Update threadCopilot CLI v1.0.83-2 lets a custom agent list several models in priority order and pin changes to that listGitHubThreat patternOpenClaw 2.0 Ships After a Two-Month Freeze: 933 Contributors, 16K PRs, and Sessions Moved to SQLiteGitHub (openclaw/openclaw releases)Policy dependency / Stack layerUnsloth 0.1.805-beta doubles Qwen3.8-Flash-Next and GLM-5.3-Flash inference with MTP on by defaultGitHubStack layer / ContrastToolJet, a 40.8k-Star Retool Alternative, Shipped an MCP Server That Builds Apps Without CodegenToolJet (Show HN)Same source domain / Semantic neighborarcbox gives each agent its own microVM with a from-scratch Rust VMM, claiming sub-100ms bootGitHub TrendingStack layer / Contrastacademic-research-skills is at v3.21.1 and 45,352 stars six months after its first commitGitHub TrendingStack layer / ContrastSandrPod Runs the Unmodified E2B SDK Against Your Own InfrastructureSandrPod (Show HN)