Toolsnono Kernel-Enforced Zero-Trust Sandbox for AgentsGitHub·high signalXBlueskyLinkedInCopy linkZero-trust sandbox with kernel-level enforcement seccomp namespaces. Atomic rollback and cryptographic audit chain. 642 stars in 27 days. Heavier than lighter sandboxes.SourceSource pageGitHub↳ Follow the threadPolicy dependency / Stack layerFour advisories land on Databricks' Omnigent meta-harness, one critical, all reported by an autonomous security agentGitHub Security AdvisoriesPolicy dependency / Stack layerUnsloth 0.1.805-beta doubles Qwen3.8-Flash-Next and GLM-5.3-Flash inference with MTP on by defaultGitHubPolicy dependency / Stack layerClaude Code 2.1.259 refuses to start when a managed settings file cannot be parsedClaude Code ChangelogStack layer / ContrastToolJet, a 40.8k-Star Retool Alternative, Shipped an MCP Server That Builds Apps Without CodegenToolJet (Show HN)Stack layer / ContrastAtlas took 895 stars in a day for linking every agent commit back to the prompts and tool calls that produced itGitHub TrendingStack layer / Update threadToolJet put its internal-tool builder behind an MCP server as 50 small tools, MIT licensedGitHub (via r/ClaudeAI, 92 upvotes)Threat pattern / Update threadLangfuse backported four security changes to v3, cutting the default JWT session lifetime from longer to 14 daysGitHubStack layer / Update threadopencode 1.18.27 raises default provider and stream timeouts to five minutes and gates Anthropic thinking blocks to Claude 5.1+GitHub