Toolsnono Kernel-Enforced Zero-Trust Sandbox for AgentsGitHub·high signalXBlueskyLinkedInCopy linkZero-trust sandbox with kernel-level enforcement seccomp namespaces. Atomic rollback and cryptographic audit chain. 642 stars in 27 days. Heavier than lighter sandboxes.SourceSource pageGitHub↳ Follow the threadStack layer / Threat patternClaude Code 2.1.269 Ships a Plugin Eval Runner and a Knob to Raise the Workflow Tool's Concurrent Agent Cap to 256Anthropic (claude-code CHANGELOG)Policy dependency / Stack layergit-ai is a Git extension that tracks which code in your repo was AI-generated, at 140 open PRs to 71 issuesGitHub TrendingThreat pattern / ContrastGemini CLI decoupled its sandbox from your host config directories entirelyGitHubStack layer / ContrastSureForge encodes a research-plan-verify-review gate sequence as a plain-text agent skillGitHubStack layer / Threat patterntech-leads-club/agent-skills is a validated skill registry pitched on security rather than on breadthGitHub TrendingStack layer / Threat patternGemini CLI now demands confirmation before running a build command after a build file changedGitHubStack layer / Threat patternClaude Code 2.1.270 walks back a permission regression the previous day's security release introducedGitHubStack layer / ContrastPageIndex reached 35,621 stars arguing RAG should not use vectors at allGitHub