Public story · 2026-02-27 · source-backed

nono — Kernel-Enforced Zero-Trust Agent Sandbox (642 stars)

Issue

2026-02-27

Confidence

source-backed

Sources

Redaction

passed

Story

seccomp + namespaces so agents literally cannot escape. Atomic rollback, cryptographic audit chain. Python/JS SDKs, MCP-compatible. Heavier security guarantees than lighter approaches. GitHub

CopilotKit open-sourced OpenBot, one policy gateway in front of every agent action.
3,364 stars since its August 17 creation. Every action against a computer, file, MCP server or UI component routes through a single gateway that resolves the target, decides it against policy, writes an audit row, then acts or refuses while naming the rule. Each bot gets its o...
agentmemory puts a dollar figure on memory architecture: ~$10/year vs ~$500/year.
Triple-stream retrieval (BM25 keyword, vector embeddings, knowledge-graph traversal) fused via Reciprocal Rank Fusion on the iii engine, with SQLite for state and an in-memory vector index, no external database. The economic claim: ~170K tokens/year (~$10) versus ~650K tokens...
Local models became a first-class feature of hosted coding agents in a 48-hour window
Three moves, two days, no coordination between them. August 10–11: GitHub shipped Ollama as a BYOK provider inside Copilot for JetBrains (GitHub Changelog). Unsloth released Unsloth Desktop with a command literally named unsloth start claude, which points Claude Code and Codex...
databricks-solutions/ai-dev-kit — Databricks MCP + Claude Code (550 stars)
GitHub | Python, MCP Databricks released v0.1.1 today: official MCP server exposing 50+ tools, 19 markdown skills teaching Databricks patterns, and Claude Code/Cursor/Windsurf integration. Another major enterprise platform shipping official MCP server support. Covers Spark pip...
OpenSEO is a self-hostable Semrush alternative whose primary interface is MCP.
every-app/open-seo took +517 stars today on a base of 14,882, offering keyword research, backlinks, rank tracking and site audits. The model is bring-your-own DataForSEO API key and pay per call instead of a $100+/month subscription, with a $10/month hosted option. It exposes...
The LiteLLM supply chain attack yields a 153GB dump: 433,909 files, 2,488 corporate domains, keys still live five months later
Hudson Rock got hold of the archive and counted it. 433,909 files. 118,829 CI runner dumps traced to 2,488 corporate domains. AWS keys, Salesforce client secrets, Slack signing secrets, Azure environment variables, and AI provider API keys belonging to NVIDIA, Volkswagen, Micr...

Source trail

always-further/nono More from github.com

Entities

Atomic Enforced Zero GitHub Heavier JS SDKs Kernel MCP Python Trust Agent Sandbox

Provenance

Canonical issue: Ramsay Research Agent — 2026-02-27
AI generated: no
Story unit: 2026-02-27-nono-kernel-enforced-zero-trust-agent-sandbox-642-stars
Labels: source-backed, canonical briefing excerpt

Fetching from the wire…

nono — Kernel-Enforced Zero-Trust Agent Sandbox (642 stars)

Story

Related stories

CopilotKit open-sourced OpenBot, one policy gateway in front of every agent action.

agentmemory puts a dollar figure on memory architecture: ~$10/year vs ~$500/year.

Local models became a first-class feature of hosted coding agents in a 48-hour window

databricks-solutions/ai-dev-kit — Databricks MCP + Claude Code (550 stars)

OpenSEO is a self-hostable Semrush alternative whose primary interface is MCP.

The LiteLLM supply chain attack yields a 153GB dump: 433,909 files, 2,488 corporate domains, keys still live five months later

Source trail

Entities

Provenance

nono — Kernel-Enforced Zero-Trust Agent Sandbox (642 stars)

Story

Related stories

CopilotKit open-sourced OpenBot, one policy gateway in front of every agent action.

agentmemory puts a dollar figure on memory architecture: ~$10/year vs ~$500/year.

Local models became a first-class feature of hosted coding agents in a 48-hour window

databricks-solutions/ai-dev-kit — Databricks MCP + Claude Code (550 stars)

OpenSEO is a self-hostable Semrush alternative whose primary interface is MCP.

The LiteLLM supply chain attack yields a 153GB dump: 433,909 files, 2,488 corporate domains, keys still live five months later

Source trail

Entities

Provenance

Story

Related stories

CopilotKit open-sourced OpenBot, one policy gateway in front of every agent action.

agentmemory puts a dollar figure on memory architecture: ~$10/year vs ~$500/year.

Local models became a first-class feature of hosted coding agents in a 48-hour window

databricks-solutions/ai-dev-kit — Databricks MCP + Claude Code (550 stars)

OpenSEO is a self-hostable Semrush alternative whose primary interface is MCP.

The LiteLLM supply chain attack yields a 153GB dump: 433,909 files, 2,488 corporate domains, keys still live five months later

Tomorrow's issue, in your inbox.

Source trail

Entities

Provenance

Story

Related stories

CopilotKit open-sourced OpenBot, one policy gateway in front of every agent action.

agentmemory puts a dollar figure on memory architecture: ~$10/year vs ~$500/year.

Local models became a first-class feature of hosted coding agents in a 48-hour window

databricks-solutions/ai-dev-kit — Databricks MCP + Claude Code (550 stars)

OpenSEO is a self-hostable Semrush alternative whose primary interface is MCP.

The LiteLLM supply chain attack yields a 153GB dump: 433,909 files, 2,488 corporate domains, keys still live five months later

Tomorrow's issue, in your inbox.

Source trail

Entities

Provenance