Owner

nolabs-ai

12 indexed repositories · View on GitHub

nono
secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.

Rust · 4142 stars
deepfabric
Generate High-Quality Synthetics, Train, Measure, and Evaluate in a Single Pipeline

Python · 886 stars
AgentUp
Portable , scalable , secure AI Agents

Python · 126 stars
nono-py
Python Library for nono - kernel enforced agent sandboxing

Python · 36 stars
agent-sign
Provide full security provenance and agent attestations from source to runtime

Shell · 27 stars
nono-packs
Repository for nolabs maintained nono packages

Shell · 17 stars
nono-go
Go bindings for nono.sh

C · 16 stars
nono-ts
nono - kernel enforced sandoxing and security for AI agents in typescript / javascript

JavaScript · 13 stars
nono-dev
nono development flow wrapper

Python · 7 stars
nogent
code review agent for nolabs-ai projects

Rust · 6 stars
nono-templates
nono command policy templates for tools your agent delegates to

Python · 0 stars
automations-test

Python · 0 stars

Beginner friendly Everything

Open All

Linux sandbox initialization failed Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nolabs-ai/nono#1995 · 1 comment · Opened Sep 24, 2026
Proxy: refuse loopback/private destinations after resolving an allowed domain (rebinding, names that map to the host) Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

nolabs-ai/nono#1994 · 1 comment · Opened Sep 24, 2026
Ensure OpenCode v2 server runs inside the nono sandbox Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nolabs-ai/nono-packs#40 · 2 reactions · Opened Sep 24, 2026
Session summary claims "failure may be unrelated to sandbox restrictions" when nono's own proxy denied the request Open

enhancement

nolabs-ai/nono#1989 · 1 comment · 1 assignee · Opened Sep 24, 2026
Per-command `aws_auth` credential injection for tool-sandbox commands Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nolabs-ai/nono#1987 · 2 comments · Opened Sep 24, 2026
`nono wrap`: descendants lose /proc/self, Bun children abort Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

nolabs-ai/nono#1984 · 1 comment · Opened Sep 23, 2026
Create nested unprivileged user+mount namespace Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nolabs-ai/nono#1980 · 1 comment · 1 assignee · Opened Sep 22, 2026
HTTP/1 proxy handler waits for EOF after a complete chunked response Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

nolabs-ai/nono#1977 · 1 comment · Opened Sep 21, 2026
`af_unix_mediation: "pathname"` denies granted AF_UNIX connects after a few calls Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nolabs-ai/nono#1970 · 2 comments · 1 reaction · Opened Sep 21, 2026
allow_domain endpoint rules make every scoped npm package unreachable; nono why reports the same request as ALLOWED Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 62/100

nolabs-ai/nono#1956 · 2 comments · Opened Sep 21, 2026
GitHub Copilot OAuth token exchange fails because nono does not replace the Authorization header Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nolabs-ai/nono#1954 · 1 comment · 1 assignee · Opened Sep 20, 2026
Simplify `run` or add new command so nono uses correct config by default Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 45/100

nolabs-ai/nono#1952 · 6 comments · 2 reactions · Opened Sep 19, 2026
Unable to use claude in nono (osx) - says notlogged in Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nolabs-ai/nono#1950 · 6 comments · Opened Sep 19, 2026
`Bad Request: System message must be at the beginning.` with OpenCode + SGLang and latest nono profile Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

nolabs-ai/nono-packs#36 · 2 comments · Opened Sep 18, 2026
Command-policy denials are unbounded: a retry loop can flood the audit log Open

Difficulty 5/5 Over a week Newbie friendliness 48/100

nolabs-ai/nono#1946 · 2 comments · Opened Sep 18, 2026
unset $SSH_AUTH_SOCK in a local-socket credential blocks every command that declares it Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 72/100

nolabs-ai/nono#1944 · 2 comments · Opened Sep 18, 2026
Tool-sandbox session breaks permanently when the OS prunes a shim from the runtime dir Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nolabs-ai/nono#1943 · 1 comment · Opened Sep 18, 2026
Project based profiles Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 42/100

nolabs-ai/nono#1940 · 2 comments · 1 reaction · Opened Sep 17, 2026
W3C trace context is dropped at the Tool Sandbox boundary Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nolabs-ai/nono#1933 · 1 comment · Opened Sep 17, 2026
(allow|read|write)_file grants negate filesystem.deny without explicit filesystem.bypass_protection Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nolabs-ai/nono#1932 · 1 comment · 1 reaction · Opened Sep 17, 2026
Website references obsolete parameter Open

Difficulty 1/5 Under an hour Newbie friendliness 82/100

nolabs-ai/nono#1927 · 1 comment · Opened Sep 16, 2026
fix(cli): eliminate Tool Sandbox pre-fork thread race on Linux Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

nolabs-ai/nono#1926 · 1 comment · Opened Sep 16, 2026
Downstream consumer of `audit-events.ndjson` — is this the surface to build on before 1.0? Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

nolabs-ai/nono#1925 · 1 comment · Opened Sep 15, 2026
network.allow_all silently makes credentials grants on the same command dead Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

nolabs-ai/nono#1924 · 1 comment · Opened Sep 15, 2026
Rollback silently swallows corrupt snapshots and trust scan silently skips unreadable files Open

Difficulty 4/5 3-5 days Newbie friendliness 67/100

nolabs-ai/nono#1920 · 1 comment · 1 reaction · Opened Sep 15, 2026
SandboxState lossy roundtrip collapses ProxyOnly to Blocked and drops port/mode grants Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

nolabs-ai/nono#1919 · 1 comment · Opened Sep 15, 2026
Define consistent API metadata and versioning for all public schemas and structured artifacts Open

enhancement

nolabs-ai/nono#1918 · 1 comment · 1 assignee · Opened Sep 15, 2026
Audit records store credential values for env var names nono doesn't recognize Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nolabs-ai/nono#1916 · 3 comments · Opened Sep 14, 2026
Host-side credential broker searches cwd when sanitized PATH is empty Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

nolabs-ai/nono#1892 · 1 comment · Opened Sep 13, 2026
unsanitized untrusted strings reach the terminal in rollback output and the pull consent prompt Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nolabs-ai/nono#1889 · 4 comments · Opened Sep 12, 2026
pull progress output prints pack-controlled artifact filenames without sanitizing Open

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

nolabs-ai/nono#1886 · 1 comment · Opened Sep 12, 2026
feat(pull): report where wiring actually wrote, not just where the pack was stored Open

Difficulty 5/5 Over a week Newbie friendliness 28/100

nolabs-ai/nono#1882 · 2 comments · Opened Sep 12, 2026
test: shell_dry_run_rejects_block_net_with_upstream_proxy races on HOME set by parallel tests Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nolabs-ai/nono#1881 · 3 comments · Opened Sep 12, 2026
pack wiring writes agent files to $HOME/.claude, ignoring CLAUDE_CONFIG_DIR Open

Difficulty 4/5 3-5 days Newbie friendliness 65/100

nolabs-ai/nono#1880 · 2 comments · Opened Sep 12, 2026
This project will be archived on 11/01/2025 Open

Difficulty 5/5 Over a week Newbie friendliness 1/100

nolabs-ai/nono-ts#65 · Opened Sep 12, 2026
project to be archived Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

nolabs-ai/nono-go#38 · 1 comment · Opened Sep 12, 2026
Retire legacy ~/.nono state-path fallback after a supported migration Open

Difficulty 5/5 Over a week Newbie friendliness 38/100

nolabs-ai/nono#1870 · 1 comment · Opened Sep 11, 2026
feat: `phantom_format` field on `CustomCredentialDef` to shape the env-var phantom Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 68/100

nolabs-ai/nono#1868 · 1 comment · Opened Sep 11, 2026
Decide migration of default dangerous-command groups to Tool Sandbox Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

nolabs-ai/nono#1866 · 2 comments · Opened Sep 11, 2026
nono allows exec of a binary it denies read on MacOS breaking dyld / Security.framework Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nolabs-ai/nono#1865 · 1 comment · Opened Sep 11, 2026
fix(cli): audit list --path filter misses sessions due to missing canonicalization (macOS /var → /private/var) Open

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

nolabs-ai/nono#1857 · 2 comments · Opened Sep 11, 2026
fix(cli): is_process_alive treats EPERM as dead, causing live audit/rollback sessions to be cleaned up Open

Difficulty 3/5 1-2 days Newbie friendliness 78/100

nolabs-ai/nono#1855 · 2 comments · Opened Sep 11, 2026
feat(cli): let --extends accept a profile file path, like -p does Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 65/100

nolabs-ai/nono#1851 · 1 comment · Opened Sep 10, 2026
Provide deb package in the official debian repository Open

onboarding

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nolabs-ai/nono#1844 · 3 comments · Opened Sep 10, 2026
Feature Request: Ability to "enforce" audit enrollment Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 45/100

nolabs-ai/nono#1841 · 1 comment · Opened Sep 10, 2026
Allow to publish packages from non-github repositories Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nolabs-ai/nono#1838 · 3 comments · Opened Sep 9, 2026
oauth_capture response rewrite only supports JSON, breaks GitHub CLI device-flow login Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

nolabs-ai/nono#1833 · 2 comments · Opened Sep 9, 2026
`allow_domain` endpoint entries shadow `oauth_capture` credential routes (phantom token forwarded, 401) Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 76/100

nolabs-ai/nono#1831 · 7 comments · Opened Sep 9, 2026
macOS proxy mode: dual-stack clients (JDK, gRPC C++) cannot reach the credential proxy because Seatbelt denies ::ffff:127.0.0.1 Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nolabs-ai/nono#1830 · 3 comments · Opened Sep 9, 2026
Socket binding on Linux fails with no matching `nscd` unix_socket capability when `nscd` is NOT installed?! Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nolabs-ai/nono#1827 · 5 comments · Opened Sep 8, 2026

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

nolabs-ai

Showing the newest 100

Get new issues in your inbox