Issues

• Cannot run sandboxed command with read only access to root folder due to protected state

  bug
  nolabs-ai/nono#2046 · Filter by author mtausig opened on Oct 2, 2026
  1

• Explicit command write grants become read-only when live cwd is an ancestor

  nolabs-ai/nono#2044 · Filter by author Gandem opened on Oct 2, 2026
  2

• Add rust-toolchain.toml and rustfmt.toml

  enhancement
  nolabs-ai/nono#2038 · Filter by author Eyob94 opened on Oct 1, 2026
  1

• Publish the JSON schema to a stable path.

  enhancement
  nolabs-ai/nono#2036 · Filter by author merikan opened on Oct 1, 2026
  2

• feat: optional sigstore feature so sandbox-only builds omit reqwest

  nolabs-ai/nono#2029 · Filter by author SebTardif opened on Sep 30, 2026
  2

• setting an allow-domain blocks oauth2

  bug
  Bug

  nolabs-ai/nono#2012 · Filter by author lukehinds opened on Sep 28, 2026
  1

• Sandboxed child outlives a killed supervisor, and nono reports the session as exited

  nolabs-ai/nono#2011 · Filter by author jasperblues opened on Sep 28, 2026
  1

  

• CONNECT allowlist misses never reach the configured approval backend

  nolabs-ai/nono#2007 · Filter by author lukehinds opened on Sep 26, 2026
  5

  

• Expose Standalone Proxy via TS SDK

  enhancement
  nolabs-ai/nono#2006 · Filter by author joealden opened on Sep 26, 2026
  1

• feature: native Windows sandboxing for processes, files, and network

  enhancement
  nolabs-ai/nono#2000 · Filter by author panga opened on Sep 25, 2026
  1

• Proxy: refuse loopback/private destinations after resolving an allowed domain (rebinding, names that map to the host)

  bug
  nolabs-ai/nono#1994 · Filter by author venture-unknown opened on Sep 24, 2026
  1

• nono wrap: descendants lose /proc/self, Bun children abort

  nolabs-ai/nono#1984 · Filter by author d4rken opened on Sep 23, 2026
  1

• Create nested unprivileged user+mount namespace

  bug
  nolabs-ai/nono#1980 · Filter by author brandonbiggs opened on Sep 22, 2026
  1

  

• HTTP/1 proxy handler waits for EOF after a complete chunked response

  nolabs-ai/nono#1977 · Filter by author imed-ben-slimene opened on Sep 21, 2026
  3

• af_unix_mediation: "pathname" denies granted AF_UNIX connects after a few calls

  bug
  nolabs-ai/nono#1970 · Filter by author tobru opened on Sep 21, 2026
  2

• allow_domain endpoint rules make every scoped npm package unreachable; nono why reports the same request as ALLOWED

  bug
  nolabs-ai/nono#1956 · Filter by author stollero opened on Sep 21, 2026
  3

• GitHub Copilot OAuth token exchange fails because nono does not replace the Authorization header

  bug
  nolabs-ai/nono#1954 · Filter by author holygrolli opened on Sep 20, 2026
  1

  

• Simplify run or add new command so nono uses correct config by default

  enhancement
  nolabs-ai/nono#1952 · Filter by author david-a-wheeler opened on Sep 19, 2026
  6

• Unable to use claude in nono (osx) - says notlogged in

  bug
  nolabs-ai/nono#1950 · Filter by author ranguard opened on Sep 19, 2026
  8

• Command-policy denials are unbounded: a retry loop can flood the audit log

  nolabs-ai/nono#1946 · Filter by author christine-at-datadog opened on Sep 18, 2026
  2

• unset $SSH_AUTH_SOCK in a local-socket credential blocks every command that declares it

  bug
  nolabs-ai/nono#1944 · Filter by author christine-at-datadog opened on Sep 18, 2026
  2

• Tool-sandbox session breaks permanently when the OS prunes a shim from the runtime dir

  bug
  nolabs-ai/nono#1943 · Filter by author christine-at-datadog opened on Sep 18, 2026
  1

• Project based profiles

  enhancement
  nolabs-ai/nono#1940 · Filter by author kamasheto opened on Sep 17, 2026
  4

• W3C trace context is dropped at the Tool Sandbox boundary

  enhancement
  nolabs-ai/nono#1933 · Filter by author Salkimmich opened on Sep 17, 2026
  1

• Website references obsolete parameter

  nolabs-ai/nono#1927 · Filter by author lovehumans opened on Sep 16, 2026
  2