nono.sh just shipped a profile for @nousresearch.com Hermes Agent * Kernel isolation * Key Protections * Atomic rollback * L7 filtering No sign up needed, no cloud keys registry.nono.sh/packages/alw...

#nix users, just noticed nono.sh is on github.com/numtide/llm-...

New alarm clock ringtone youtu.be/AKZ1oa-LbjQ?...

A lot of frustrated #NemoClaw , OpenShell users turning up in the nono.sh community, checked it out - kind makes sense. Around 4 docker images, a k8s cluster, to run a coding agent.

Project Nono - Monthly Roundup 🎬 Here's what shipped over the last 30 days, in 60 secs. SKILL / Agent Artifact Registry (early preview) - sigstore provenance Host and Pull your own Agent Packages Inbuilt Helper - no more wrangling with pesky JSON.

Exciting new feature coming online shortly. nono.sh package and policy registry. we heard from users and they wanted a way of having a more customized self-serving system for having nono configure agent hooks, skills and nono policy.

A very bizarre experience of meeting my first claw in the wild. The Day of the Claws: How I watched an agent reverse-engineer my career in an afternoon. decodebytes.substack.com/p/the-day-of...

It is time for me to reveal the truth - I am Satoshi Nakamoto I just don't have any proof. nono.sh/blog/secure-...

Anyone know of some decent prompts to out a claw? Getting tired of them turning up in issues and writing an entire new slop-app and positioning it as a better solution.

nono.sh is becoming a dream to develop - not more five terminals left open , losing track of work in progress.

Took nono.sh to the @aidotengineer.bsky.social event in London this week. Wasn't expecting to spend half the day being stopped by engineers telling us they're daily users. One team even demoed nono integrated into their own product - live, in the wild, built by someone we'd never met.

demo of nono tmux style multiplexed sandboxes and how they can be used in a development workflow www.youtube.com/watch?v=QqRt...

The axios npm compromise from this week night is a near-perfect test case for nono. Account takeover. Hidden dependency. postinstall hook. RAT deployed. Self-deleted to cover tracks. Full writeup: nono.sh/blog/nono-ax...

I had a chat on #OpenSourceSecurity with @lukehinds.bsky.social about his project nono as well as MCP security nono is a sandbox for containing all these tools which is an incredibly difficult problem to solve. The things we see skills and MCP doing are moving forward faster than anyone can keep up

If you're building with AI agents and haven't thought through what happens when the agent's permissions are broader than they need to be, this conversation is a good starting point. nono.sh?utm_source=t...

@josh.bressers.name put it well: MCP is moving faster than anyone can keep up with. @lukehinds.bsky.social joined #OpenSourceSecurity to dig into why agent security is structurally hard and what kernel-level sandboxing nono.sh actually solves. Episode: opensourcesecurity.io/2026/2026-03...

tmux style sandboxes anyone? along with full docker-eque style lifecycle and atomic rollbacks? nono.sh

We built nono.sh because kernel-level enforcement is the only layer that can't be bypassed by the agent itself. Talked through the reasoning with @wearedevelopers - link: www.youtube.com/watch?v=xVK2...

great chat, with a great chap (Josh, not me).

little nono.sh is just 30 days old, just about to hit a 1k - Its fairing very well against the OSS security giants - lets see if it can keep up the trajectory

yml or yaml, was a winner ever established?

How the phantom token pattern works in practice: session-scoped token → localhost proxy → real credential injected outside the sandbox → forwarded over TLS. Scoped to one session. Expires on exit. #AISecurity #infosec

API keys in env vars. One prompt injection. One outbound HTTP call. Your key and everything it can touch is gone. We built a phantom token pattern: a credential proxy that lives outside the sandbox, talking to agents only through a seccomp-restricted channel. nono.sh/blog/blog-credential-injection

LOL - "Gemini is wrong again. The code compiles and runs - you demonstrated it. Gemini is hallucinating a v2/v3 API mashup"

Config + sandboxes + great DX - the current sweet spot

Its always nice to get a bit of love and appreciation as an OSS maintainer

Sorry, but I will never get the attraction with this thing (only using it to debug a user issue)

Loving the new nono claude demo video, so far the common ask has been 'Is that Sean Bean speaking" www.youtube.com/watch?v=d6Y8...

nono.sh part two: nono --net-block bash <(curl url): curl downloads the script outside the sandbox, but bash executes it inside with network blocked. The malicious script can't exfiltrate or cause any damage, because the kernel denies all network syscalls with "Operation not permitted."

cool things you can do with nono.sh , part on: nono'ception - aka nono spawns itself into a nono sandbox and then asks nono, why can I not access ~/.ssh/id_rsa

AI is 6 months away from being 6 months away

What is this bizarre reality we are in - utterly bonkers

Guest Blog on Spin Framework of how we use WebAssembly isolated tool execution for the training of agentic large language models spinframework.dev/blog/deepfab... - by @lukehinds.bsky.social

Just finished C.S. Lewis's The Great Divorce - a take on Heaven / Hell. Hell is quietly horrifying: a grey, endless suburb where you're trapped with petty, quarrelsome Karens. The more you insist on being understood, the more you cling to your own righteousness, the harder it becomes to leave.

How do you train an SEO-focused agent from scratch? Our co-founder Stephen Parkinson covers the full process - dataset generation, live tool execution setup, and more. Part two dropping soon. deepfabric.dev

This was a lot of fun and quite eye opening as to what is possible with open SLMs

My 12 and 15 yr old daughters Spotify end of year listening ages were 49 and 45 years old - all from listening to mostly nineties bands. The summary in their words: they don’t make good music anymore, no bands and a lot of AI slop. The youngest top artists of 2025: The Cure, The Smiths and Deftones.

Just in case you need a reminder - don't use GPG

How we trained a 4b SLM to outperform Claude Sonnet 2.5 and Gemini 2.5 pro at Tool Calling - run on a free T4 GPU on Google Colab: colab.research.google.com/drive/1EG1V4...

DeepFabric now supports live tool execution during dataset generation, isolated within web-assembly components care of the @cncf.io spinframework- this produces training data with far less hallucinations and encourages more reactive learning patterns during SFT or RL based training.

Another week, another Agent foundation

huggingface.co/blog/lukehin... @alwaysfurther.ai

Latest Blog on why relying on system prompts as guardrails could let you down www.alwaysfurther.ai/blog/system-...

Very excited to get this out of stealth - if you're keen to learn more , please do reach out

We're out of stealth! Today we're announcing Always Further and our $1.8M pre-seed to deliver precise, secure and reliable open language models. More soon. Let's build 🚀 www.alwaysfurther.ai/blog/announc...

I getting quite few pull requests where an issue gets picked up, a huge PR made, I use gemini reviews, it flags up lots of nits and flaws in the PR. The human then faced with having to understand the code, nopes out and closes the PR.

Claude Code really likes using python asserts outside of tests, which is proper insanity. When compiling to optimised byte code, python asserts are ignored. This will mean a lot of code running in production, where assert style logic will be completely removed from the code.

In remembrance today at the 11th hour - "eyes-on" Rifles, fallen, but not forgotten.

I am noticing a growing trend of major tech companies partnering and developing specifications and standards privately / by invite only, then releasing in it all with a fanfare and making it out like its an open source community. It's not. It's exclusive, pay to play and very far from inclusive.