decodebytes

5 ms·

1.
A primer and taxonomy for agent sandboxes(nolabs.ai)
2 points by decodebytes 23d ago|0 comments
2.
by decodebytes 1mo ago
Cannot even merge code, this is the limit for me. We are prioritising migration to a different platform and this time going to decouple CI - right now we have too many points of failure on one vendor.
3.
by decodebytes 3mo ago
Apologies, it should have been " A MicroVM.." but hit by the character title limit.
4.
MicroVM sandbox solves one problem well, but not the agent security problem(decodebytes.substack.com)
3 points by decodebytes 3mo ago|1 comments
5.
by decodebytes 4mo ago
Same thoughts - we use an action to ship to production, its builds an image, pushes it to ECS which triggers a deployment. We can't be blocked here. Seems silly what we settled on this, but for a long time GitHub had been reliable enou
6.
What Happened in There? A Tamper-Evident Audit Trail for AI Agents(nono.sh)
2 points by decodebytes 4mo ago|1 comments
7.
What Happened in There? A Tamper-Evident Audit Trail for AI Agents(nono.sh)
2 points by decodebytes 5mo ago|1 comments
8.
by decodebytes 5mo ago
Overview of how I built in mini version of my previous project, sigstore rekor, into the nono.sh agent security framework.
9.
by decodebytes 6mo ago
Always Further, founded by team who created https://sigstore.dev , used to secure npm, pypi, brew, and provide attestations for github releases, nvidia and google for AI model signing - we and are now building https:/&#x2F
10.
Block the LiteLLM supply chain attack, with Nono.sh runtime Security(nono.sh)
2 points by decodebytes 6mo ago|0 comments
11.
by decodebytes 6mo ago
If anyone wants native python sandboxing without needing a cloud API, we just shipped an early python SDK from the https://nono.sh project: import nono_py as nono # Define capabilities caps = nono.CapabilitySet() caps.allow_path
12.
by decodebytes 6mo ago
nope - most folks wrap it in nono: https://nono.sh/docs/cli/clients/opencode
13.
by decodebytes 6mo ago
If anyone happens to be interested in sandboxing, a community of us are building https://nono.sh For what it's worth, it's not just whipped up in claude, a lot of us have a long background in security - I originally cr
14.
Credential Protection for AI Agents: The Phantom Token Pattern(nono.sh)
3 points by decodebytes 7mo ago|2 comments
15.
by decodebytes 7mo ago
Hey HN. I'm Luke, security engineer and creator of Sigstore and other open source security projects. I've been building nono, an open source sandbox for AI coding agents that uses kernel-level enforcement (Landlock/Seatbelt)
16.
Kernel-enforced sandbox App and SDK for AI agents, MCP and LLM workloads(github.com)
2 points by decodebytes 7mo ago|2 comments
17.
by decodebytes 7mo ago
Hey HN Luke here. I wanted to introduce a project I have building for the past few weeks in response to events such as openclaw and the glaring security issues at hand. Prior to nono, I created Sigstore , a project used for software supply
18.
Nono: A secure, kernel-enforced capability sandbox for AI agents(github.com)
2 points by decodebytes 8mo ago|0 comments
19.
Show HN: Nono – Kernel-enforced sandboxing for AI agents(github.com)
1 points by decodebytes 8mo ago|0 comments
20.
by decodebytes 8mo ago
This is why I started https://nono.sh , agents start with zero trust in a kernel isolated sandbox.
21.
by decodebytes 8mo ago
Good question - and the answer is no, they cannot escape. nono uses Landlock (Linux) and Seatbelt (macOS) - these are kernel-level security mechanisms. When a sandbox is created: All child processes inherit the restrictions - if the agent s
22.
by decodebytes 8mo ago
Hmm, I don't know about better, more convenient I guess. But if it floats your boat you could write out everything in the sb format and call sandbox_exec()!
23.
by decodebytes 8mo ago
lol thanks! seriously, I have been running the tool over and over while testing and I kept typing 'nano' and opening binaries in the text editor. Next minute I swearing my head off trying to close nano (and not vim!)
24.
Show HN: Nono – Kernel-enforced sandboxing for AI agents(nono.sh)
4 points by decodebytes 8mo ago|5 comments
25.
by decodebytes 8mo ago
I rushed out nono.sh (the opposite of yolo!) in response to this and its already negated a few gateway attacks. It uses kernel-level security primitives (Landlock on Linux, Seatbelt on macOS) to create sandboxes where unauthorized operation
26.
When "I Built" Became "I Ordered"(decodebytes.substack.com)
2 points by decodebytes 8mo ago|0 comments
27.
by decodebytes 9mo ago
DeepFabric - Generate High-Quality Synthetics, Fine-Tune, Measure, and Evaluate models in a Single Pipeline Recently used the project to train a 4B model to outperform Claude Sonnet 4.5 and Gemini Pro 2.5 at Tool Calling. Colab here to run
28.
DeepFabric – Focused Training for More Grounded and Efficient Models(docs.deepfabric.dev)
1 points by decodebytes 9mo ago|0 comments
29.
DeepFabric. Train and Evaluate Model Behavior with Structured Data(huggingface.co)
1 points by decodebytes 10mo ago|0 comments
30.
by decodebytes 1y ago
I think it was gpt4-mini, but local models do surprisingly well too.

More ›