Issues

• optional network audit log in NetworkAuditEvent schema for standalone nono proxy.

  enhancement
  nolabs-ai/nono#2248 · Filter by author metahertz opened on Nov 1, 2026
  1

• dangerous_commands is not folded into command policies (0.80.0, 0.81.0)

  bug
  nolabs-ai/nono#2247 · Filter by author abdurahmanshiine opened on Nov 1, 2026
  2

• Linux: capability_elevation blocks access to intercept-ca.pem

  bug
  nolabs-ai/nono#2246 · Filter by author Chairnee opened on Nov 1, 2026
  1

• --trust-proxy-ca rejected when the profile's tls_intercept omits ca_lifecycle

  bug
  nolabs-ai/nono#2244 · Filter by author mkopec-rtbh opened on Oct 31, 2026
  1

• command_policies rejects working Nix Emacs: ELF dependency scan cannot resolve libharfbuzz.so.0

  nolabs-ai/nono#2242 · Filter by author ananthakumaran opened on Oct 31, 2026
  1

• allow_domain endpoint rules are not enforced on the credential route's local URL (<SVC>_BASE_URL)

  bug
  nolabs-ai/nono#2241 · Filter by author mkopec-rtbh opened on Oct 30, 2026
  1

• Proxy: a CONNECT tunnel hangs when its upstream goes silent

  nolabs-ai/nono#2236 · Filter by author jeremy opened on Oct 30, 2026
  1

• feat(approval): Unix-socket transport for webhook approval backends

  enhancement
  nolabs-ai/nono#2233 · Filter by author panga opened on Oct 29, 2026
  2

• Slow startup: filesystem deny globs repeatedly traverse the entire checkout

  bug
  nolabs-ai/nono#2231 · Filter by author JackCA opened on Oct 29, 2026
  1

• Sigstore trusted root is embedded at compile time and can go stale

  bug
  nolabs-ai/nono#2228 · Filter by author lukehinds opened on Oct 29, 2026
  1

• Fix flags should not suggest access grants for protected root paths

  bug
  nolabs-ai/nono#2226 · Filter by author MateSaary opened on Oct 29, 2026
  2

• auto sandbox policy doesn't work with docker's embedded DNS server

  bug
  nolabs-ai/nono#2222 · Filter by author imkira opened on Oct 29, 2026
  2

• nono why misreports APFS firmlink paths as allowed

  nolabs-ai/nono#2221 · Filter by author SequeI opened on Oct 28, 2026
  1

• Add disk-usage controls for sandboxed processes

  nolabs-ai/nono#2218 · Filter by author SequeI opened on Oct 28, 2026
  1

• Refactor Linux sandbox backend selection into an explicit enforcement plan

  nolabs-ai/nono#2214 · Filter by author SequeI opened on Oct 27, 2026
  1

• Deny clipboard access by default, with an explicit grant

  enhancement
  nolabs-ai/nono#2213 · Filter by author AnnaXH opened on Oct 27, 2026
  1

• Remove temporary RUSTSEC-2026-0387 cargo-audit exception

  nolabs-ai/nono#2211 · Filter by author SequeI opened on Oct 27, 2026
  1

• bug(diagnostics): silent failure / missing stderr diagnostic when network syscall is denied at L4 via seccomp user-notif

  nolabs-ai/nono#2209 · Filter by author KnutZuidema opened on Oct 26, 2026
  1

• bug(proxy): concurrent loopback connections to supervisor proxy fail with EPERM at TCP connect level

  nolabs-ai/nono#2208 · Filter by author KnutZuidema opened on Oct 26, 2026
  1

• A killed append leaves the audit ledger permanently unparseable

  nolabs-ai/nono#2207 · Filter by author kipz opened on Oct 26, 2026
  3

• Plain click on links does nothing when Claude Code runs in a sandbox; no error shown

  bug
  nolabs-ai/nono#2201 · Filter by author jigfox opened on Oct 26, 2026
  4

• macOS: --allow-gpu works for llama.cpp but MLX fails with “Failed to create Metal shared event”

  bug
  nolabs-ai/nono#2200 · Filter by author 79tilinfinity opened on Oct 25, 2026
  1

• tls_intercept: L7 routes to IP-literal upstreams fail the inner TLS handshake (no SNI fallback, no iPAddress SAN)

  nolabs-ai/nono#2198 · Filter by author LuckVd opened on Oct 25, 2026
  3

• Distinguish credential capture failures from upstream 503s in HTTP responses

  enhancement
  nolabs-ai/nono#2190 · Filter by author wincent opened on Oct 23, 2026
  3

• TCP port 0 for ephemeral ports blocked

  bug
  nolabs-ai/nono#2187 · Filter by author aidalgol opened on Oct 23, 2026
  1