nono — The Cyber Toolchain

nono v0.81.0

Thu, 29 Oct 2026 17:25:24 GMT

nono adds network approval backends, opt-in namespace isolation, and Landlock V9 detection alongside new policy groups and proxy denial logging⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Query pathname Unix socket connect access with `nono why --unix-socket ` to diagnose AF_UNIX policy decisions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Add the `rtk_state` policy group to grant runtime-state access in profiles. • Enable opt-in namespace isolation on Linux (NEP-0004) for stronger per-tool containment. • nono now detects Landlock ABI up to V9, extending future-proofing for Linux kernel upgrades while keeping enforcement at V6. • Proxy deny log lines now include `denial_category`, giving operators a structured field to filter and alert on blocked network requests. • Profiles now require fully qualified package profile names, making profile references unambiguous across registries. • The exec gate on Linux now reads only the ELF regions it actually parses, reducing per-execution overhead and enabling lower-latency sandboxing for workloads that spawn many processes. Breaking changes: • Profiles now require fully qualified package profile names; bare/unqualified profile name references that worked in v0.80.0 will break on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.80.0

Tue, 13 Oct 2026 08:27:17 GMT

nono v0.80.0 adds SHA-256 executable pinning, per-command AWS SigV4 auth, and macOS keychain_access grants for tool sandboxes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `sha256` field to `CommandPolicyConfig` in the command-policy config to pin a command to its expected SHA-256 executable digest, blocking substituted or tampered binaries.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `aws_auth` field (type `AwsAuthConfig`) to `CommandCredentialConfig` in the command-policy config, enabling per-command AWS SigV4 signing in tool-sandbox scoped-proxy routes — the child process sees only dummy keys while real credentials are resolved host-side. • Adds command-level `keychain_access` grant for macOS, letting profiles permit a specific sandboxed command to access the macOS Keychain without widening the entire session sandbox. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.79.0

Wed, 30 Sep 2026 14:57:50 GMT

nono v0.79.0 adds remote agent session launch, proxy denial diagnostics, Snap policy group, and diagnostics.redaction.extra_env_vars⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--remote`, `--agent`, `--workspace`, and `--detached` flags to `nono run` to launch and attach to remote agent sessions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `diagnostics.redaction.extra_env_vars` profile key to redact additional environment variables from diagnostic output. • Renders proxy network denials in the CLI diagnostic footer so blocked outbound calls are visible at a glance. Breaking changes: • Legacy Claude hook cleanup code has been removed (`feat(cli)!: remove legacy Claude hook cleanup`); any setup relying on that automatic cleanup will no longer have it performed on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.78.0

Wed, 16 Sep 2026 15:39:40 GMT

nono v0.78.0 adds backend-signed approval webhooks, macOS DNS opt-out, and a Nix `#prebuilt` flake output⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds CapabilitySet::block_dns() (and C-API nono_capability_set_block_dns() / nono_capability_set_dns_enabled()) on macOS to opt out of implicit `mDNSResponder` grants in `Blocked` and `ProxyOnly` network modes. • Adds `#prebuilt` Nix flake output to fetch the official release binary directly from GitHub Releases, skipping source compilation. • Removes all remaining deprecated surfaces and legacy aliases as part of v1.0.0 preparation. Breaking changes: • All remaining deprecated CLI surfaces and legacy profile aliases removed — any profile or script relying on them will break on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.77.0

Fri, 11 Sep 2026 19:17:33 GMT

nono v0.77.0 removes all legacy profile aliases and shims, and switches network-notification sessions to CLONE_FILES bootstrap.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Removes all legacy profile-key aliases, CLI flag aliases (including `--allow-net`, `--net-allow`, and env vars `NONO_NET_BLOCK`, `NONO_NET_ALLOW`, `NONO_PROXY_CREDENTIAL`, etc.), and the `nono policy` subcommand — these now fail to parse instead of warning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Switches network-notification session bootstrap to use `CLONE_FILES`, improving session startup for that session type. Breaking changes: • The `nono policy` subcommand (and all its sub-forms such as `nono policy groups`, `nono policy profiles`, `nono policy show`) is removed — use `nono profile` equivalents instead. • Legacy profile keys and CLI flag aliases (`--allow-net`, `--net-allow`, and others) and environment variable aliases (`NONO_NET_BLOCK`, `NONO_NET_ALLOW`, `NONO_ALLOW_PROXY`, `NONO_PROXY_ALLOW`, `NONO_PROXY_CREDENTIAL`, `NONO_EXTERNAL_PROXY`, `NONO_EXTERNAL_PROXY_BYPASS`) are removed and now fail to parse — replace with their current equivalents. • The `nono prune` subcommand is removed from the CLI. • Profile JSON keys `security.allowed_commands` and `policy.add_deny_commands` are no longer accepted — use `commands.allow` and `commands.deny` respectively. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.76.0

Wed, 09 Sep 2026 10:20:37 GMT

nono v0.76.0 adds `--max-total-size` to audit cleanup, Nix flake support, and `unix_socket_bind` for tool sandboxes • Adds `--max-total-size ` flag to `nono audit cleanup` to evict oldest sessions until total audit storage falls below a specified megabyte threshold. • Adds `unix_socket_bind` field to `CommandSandboxConfig` in tool-sandbox profiles, allowing per-command Unix domain socket grants (e.g. Git fsmonitor socket) without widening the agent-level sandbox. • Adds Nix flake support, enabling `nix run github:nolabs-ai/nono` and `nix profile add github:nolabs-ai/nono` installs without Homebrew or the install script. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.75.0

Tue, 01 Sep 2026 15:33:40 GMT

nono v0.75.0 adds --extends to nono proxy, glob allow/deny patterns, --strict-broker-path, and resolved command_policies in profile show • Adds `--extends ` to `nono proxy`, enabling the same repeatable profile-composition semantics already available on `nono run` — requires `--profile` to be set. • Adds `--strict-broker-path` flag to sandbox args: refuses to start instead of warning when a filesystem grant overlaps a directory on `PATH`, blocking planted-binary attacks on host processes outside the sandbox. • Adds glob pattern support for env var and hostname allow/deny lists in profile and proxy network configuration. • Adds a `format` field to `CommandCredentialConfig` for ambient credentials: a literal template (e.g. `sk-ant-oat01-{}`) that shapes the visible phantom token so prefix-sniffing clients recognise it. • Sanitizes `PATH` for host-side credential and URL brokers, preventing bare-name binary resolution from grants that overlap `PATH` directories. • Ships an initial set of tool sandbox examples demonstrating `command_policies` configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.74.0

Wed, 19 Aug 2026 13:28:06 GMT

nono v0.74.0 adds remote session connect/ps, subtool audit surfacing, export_env pass-through, and configurable approval backends • Adds `nono connect` subcommand to attach this terminal to a session hosted by nono-console; accepts a session ID (e.g. `local:host:abc123`) or URL directly. • Extends `nono ps` with `--remote` flag to list sessions hosted by the enrolled tenant's nono-console, combinable with `--all` and `--json`. • Adds `export_env` field to tool-sandbox `CommandPolicyConfig` and top-level `session_export_env` list in `CommandPoliciesConfig`, letting callers explicitly pass named env vars (exact names, trailing-`*` prefixes, or bare `*`) through to child processes, bypassing the dangerous-var blocklist. • Adds configurable approval backend for supervised-mode prompts via `approval_backends` in the profile, letting operators route capability-approval decisions to different backends. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.73.0

Mon, 10 Aug 2026 15:53:57 GMT

nono v0.73.0 adds glob pattern support in filesystem path fields for more flexible sandbox policies. • Supports glob patterns in filesystem path fields (e.g. `fs_read`, `fs_write`) within profiles, enabling wildcard-based filesystem access rules in sandbox policies. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.72.0

Fri, 07 Aug 2026 13:35:40 GMT

nono v0.72.0 adds static seccomp network baseline on Linux, explicit deny-path reporting in `why`, and drops openclaw/swival built-in profiles. • The `why` subcommand now reports explicit deny paths from the sandbox policy, making it easier to diagnose why a network or filesystem access was blocked. • Removes `openclaw` and `swival` as built-in profiles; users relying on them must pull the equivalent packages from the registry. Breaking changes: • The `openclaw` and `swival` built-in profiles have been removed; any setup using them will break on upgrade until the equivalent profiles are pulled from the registry. • The `external` `--sandbox-policy` mode on Linux no longer disables all nono sandboxing: Landlock still handles filesystem/process policy, and only TCP enforcement is delegated externally. Configurations that relied on `external` bypassing Landlock will behave differently. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.71.0

Fri, 31 Jul 2026 15:00:59 GMT

nono v0.71.0 adds a new `platform` subcommand for enrollment and audit delivery to a control plane. • Adds `nono platform` subcommand to enroll with and inspect an audit control plane, enabling centralised audit delivery for teams running nono at scale. Breaking changes: • The `nono learn` command has been removed; it was deprecated since v0.50.1. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.70.0

Wed, 29 Jul 2026 15:01:22 GMT

nono v0.70.0 adds SPIFFE/SPIRE workload identity, per-route rate limiting, Vault OIDC mediation, JWT-shaped capture nonces, and profile-declared no_proxy bypass. • Adds SPIFFE/SPIRE workload identity authentication for upstream proxy routes, enabling zero-trust service-to-service auth without static credentials. • Adds per-route request rate limiting via RouteRateLimiter, letting profiles cap how many requests a sandboxed tool can make to a given upstream. • Adds support for mediating `vault login -method=oidc`, including a custom inject header and per-command `open_port` to handle the OIDC browser callback. • Adds a JWT-shaped nonce option (`CapturedNonceShape::Jwt`) for capture intercepts, producing a `

..nono_<64hex>` token for consumers that validate token structure before use. • Adds profile-declared `no_proxy` bypass support, allowing profiles to specify hosts that skip the nono proxy. • Offers to save denied open-URL origins on session exit, streamlining iterative policy development. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.69.0

Mon, 20 Jul 2026 19:35:52 GMT

nono v0.69.0 adds SPIFFE/SPIRE workload identity auth for upstream proxy routes and profile-declared no_proxy bypass support. • Adds SPIFFE/SPIRE workload identity authentication for upstream proxy routes, supporting both JWT-SVID bearer injection and OAuth2 client assertion (RFC 7523) flows; all flows are fail-closed if the SPIRE socket is unreachable. • Adds profile-declared `no_proxy` bypass support, letting profiles specify hosts that skip the nono proxy. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.68.0

Tue, 14 Jul 2026 14:25:47 GMT

nono v0.68.0 adds process-count caps, port ranges, per-OS profile overrides, domain blocking, plain HTTP proxy support, and bun/mise policy presets. • Adds `--max-processes` flag to cap the number of processes a sandbox may spawn (enforced via cgroup v2 `pids.max`). • Adds port range support to sandbox profiles, enabling network rules that span a range of ports rather than individual ports. • Adds `platform_overrides` field to profiles for per-OS patch sets, letting a single profile express different rules on macOS vs Linux. • Adds `deny_domain` proxy configuration to explicitly block specific domains through the proxy. • Adds `exec_paths` per-command tool-sandbox setting to support multi-call binaries (e.g. busybox-style) that need access to multiple executable paths. • Supports plain HTTP forward-proxying via the `HTTP_PROXY` environment variable. • Adds built-in `bun` runtime policy preset for sandboxing Bun-based agents. • Adds built-in `mise` policy preset for sandboxing mise-based tool workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.67.0

Mon, 06 Jul 2026 12:45:39 GMT

nono v0.67.0 adds a standalone proxy command, AWS SigV4 MitM auth, declarative OAuth capture, resource limiting, exec intercept, and richer sandbox token expansion. • Adds `nono proxy` standalone command to run the network-filtering and credential-injection proxy as an independent server, with options for fixed port, no-auth mode, and domain allowlisting. • Implements AWS SigV4 authentication for the MitM proxy, enabling signed AWS API request interception and credential injection. • Adds declarative sandboxed OAuth capture, allowing profiles to define OAuth flows without manual credential handling. • Introduces resource limiting support in sandbox profiles. • Adds `exec` intercept action for tool-sandbox command policies, enabling a helper binary to replace a matched command's real binary inside the existing sandbox. • Supports per-intercept sandbox overrides and per-command `unsafe_macos_seatbelt_rules` escape hatch in tool-sandbox policies. • Supports CLI profile `extends` inheritance, letting a local profile compose on top of a registry base profile. • Expands `$VAR` tokens from the process environment in profile filesystem paths and capture commands. • Expands `@git:*` dynamic tokens in top-level filesystem paths, including new git worktree tokens. • Enables NVIDIA GPU 570+ thread naming in sandbox mediation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.66.0

Mon, 29 Jun 2026 08:34:33 GMT

nono v0.66.0 adds HTTP/2 proxy support, a @git:common-dir dynamic token, and a simplified self-invocation policy for tool sandboxes. • Adds `--allow-http2` flag to enable HTTP/2 multiplexing (via ALPN) for reverse proxy and credential injection upstream connections. • Adds `@git:common-dir` dynamic token for tool-sandbox profiles, allowing policies to reference the Git common directory at runtime. • Simplifies self-invocation policy for sandboxed tools, reducing boilerplate needed when a tool is permitted to call itself. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.65.0

Tue, 23 Jun 2026 14:49:49 GMT

nono v0.65.0 introduces a tool sandbox for isolating tool execution environments. • Adds a tool sandbox capability to isolate tool execution at runtime. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.65.0

Tue, 23 Jun 2026 14:49:49 GMT

nono v0.65.0 introduces tool sandboxing, giving delegated tools their own isolated child sandboxes with separate filesystem, network, and credential policies. • Adds tool sandbox (ETI): delegated tools such as `git`, `gh`, and `curl` now run in isolated child sandboxes with their own `fs_read`/`fs_write`, network rules, credential grants, and argv invocation policies — independent of the agent's session sandbox. • Enables per-tool credential proxy injection via `command_policies.credentials`, letting profiles expose a proxied token to a specific tool (e.g. `gh`) while enforcing L7 endpoint and HTTP-method allow-lists on that token. • Extends `nono why` to diagnose tool-sandbox argv policy denials via `--command -- `, in addition to its existing filesystem and network queries. Breaking changes: • Custom credentials now require explicit activation; previously working custom credential configurations will no longer function without being explicitly activated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.64.0

Thu, 18 Jun 2026 16:20:23 GMT

nono v0.64.0 adds AWS auth config, macOS blocked-grant visibility, CI environment detection, and structured diagnostics for library/FFI clients. • New `aws_auth` config block enables AWS authentication support in the proxy. • Capability summary now shows blocked macOS grants, giving practitioners a clear view of denied sandbox permissions. • Update-check now detects CI environments automatically, suppressing irrelevant update prompts in pipelines. • Structured diagnostics exposed via library and FFI interfaces, enabling programmatic access to diagnostic output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.64.0

Thu, 18 Jun 2026 16:20:23 GMT

nono v0.64.0 adds AWS auth config, structured diagnostics JSON output, CI environment detection, and macOS blocked-grants visibility. • Adds `aws_auth` config support, enabling native AWS credential handling in agent sandbox profiles. • New `--diagnostics-json` flag on `nono run` emits structured session diagnostics as JSON on stderr, including proxy diagnostics when present. • Update-check now detects CI environments, suppressing spurious upgrade prompts in automated pipelines. • Capability summary now surfaces blocked macOS grants, giving practitioners a clearer view of what the sandbox is denying on macOS. • Exposes structured diagnostics for library and FFI clients, enabling programmatic access to session diagnostic data from Rust, Python, TypeScript, and Go bindings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.63.0

Mon, 15 Jun 2026 18:27:19 GMT

nono v0.63.0 adds static env injection, keyring timeout control, $PACK_DIR in session hooks, and XDG state dir migration. • Adds `set_vars` for static environment variable injection into sandboxed sessions. • Adds `NONO_KEYRING_TIMEOUT_SECS` environment variable to control keychain access timeout. • Adds `$PACK_DIR` variable support in session hooks, enabling store pack workflows. • Moves runtime state to XDG state directories for cleaner system integration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.63.0

Mon, 15 Jun 2026 18:27:19 GMT

nono v0.63.0 adds static env injection, keyring timeout control, $PACK_DIR in session hooks, and XDG state dir support. • Adds `set_vars` profile field for static environment variable injection into sandboxed sessions — set fixed env values without exposing them through the agent's environment. • Adds `NONO_KEYRING_TIMEOUT_SECS` environment variable to control how long nono waits for keychain/keyring access before timing out. • Adds `$PACK_DIR` expansion support in `session_hooks`, enabling hooks to reference the store pack directory for pack-aware scripts. • Moves CLI runtime state to XDG state directories, aligning with the XDG Base Directory specification for cleaner system integration. Breaking changes: • Runtime state is moved to XDG state directories (`feat(cli): move runtime state to XDG state dirs`), which may break setups that reference the previous runtime state paths. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.61.1

Tue, 02 Jun 2026 09:43:13 GMT

nono v0.61.1 lets profiles extend from registry references, enabling shared policy inheritance across repos. • Supports registry references in profile `extends` fields, enabling profiles to inherit from centrally-managed registry entries. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.61.0

Tue, 02 Jun 2026 05:22:54 GMT

nono v0.61.0 adds a profile option to suppress system service diagnostics output. • Adds a profile option to suppress system service diagnostics, reducing noise in diagnostic output. Breaking changes: • Credentials are no longer enabled by default in network-policy profiles; existing profiles that relied on credentials being enabled by default will need to explicitly enable them. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.60.0

Mon, 01 Jun 2026 17:10:31 GMT

nono v0.60.0 adds interactive denied-path selection, fine-grained allow_domain controls, configurable timeouts, and macOS CA trust-store integration. • New interactive denied path selector lets users pick and allow blocked paths without manually editing config. • Supports fine-grained method+path restrictions inside `allow_domain` rules for tighter egress control. • New `--trust-proxy-ca` flag integrates with the macOS system trust store for proxy CA validation. • User-facing timeouts are now configurable via centralized timeout constants. • Supports JSONC (JSON with comments) in wiring directives. • Annotates suppressed denials in output and styles save-prompt paths for clearer audit visibility. • Removes `libdbus` dependency on Linux, simplifying deployment on minimal systems. • RPM release artifacts now available for Red Hat-based distributions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.59.0

Wed, 27 May 2026 06:55:57 GMT

nono v0.59.0 adds suppressed-denial annotations, configurable timeouts, and fine-grained method+path allow_domain restrictions. • Annotates suppressed denials in output and styles save-prompt paths for clearer audit visibility. • Makes user-facing timeouts configurable via centralized timeout constants instead of hard-coded values. • Supports fine-grained HTTP method+path restrictions inside `allow_domain` rules, enabling per-endpoint allowlisting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.58.0

Tue, 26 May 2026 09:48:33 GMT

nono v0.58.0 adds JSONC profile support, per-profile target binary, Bitwarden credential source, session lifecycle hooks, and a java-dev profile. • Supports JSONC (JSON with comments) syntax in profile files for easier annotation of policy configs. • Allows profiles to specify a target binary directly, scoping a profile to a particular executable. • Adds Bitwarden credential source via the `bw://` URI scheme for secret resolution. • Introduces session lifecycle hooks to run commands or scripts at session start and end. • Adds a `java_runtime` policy group and a `java-dev` built-in profile for sandboxing Java workloads. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.57.0

Wed, 20 May 2026 05:50:36 GMT

nono v0.57.0 expands shadowing checks to cover pack profiles. • Extends shadowing checks to include pack profiles, broadening detection coverage. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.56.0

Mon, 18 May 2026 20:41:53 GMT

nono v0.56.0 adds a configurable process startup timeout option to the CLI. • Adds an option to configure the process startup timeout via the CLI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.55.0

Sun, 17 May 2026 15:47:15 GMT

nono v0.55.0 adds AF_UNIX socket sandboxing, Landlock v6 support, and profile signer verification. • Adds Landlock v6 signal support and abstract Unix socket scoping on Linux. • Adds recursive Unix socket directory grants via the CLI. • Adds an explicit allowlist for pathname AF_UNIX sockets in the sandbox. • Implements AF_UNIX pathname mediation on Linux for fine-grained socket access control. • Verifies pack signer identities when pulling profiles and supports org/repo pull format. • On macOS, treats `open_port 0` as a wildcard grant for all localhost outbound connections. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.54.0

Wed, 13 May 2026 09:01:46 GMT

nono v0.54.0 adds platform-conditional profile fields and package update, pinning, and outdated commands. • Adds platform-conditional profile fields, enabling profiles to specify different settings per platform. • Adds `package update`, `package pinning`, and `package outdated` subcommands for managing package lifecycle. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.53.0

Mon, 11 May 2026 19:09:48 GMT

nono v0.53.0 adds upstream TLS trust, auth interception, multi-route dispatch, and secret scrubbing from command arguments. • Supports upstream TLS trust configuration for secure proxy connections. • Adds interception of authentication flows in proxied requests. • Enables multi-route dispatch for routing traffic across multiple upstream targets. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.52.2

Mon, 11 May 2026 13:02:50 GMT

nono v0.52.2 suppresses save-profile prompts for denied paths • Suppresses save-profile prompts when a path has been denied, reducing noise during profile management. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.52.0

Sun, 10 May 2026 09:11:15 GMT

nono v0.52.0 adds operator-controlled variable denylisting and improved CLI diagnostics. • Adds `deny_vars` field to `EnvironmentConfig`, letting operators block specific environment variables from being used. • Improves diagnostics output in the CLI for better troubleshooting visibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.51.0

Sat, 09 May 2026 21:14:53 GMT

nono v0.51.0 adds TLS interception for L7-bearing CONNECT routes in proxy mode. • Adds TLS interception for L7-bearing CONNECT routes, enabling deep inspection of proxied HTTPS tunnels. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.50.0

Fri, 08 May 2026 13:57:09 GMT

nono v0.50.0 adds env:// URI support for credential keys in custom credential profiles. • Supports `env://` URI scheme in `custom_credentials` `credential_key` fields, enabling secrets to be sourced from environment variables in profiles. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.49.0

Thu, 07 May 2026 15:43:23 GMT

nono v0.49.0 adds a yaml_merge directive to the wiring system. • Adds `yaml_merge` directive to the wiring configuration system, enabling YAML merge key support in wiring definitions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.48.0

Thu, 07 May 2026 12:00:59 GMT

nono v0.48.0 adds shell completion generation via `nono completion ` • Adds `nono completion ` command to generate shell completion scripts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.47.1

Wed, 06 May 2026 17:48:19 GMT

Adds `profile` subcommands to manage drafts and check package status. • Adds `nono profile` commands to manage profile drafts and check package status Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.47.0

Tue, 05 May 2026 08:04:58 GMT

nono v0.47.0 restructures the profile JSON schema (phase 2 breaking change). • Restructures the profile JSON schema (phase 2 of #594), changing the shape of profile JSON output. Breaking changes: • The profile JSON schema has been restructured (`feat(profile)!`): existing tooling or scripts that parse or produce profile JSON will need to be updated to match the new schema shape. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.46.0

Fri, 01 May 2026 09:35:20 GMT

nono v0.46.0 adds GitLab domain support to the developer network policy. • Supports GitLab domains in the developer network policy, enabling teams to allowlist GitLab traffic without manual domain enumeration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.45.0

Thu, 30 Apr 2026 11:59:50 GMT

nono v0.45.0 adds native TLS root certificate support for improved PKI integration. • Supports native TLS root certificates, enabling use of system or enterprise CA stores instead of bundled roots. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.44.0

Wed, 29 Apr 2026 14:14:42 GMT

nono v0.44.0 moves built-in profiles to the package and adds a Claude prompt to clean up old built-in hooks. • Migrates inbuilt profiles to the package, consolidating profile management. • Adds a Claude prompt to remove old built-in hooks, simplifying hook cleanup. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.43.0

Tue, 28 Apr 2026 10:51:06 GMT

nono v0.43.0 adds outbound TCP port allowlisting and optional system keyring for headless/container builds. • Adds `--allow-connect-port` flag for outbound TCP port allowlisting. • Makes system keyring optional, enabling headless and container deployments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.42.0

Sat, 25 Apr 2026 09:19:36 GMT

nono v0.42.0 adds Unix domain socket allow-listing via a new --allow-unix-socket flag family. • Adds `--allow-unix-socket` flag family to allow-list AF_UNIX socket paths on Linux and macOS. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.41.0

Fri, 24 Apr 2026 12:08:27 GMT

nono v0.41.0 enhances denial diagnostics, consolidates policy under profile, and preserves terminal scrollback on attach. • Enhances prompts and denial diagnostics to surface clearer context when a policy blocks an action. • Consolidates `nono policy` subcommand under `nono profile`, with `nono policy` retained as a deprecation alias. • Preserves outer terminal scrollback buffer when attaching to a PTY session. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.40.1

Thu, 23 Apr 2026 17:28:26 GMT

nono v0.40.1 adds Code URL Handler read path and improves unlink rules • Improves `unlink` rule logic Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.40.0

Thu, 23 Apr 2026 11:15:42 GMT

nono v0.40.0 adds signed audit trails with Merkle roots, HTTP upstream reverse-proxy support, and a macOS seatbelt profile field. • Captures pre- and post-operation Merkle roots in the audit trail and introduces audit signing for tamper-evident records. • Adds HTTP upstream support to the built-in reverse proxy. • New `unsafe_macos_seatbelt_rules` profile field lets operators supply custom macOS sandbox (seatbelt) rules. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.39.0

Tue, 21 Apr 2026 19:49:55 GMT

nono v0.39.0 adds OAuth2 client-credentials token exchange with caching and a no-keychain Claude profile. • Adds OAuth2 client-credentials token exchange with caching to the proxy, enabling automated service-to-service authentication flows. • Adds a no-keychain profile for Claude and expands existing Claude access controls. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono

nono v0.38.0

Mon, 20 Apr 2026 12:26:02 GMT

nono v0.38.0 adds package management commands, environment variable filtering, and GitLab keyless identity improvements. • Adds package management subcommands (`pull`, `remove`, `search`, `list`) for managing nono packages from the CLI. • Adds environment variable filtering to control which variables are exposed in sandboxed environments. • Prefers `CI_CONFIG_REF_URI` for GitLab keyless workflow identity in trust verification. • Prints profile JSON to stdout as a fallback when saving a learned profile fails, preserving the output. Breaking changes: • The claude-code integration package has been removed (`feat(claude-code): remove claude-code integration package`). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nono