Home / Plugin audits / sandbox-nono

sandbox-nonogithub.com/dsh-external/sandbox-nono · v0.0.2

WATCHDSH·PLUGIN·HUB

nono (Landlock/Seatbelt) backend for the DeepSeek Harness sandbox seam with a vendored fail-closed executor

SYM 16Sandboxing & permission control
dsh plugin --profile web add github:dsh-external/sandbox-nono

Restart dsh after installing — no change before a restart is expected, not a broken install

AUDIT 2026-09-30

The four checks

Collected 2026-09-30 · refreshed daily
① Permissions Pending manual review · network/exec dependency hints found
Automated hintsDependency hints found: node-pty.
Manual verdictQueued for review — once complete, the confirmed permission scope and review date appear here.
Why permissions are reviewed by hand: there's no reliable way to determine permission scope automatically, so only a human review produces a verdict. If a review is over 60 days old and the repo has changed since, the verdict drops back to Pending automatically.
② Maintenance Updated 50 days ago
last commit 2026-08-11
RuleLast commit ≤ 14 days green · ≤ 45 days amber · older (or archived) red.
③ dsh.bundle dsh.bundle declared — activates properly
Why this mattersPer the official docs, a package without a dsh.bundle declaration installs as a plain dependency and activates no layer — the most common reason a plugin "does nothing" after install.
④ Tests / CI Tests, no CI
TestsTest script or test directory found.
CINo CI workflows found.

Audit history

2026-09-30 · Latest audit (verdict: Watch); compatibility tracking updates with each daily run
See its scenario prescription → Spot an error? Send feedback Audit methodology