Repository Issue Activity (beta)

#1951 Linux: allow default profile to read the man-db config and cache, so `man`, `apropos`, and `whatis` work

#1952 Simplify `run` or add new command so nono uses correct config by default

#1950 Unable to use claude in nono (osx) - says notlogged in

#1948 Failed to load profile due to unexpected "interactive" field

#1831 `allow_domain` endpoint entries shadow `oauth_capture` credential routes (phantom token forwarded, 401)

#1786 --allow-connect-port (and profile connect_port) have no effect with a proxy-mode profile, despite Landlock V6

#1944 unset $SSH_AUTH_SOCK in a local-socket credential blocks every command that declares it

#1946 Command-policy denials are unbounded: a retry loop can flood the audit log

#1943 Tool-sandbox session breaks permanently when the OS prunes a shim from the runtime dir

#1929 Do not offer protected-root denials in post-run profile-save prompts

#1785 Homedir "overlaps protected nono state root"

#1940 Project based profiles

#1939 Long-running sessions break when the OS temp cleaner reaps nono's session-lifetime files

#1930 Harden Actions permissions before enabling automated PR creation

#1923 show `session_hooks` resolution when running `nono profile show`

#1759 Keyring URIs not supported in credential_key profile field

#1933 W3C trace context is dropped at the Tool Sandbox boundary

#1681 TLS interception dies when the proxy CA expires mid-session, with no way to recover without a restart

#1932 (allow|read|write)_file grants negate filesystem.deny without explicit filesystem.bypass_protection

#1724 tool-sandbox: outer exec gate denies top-level shebang/wrapper commands when command_policies is active (exit 127 on NixOS)

#1649 tool-sandbox: ELF dependency resolution fails on Nix/NixOS when a NEEDED library has no RPATH/RUNPATH (e.g. gcc's libgcc_s.so.1 → libc.so.6)

#1927 Website references obsolete parameter

#1926 fix(cli): eliminate Tool Sandbox pre-fork thread race on Linux

#1925 Downstream consumer of `audit-events.ndjson` — is this the surface to build on before 1.0?

#1921 docs: add maintainer operations and security response runbooks