* [NVIDIA NemoClaw v0.0.129](https://github.com/NVIDIA/NemoClaw) – Reference stack simplifying secure, always-on OpenClaw assistant execution on the NVIDIA OpenShell runtime.

* [Go-Landlock v0.10.1](https://github.com/landlock-lsm/go-landlock) – Go library exposing Linux Landlock sandboxing to restrict process file, network, and some IPC access.

* [Brig channel-main-0.3.1-0...](https://github.com/brig-sh/brig) – MicroVM-based sandbox runner for coding agents, combining a Go CLI and session daemon to isolate unattended agent work on a local machine.