nono-py's policy JSON accepts unknown security fields

Summary nono-py policy handling could fail open in two ways. First, resolving a policy-derived ProxyConfig did not automatically enforce CapabilitySet.proxyonly, allowing sandboxed children to bypass a resolved domain allowlist by using direct network access. Second, policy JSON accepted unknown...

PT-2026-56093

Summary On Linux kernels that do not support Landlock network rules, nono py.sandboxed exec could run CapabilitySet.proxy onlyproxy without supervising the seccomp-notify proxy-only fallback returned by the Rust core. In that configuration, a sandboxed child process could remove HTTP PROXY / HTTP...