Live data from Hacker News

Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams

github.com

11–20 of 39 posts

Re: Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams

#12
Keeping the real credential out of model context is a meaningful improvement, but the gateway still becomes a confused-deputy boundary. How granular are policies below the endpoint level? An agent allowed to call a CRM API may still be tricked into exporting the wrong customer or changing a field it should only read. I'd be interested in whether policies can constrain method, path, request fields, resource ownership, and response volume, and how those rules are tested against prompt injection.

Re: Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams

#13
In a similar vein, I've been playing with Nemesis8. It provides the same sandbox and network constraint as this repo but adds orchestration and observability. You can control and communicate a fleet of agent containers that persist sessions, configure MCP tooling, and schedule events. That appears to just be the surface, I'm still digging into it. Now that I've experienced this single-pane-of-glass interface, I don't think I'm going back. If this is a trend, I hope it sticks. Check it out: https://github.com/DeepBlueDynamics/nemesis8

Re: Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams

#15

Honest question, how does this project already has over 3,200 stars on GitHub? Their video demo was posted 13 hours ago, and it only has 38 views as of the time of this post. The post on HN is 4 hours ago.

I had the project already starred, I lurk around the sandbox space from time to time, and the project it's a few months old and was already discoverable and in a usable state before today.

Re: Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams

#17

Honest question, how does this project already has over 3,200 stars on GitHub? Their video demo was posted 13 hours ago, and it only has 38 views as of the time of this post. The post on HN is 4 hours ago.

I had the project already starred, I lurk around the sandbox space from time to time, and the project it's a few months old and was already discoverable and in a usable state before today.

Still, over 3,000 stars so quick? It's just weird.
Post reply on HN