- Dataset
- 2026-10-27-catalog-ai-v2
- Ruleset
- b2e8889c66f7
- Scanned
- 2026-10-27
- Window
- February–September 15, 2026
agent runtime security - zero trust, zero setup, zero latency agent sandboxing
01Result
nolabs-ai/nono ↗nolabs-ai/nono AI coding statistics: 9.4%
Adoption is broad. Many contributors are committing agent-authored work, which is what a real organisational rollout looks like.
02Drivers
What shapes this result
Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.
Assisted or autonomous
Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.
Agent share by month
| Month | Agent share | Considered commits |
|---|---|---|
| 2026-02 | 2.6% | 116 |
| 2026-03 | 9.4% | 213 |
| 2026-04 | 9.9% | 324 |
| 2026-05 | 14.5% | 227 |
| 2026-06 | 8.1% | 111 |
| 2026-07 | 5.7% | 105 |
| 2026-08 | 12.7% | 71 |
| 2026-09 | 6% | 50 |
Peak month: 14.5%. Bars are scaled to that peak, not to 100%.
Which agents
| Agent | Vendor | Commits | Share |
|---|---|---|---|
| Claude Code | Anthropic | 94 | 7.7% |
| Gemini CLI | 9 | 0.7% | |
| Cursor Agent | Anysphere | 8 | 0.7% |
| GitHub Copilot | GitHub | 6 | 0.5% |
03Evidence
Inspect the matches
Public commit samples let you inspect the signatures behind the aggregate result.
Matched commit samples
d3c6f6b0on GitHubfix(proxy): disable audit buffer for standalone \`nono proxy\` (#1766)Claude Code0c8a9c67on GitHubfix(proxy): honour require_auth on the plain-HTTP forward path (#1673)Claude Codecdf02fc9on GitHubfix(why): fail on unresolvable network policy instead of degrading (#1554)Claude Codeded24756on GitHubUpdate README.md (#1223)Gemini CLI7d274cf7on GitHubfeat: add $PACK_DIR support to session_hooks for store pack support (#1073Gemini CLI54c551ebon GitHubdocs(readme): update agent commands and enhance feature descriptions (#114Gemini CLI05727c51on GitHubfix(proxy): read chunked HTTP request bodies on L7 forward path (#1687)Cursor Agented91527con GitHubfix(cli): honor inline custom credential routes in --config manifests (#17Cursor Agent3c79902eon GitHubfix(cli): warn when a draft profile cannot resolve its extends chain (#170Cursor Agentccdd26d3on GitHubfix(why): tolerate volatile process-relative aliases in --self reload (#18GitHub Copilot1619275con GitHubfeat: add profile-declared no_proxy bypass support (#1415)GitHub Copilot2663e990on GitHubfeat(cli): add standalone `nono proxy` command (#1261)GitHub Copilot
04Method
What entered the denominator
The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.
Exclusion ledger
| Commits in window | 1,746 |
| Merge commits removed | −355 |
| CI / dependency bots removed | −174 |
| Considered | 1,217 |
Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.
Continue exploring
Related coding-agent evidence
Run the same detector locally.
Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.
npx qmmit-cli nolabs-ai/nono