protip if you're using ilar with nono to sandbox your LLM use:

write a shell script in the project to launch it and give ilar permission to update itself. this doens't defeat the purpose of a sandbox at all