nolabs-ai/nono

Health v2 · maintenance only

Adoption not part of the score

3830 stars · 252 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

nono is a Rust-based CLI and SDK that runs AI coding agents and their tool invocations in ephemeral, kernel-enforced micro sandboxes with capability-based least-privilege isolation. It brokers tool execution with argv policy, phantom credentials injected at a proxy boundary, human approval routing, and a hash-chained cryptographic audit trail, with no daemon, container, or VM required.

Use cases

• sandbox claude code or codex agent tool calls
• run AI agents without exposing real credentials
• enforce least-privilege file and network access for agent commands
• audit what tools an AI agent executed
• require human approval for risky agent actions
• sandbox MCP and LLM workloads
• verify and pin agent tool executables with sigstore

When to choose

• you run AI coding agents and want kernel-level isolation without containers or VMs
• you need credentials kept out of agent child processes
• you want auditable, policy-driven tool execution with human-in-the-loop approval
• you want zero-setup sandboxing on macOS, Linux, or Windows (WSL2)

When to avoid

• you need full VM or container-level isolation for untrusted workloads
• you need a GUI or non-CLI workflow
• you need Windows outside WSL2
• you require a fully frozen 1.0 API before pre-1.0 changes

Facets

cli-tool · maturity active

security cli developer-tools cryptography secrets-management mcp security developer-tools large-language-models windows rust cli cross-platform agent-sandbox zero-trust supply-chain-security sigstore capability-based-security landlock seatbelt llm-security tool-execution audit-chain phantom-credentials sandbox ai-agents command-line macos linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nolabs-ai/nono")