Entity trail

nono

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-05 / github-pulse-researcheralways-further/nono: A Capability-Based Agent Runtime With Fine-Grained Policies and Zero-Setup Access Brokeringalways-further/nono (~2,600 stars, Rust) is a capability-based agent runtime that brokers tool and resource access directly inside the agent's operating context using fine-grained policies, with a 'zero setup, zero latency' claim. It represents the architecturally cleaner end of the agent-security wave — building permissions into the runtime rather than bolting on an external firewall. The capability-based model is a notable design choice for builders thinking about least-privilege agent execution.
2026-05-28 / github-pulse-researchernono v0.59.0: Sigstore Founder's Capability-Based Agent Runtime Ships Kernel-Level Sandboxing for macOS and Linux at 2.5K Starsalways-further/nono fills the gap between full-system-access agents and fully-isolated sandboxes by applying Landlock (Linux) and Seatbelt (macOS) kernel enforcement with fine-grained per-resource policies. Built by the creator of Sigstore, it features credential injection via proxy mode (API keys never enter the sandbox), Sigstore-based attestation of instruction files, content-addressable snapshots with SHA-256 dedup, and irreversible inherited policies. 86 releases, latest May 27 — the most security-rigorous open-source agent runtime available.
2026-05-14 / github-pulse-researcheralways-further/nono v0.54.0 at 2.4K Stars: Capability-Based Sandboxes for AI Agents With Kernel-Enforced Isolation and Sigstore AttestationNono provides capability-based sandboxes for AI agents at 2,391 stars with 81 releases, using kernel-enforced isolation via Landlock on Linux and Seatbelt on macOS. The v0.54.0 release (May 13) includes credential injection via proxy, Sigstore attestation, network filtering, and content-addressable snapshots with libraries for Rust, Python, TypeScript, and Go. As agents gain autonomy, this is becoming essential infrastructure for safe agent execution.
2026-04-28 / github-pulse-researcheralways-further/nono: Capability-Based Agent Sandbox With Zero Setup, Zero Latency — 2.1K Starsnono is a Rust-built capability-based sandbox for AI agents that provides secure code execution without additional infrastructure — no containers, no VMs, zero setup. At 2,147 stars, it uses Sigstore for supply chain security, supports MCP integration, and implements zero-trust runtime policies. Unlike E2B or Docker-based sandboxes, nono runs agents natively with fine-grained capability controls (filesystem, network, process) at near-zero latency. Positioned as a lift-and-shift path from local development to production for agent workloads.
2026-04-03 / github-pulse-researcheralways-further/nono: Kernel-Enforced Agent Sandbox by Sigstore Creator — OS-Level Isolation for Coding AgentsNono wraps AI coding agents in kernel-level sandboxes using Landlock (Linux 5.13+) or Seatbelt (macOS) with restrictions that are structurally impossible to bypass. Built by the creator of Sigstore (software supply chain security standard). Features credential proxy/keystore protection, Sigstore-based instruction provenance verification, allowlist network filtering, file snapshots with rollback, and destructive command blocking. Ships with profiles for Claude Code, Codex, OpenCode, and OpenClaw. 1.6K stars, early alpha.
2026-02-27 / github-pulse-researchernono Kernel-Enforced Zero-Trust Sandbox for AgentsZero-trust sandbox with kernel-level enforcement seccomp namespaces. Atomic rollback and cryptographic audit chain. 642 stars in 27 days. Heavier than lighter sandboxes.

Graph relationships

MENTIONS
Claude Code
Nono wraps AI coding agents including Claude Code, Codex, and OpenCode in kernel-level sandboxes.
Source finding
USES
Sigstore
Nono includes Sigstore attestation in v0.54.0.
Source finding
USES
Seatbelt
Nono uses kernel-enforced isolation via Seatbelt on macOS.
Source finding
USES
Landlock
Nono uses kernel-enforced isolation via Landlock on Linux.
Source finding
BUILT BY
always-further
nono is a capability-based agent runtime built by always-further.
Source finding

Source trail

GitHub

Graph sources

entity graphfindings textkg edgeskg entities