always-further/nono v0.54.0 at 2.4K Stars: Capability-Based Sandboxes for AI Agents With Kernel-Enforced Isolation and Sigstore Attestation

GitHub·medium signal

Nono provides capability-based sandboxes for AI agents at 2,391 stars with 81 releases, using kernel-enforced isolation via Landlock on Linux and Seatbelt on macOS. The v0.54.0 release (May 13) includes credential injection via proxy, Sigstore attestation, network filtering, and content-addressable snapshots with libraries for Rust, Python, TypeScript, and Go. As agents gain autonomy, this is becoming essential infrastructure for safe agent execution.