always-further/nono: A Capability-Based Agent Runtime With Fine-Grained Policies and Zero-Setup Access Brokering

GitHub·medium signal

always-further/nono (~2,600 stars, Rust) is a capability-based agent runtime that brokers tool and resource access directly inside the agent's operating context using fine-grained policies, with a 'zero setup, zero latency' claim. It represents the architecturally cleaner end of the agent-security wave — building permissions into the runtime rather than bolting on an external firewall. The capability-based model is a notable design choice for builders thinking about least-privilege agent execution.