nono

nono is an agent runtime security tool built on kernel-enforced sandboxing. It runs each tool in its own ephemeral sandbox with explicit file, network, environment and credential permissions, keeps API keys outside the agent's sandbox through proxy-based injection, filters network access by domain and API rule, verifies skills and instruction files with Sigstore, and keeps a tamper-evident audit log with file rollback. It is a single unprivileged binary for macOS, Linux and WSL2 and works with Claude Code, Codex, OpenClaw, Hermes and custom agents.