always-further/nono: Capability-Based Agent Sandbox With Zero Setup, Zero Latency — 2.1K Stars

GitHub·low signal

nono is a Rust-built capability-based sandbox for AI agents that provides secure code execution without additional infrastructure — no containers, no VMs, zero setup. At 2,147 stars, it uses Sigstore for supply chain security, supports MCP integration, and implements zero-trust runtime policies. Unlike E2B or Docker-based sandboxes, nono runs agents natively with fine-grained capability controls (filesystem, network, process) at near-zero latency. Positioned as a lift-and-shift path from local development to production for agent workloads.