nono

nono is a runtime sandbox designed to safely execute AI agents with fine-grained policy controls and credential isolation. Built by the team behind Sigstore, it provides ephemeral micro sandboxes that enforce least-privilege access, network filtering, and immutable audit trails. Each tool invocation runs in an isolated environment scoped to only the files, network routes, and credentials it needs.

The platform supports multiple AI agents including Claude Code, Codex, Pi, and CoPilot, with installation available via curl or Homebrew for macOS, Linux, and Windows (WSL2). Users can configure policies, share configurations via the nono registry, and scale deployments across teams. Security decisions can route to human approval when actions fall outside defined policies.