Nono is a Rust-based sandbox for running AI agents with zero setup and policy-based isolation. It emphasizes least-privilege sandboxes, tool delegation, and cross-platform support.
Collecting history — the radar snapshots this repo daily. The trend line appears after 3 days of data (1 so far).
What it is
Nono is described as a sandbox for running AI agents in seconds with zero setup and zero latency. It supports macOS, Linux, and Windows (WSL2) and enforces least-privilege sandboxes for agents and delegated tools. The project includes Rust bindings and bindings for Python, TypeScript, and Go, with multiple related tools and profiles available in a registry.
How it works
Nono allows agents to be executed within a sandbox that isolates filesystem access and network usage. Profiles define filesystem grants, network allowlists, and tool rules. When an agent calls tools (e.g., git, gh, curl), those tools run in separate, constrained child sandboxes with their own policies and credentials, preventing broad access from propagating to the tool.
Getting started
Quickstart sections show install methods:
- curl: ```bash
curl -fsSL https://nono.sh/install.sh | sh
- macOS / Linux (Homebrew): ```bash
brew install nono
Then run an agent by searching the registry and invoking it with a profile:
$nono search opencode
nolabs-ai/opencode - Official Opencode Plugin
$nono run --profile nolabs-ai/opencode -- opencode
To customize, use profile init and extend from a base profile:
nono profile init opencode --extends nolabs-ai/opencode
nono run --profile opencode -- opencode
Recent releases
Latest releases listed with changes:
- v0.71.0 (2026-07-31): includes JSON output improvements for Unix socket grants and non-UTF-8 command line args support.
- v0.70.0 (2026-07-29): sandbox fix to allow exec in writable grant-dirs under command policies; docs/profile codeblock fixes.
- v0.69.0 (2026-07-20): same sandbox fix as v0.70.0; docs/profile codeblock fixes.
- v0.68.0 (2026-07-14): dependency bumps for docker actions.
- v0.67.1 (2026-07-06): release script fix and tag.
Traction
Stars: 3452; Forks: 233; Open issues: 132.
Behind the repo
Not applicable here as no linked startup/company is provided in the data.
Caveats
License: Apache-2.0. Created 2026-01-31; last push 2026-08-04. Open issues count is 132. Readiness notes indicate API stabilization toward 1.0 and advised migration of registry namespace from always-further to nolabs-ai.