Nono – Kernel-enforced sandboxing for AI agents

Show HN: Nono – Kernel-enforced sandboxing for AI agents

Nono – Kernel-enforced sandboxing for AI agents is a business in show hn launch.

Profile

Hey HNLuke here.I built nono and got it out quick then I expected, in response to the openclaw carnage, but its use is beyond openclaw.The problem: AI agents execute code on your machine. Prompt injections, hallucinations, or compromised tools can read ~/.ssh, exfiltrate credentials, or worse. Application-level sandboxes can be bypassed by the code they're sandboxing.I have been around security for a long old time now (i started something called sigstore a few years back) and have seen this pattern so many times before.The solution pitch: nono uses OS-level isolation that userspace can't escape:Linux: Landlock LSM (kernel 5.13+) macOS: Seatbelt (sandbox_init) After sandbox + exec(), there's

Nono – Kernel-enforced sandboxing for AI agents is positioned in show hn launch, a segment that rewards a clear, focused offering.

Directory data places it at the Show HN launch stage.

Website: nono.sh