Technology Radar
nono.sh is an open-source security shell and lightweight sandbox designed to run AI agents without the overhead of traditional virtual machines or Docker containers. It addresses a common gap: although sandboxing is widely recommended, setup overhead can discourage teams from implementing it. nono.sh isolates agent processes directly at the OS level using native kernel features such as Landlock on Linux and Seatbelt on macOS. It operates in-process as native host processes without background daemons, blocking access to sensitive host assets, such as SSH keys, by default.
We think nono.sh is worth assessing because it lowers the barrier to process isolation. Its minimal design makes it straightforward to configure, test and integrate into existing workflows across macOS, Linux and Windows through WSL2. Security profiles can be tweaked, forked and shared across teams or the broader community through the nono registry, providing a low-overhead layer of defense for developers adopting autonomous tools such as Claude Code or OpenAI Codex.
