Julien Bianchi: “Thanks, did not know about this project, will look. Reading…”

Julien Bianchi @jubianchi2hfa01c46

Some thoughts raised in my mind this morning, let me tell you. We embed AI models in our applications and give them tools to call. Being careful with these tool is what makes the AI kind of sandboxed. But now, models are smart enough to search for vulns, they may try to run…

Younes @younes-io2h762afe1

run the agents in a sandbox with kernel-level control : https://github.com/nolabs-ai/nono

GitHubGitHub - nolabs-ai/nono: agent runtime security - zero trust, zero setup, zero latency agent sandboxingagent runtime security - zero trust, zero setup, zero latency agent sandboxing - nolabs-ai/nono

Julien Bianchi @jubianchi2h

Thanks, did not know about this project, will look. Reading the readme I don’t really see how I would implement this with an AI embeded in my app (whatever the app: web, native, …). Looks great for local agent though

07:49 · Oct 27, 2026commit 4205c76

Younes @younes-io1h

i think wrapping the app with nono run and pointing the SDK at nono's proxy should work today.. maybe you can try something like and see: nono run --profile my-app.json -- node server.js

Show thread

Commit