Commit

nono is written in rust (github.com/nolabs-ai/nononolabs-ai/nono). it isn't a container though. it sandboxes the agent process with kernel features (landlock on linux, seatbelt on macos), and once the sandbox is on, the agent can't lift it short of a kernel exploit. i haven't used it myself, but the founder gave me a demo at oss summit europe in prague earlier this month. two things stuck with me: that kernel enforcement, and the dashboard in their enterprise version (not out yet), which shows every decision each agent makes and the policy that allowed it.