Younes: “run the agents in a sandbox with kernel-level control : http…”

Julien Bianchi @jubianchi1hfa01c46

Some thoughts raised in my mind this morning, let me tell you. We embed AI models in our applications and give them tools to call. Being careful with these tool is what makes the AI kind of sandboxed. But now, models are smart enough to search for vulns, they may try to run…

Younes @younes-io1h

run the agents in a sandbox with kernel-level control : https://github.com/nolabs-ai/nono

GitHubGitHub - nolabs-ai/nono: agent runtime security - zero trust, zero setup, zero latency agent sandboxingagent runtime security - zero trust, zero setup, zero latency agent sandboxing - nolabs-ai/nono

07:43 · Oct 27, 2026commit 762afe1

Julien Bianchi @jubianchi1h

Thanks, did not know about this project, will look. Reading the readme I don’t really see how I would implement this with an AI embeded in my app (whatever the app: web, native, …). Looks great for local agent though

Commit