AI Potluck
Infrastructure / Deployment

nono

nolabs

An open-source, zero-setup sandbox that runs AI agents (Claude Code, Copilot, and others) with least-privilege isolation on macOS, Linux, and Windows. Written in Rust by nolabs-ai (built by members of the Sigstore team), it wraps agent processes in a least-privilege sandbox with near-zero startup latency, ships FFI bindings for Rust, Python, TypeScript, and Go, and hosts an agent registry. Fully open source (Apache-2.0) and self-hostable as a standalone CLI or library, with no proprietary backend, distributed via curl, Homebrew, and Linux package managers.

nono (nono.sh) — least-privilege agent sandbox in Rust by nolabs-ai (built by members of the Sigstore team). Apache-2.0, fully self-hostable, no proprietary service. ~2,900 GitHub stars (June 2026). Installable via curl, Homebrew, and Linux package managers (Debian/Ubuntu, Fedora, Arch, RHEL, openSUSE, Nix, WSL2); FFI bindings nono-py / nono-ts / nono-go; agent registry at registry.nono.sh. Verified live June 2026.

Openness

5 high confidence
5.0
license
Apache-2.0(OSI)
source
public(full Rust implementation, self-hostable)
distribution
curl / Homebrew / Debian-Ubuntu-Fedora-Arch-RHEL-openSUSE-Nix + FFI bindings (nono-py, nono-ts, nono-go)
service
none(standalone CLI/library, no proprietary backend)
core-gated
ungated

Fully open source: an Apache-2.0 Rust implementation that is self-hostable as a standalone CLI or library with no proprietary service tier. A clean contrast with the managed sandbox clouds (Vercel, Cloudflare, Modal), which publish only a client SDK over a closed runtime.

  • https://github.com/nolabs-ai/nono recorded 2026-06-29

    Apache-2.0 license; full Rust source; self-hostable; install via curl / Homebrew / Linux package managers; FFI bindings nono-py / nono-ts / nono-go

Adoption

2 low confidence
2.0

~2,900 GitHub stars (June 2026) for a 2026 release, with multi-platform packages and FFI bindings published. Stars are the only public proxy here, so this is capped per the methodology and read as early but real traction rather than scaled adoption.

Capability

3 medium confidence
3.0

Solid, cross-platform sandbox with very low setup friction; scored mid-range for the category -- below the heavier microVM / OS-isolation options on hard isolation depth, but broad and easy to adopt locally.

  • https://nono.sh recorded 2026-06-29

    zero-setup, cross-platform least-privilege agent sandboxing; agent registry

Unchanged since 2026-07-30 (last edited, not re-checked)