https://github.com/always-further/nono

[windsheep@infosec.exchange]

GitHub - always-further/nono: Kernel-enforced agent sandbox. Capability-based isolation with secure key management, atomic rollback, cryptographic immutable audit chain of provenance. Run your agents in a zero-trust environment.

Kernel-enforced agent sandbox. Capability-based isolation with secure key management, atomic rollback, cryptographic immutable audit chain of provenance. Run your agents in a zero-trust environment. - always-further/nono

GitHub (github.com)

This is a good #sandbox for macOS and Linux #agentic workflows.

Sadly I need this for Windows more, because both #gemini and #claude have the habit of producing rm -rf / equivalents with find in #PowerShell.

However, Windows doesn't have the developer community. So it's probably time to drop it. in the enterprise as well.