Nono

This platform is a runtime security layer for AI agents. It uses kernel enforced boundaries to limit what a coding agent can reach, with capability based and policy governed controls, network filtering, immutable auditing and atomic rollbacks. It is made by the team behind Sigstore, the software signing project. Its central feature is brokered tool execution. Each tool call an agent makes gets its own ephemeral micro toolbox, scoped to only the files, network routes, arguments and credentials it needs. A supervisor verifies the executable, checks argument policy, and creates a short lived sandbox around the invocation. The sandbox receives a placeholder credential while the real one stays with the supervisor, and a proxy checks HTTP method and path rules before injecting the real credential. Calls outside policy can be routed to a human for approval, and security events are hash chained into a sealed audit record. The sandbox is destroyed when the tool exits. It is aimed at developers and teams who run coding agents against real repositories and accounts and want hard limits on what those agents can do. A package search command finds ready made sandbox profiles, and a run command launches an agent inside one. Installation is by shell script or Homebrew, with packages for Debian, Fedora, Arch and Nix. The site publishes no pricing page and no plan prices.