AI Agents
agent-governance-toolkit
Policy, identity, and sandboxing guardrails for AI agents.
★ 6.4k starsMIT
View guide →nono: zero-trust, zero-setup, zero-latency sandboxing and runtime security for AI agents
nono is an open-source ai agents project by nolabs-ai (nolabs-ai/nono on GitHub). It has 4,396 GitHub stars and 298 forks, is released under the Apache-2.0 license, and was last updated on GitHub on 5 October 2026.
Read the documentation's overview of what the sandbox restricts for agent processes.
Clone the repository (or follow the install path in the docs) for your platform.
Set up the zero-config defaults or adjust policies for your agent's needs.
Launch your agent under nono and verify its allowed actions work while restricted ones are blocked.
Runs AI agents in a restricted runtime environment by default.
Designed to protect agents without lengthy policy authoring up front.
Focuses on securing Model Context Protocol tool usage, a common agent attack surface.
Built by the team behind Sigstore, with supply-chain integrity in scope.
A native Rust codebase aimed at low-latency enforcement ('zero-latency' per the project).
Full documentation is published at docs.nono.sh (the repo README itself is minimal).
Clone the project and enter its directory.
git clone https://github.com/nolabs-ai/nono.git
cd nonoThe README at HEAD is a short header; installation commands live in the official documentation.
# see docs.nono.sh for the exact install commandLaunch your agent under nono per the docs and confirm restricted actions are blocked.
# see docs.nono.sh for the exact run commandnolabs-ai — described in the README as the team behind Sigstore.
Yes, it is Apache-2.0-licensed open source.
No — nono is a local runtime/security tool; it does not call model APIs itself.
Containers and VMs isolate at the machine level with more setup; nono positions itself as a zero-setup, agent-focused sandbox layer with MCP and supply-chain concerns built in.
See the quickstart at docs.nono.sh — the GitHub README is currently just a header pointing there.
Policy, identity, and sandboxing guardrails for AI agents.
Sync your AI coding setup: skills, agents, rules, MCP, hooks, everywhere.
The open runtime for AI agents — a Rust platform for running, governing and routing agents with TokenOps.
Snyk's security scanner for AI agents, MCP servers and agent skills.
Real-time voice runtime that keeps AI agents talking, working, and present.
Self-hosted AI vulnerability research: agents find, validate, deduplicate, and rank real security issues.
The most-starred other AI Agents projects in the LibreAI catalogue — the realistic shortlist if nono is not the right fit.
A personal AI that really does things — on any OS, with your data staying yours.
An agentic skills framework & software development methodology that works.
Agent harness optimization system with skills, memory and security for Claude Code, Codex and more
The agent that grows with you — a Python framework for adaptive AI agents.
DeepSeek's plugin-based agent harness where everything is a plugin.
Free and open — grab the source, star the repo, and start creating.