agent-governance-toolkit
Policy, identity, and sandboxing guardrails for AI agents.
nono — проект с открытым исходным кодом из категории «ИИ-агенты» от nolabs-ai (nolabs-ai/nono на GitHub). У него 4 396 звёзд на GitHub и 298 форков, он распространяется по лицензии Apache-2.0 и последний раз обновлялся на GitHub 5 октября 2026.
nono: zero-trust, zero-setup, zero-latency sandboxing and runtime security for AI agents
Read the documentation's overview of what the sandbox restricts for agent processes.
Clone the repository (or follow the install path in the docs) for your platform.
Set up the zero-config defaults or adjust policies for your agent's needs.
Launch your agent under nono and verify its allowed actions work while restricted ones are blocked.
Runs AI agents in a restricted runtime environment by default.
Designed to protect agents without lengthy policy authoring up front.
Focuses on securing Model Context Protocol tool usage, a common agent attack surface.
Built by the team behind Sigstore, with supply-chain integrity in scope.
A native Rust codebase aimed at low-latency enforcement ('zero-latency' per the project).
Full documentation is published at docs.nono.sh (the repo README itself is minimal).
Clone the project and enter its directory.
git clone https://github.com/nolabs-ai/nono.git
cd nonoThe README at HEAD is a short header; installation commands live in the official documentation.
# see docs.nono.sh for the exact install commandLaunch your agent under nono per the docs and confirm restricted actions are blocked.
# see docs.nono.sh for the exact run commandnolabs-ai — described in the README as the team behind Sigstore.
Yes, it is Apache-2.0-licensed open source.
No — nono is a local runtime/security tool; it does not call model APIs itself.
Containers and VMs isolate at the machine level with more setup; nono positions itself as a zero-setup, agent-focused sandbox layer with MCP and supply-chain concerns built in.
See the quickstart at docs.nono.sh — the GitHub README is currently just a header pointing there.
Policy, identity, and sandboxing guardrails for AI agents.
Sync your AI coding setup: skills, agents, rules, MCP, hooks, everywhere.
The open runtime for AI agents — a Rust platform for running, governing and routing agents with TokenOps.
Snyk's security scanner for AI agents, MCP servers and agent skills.
Real-time voice runtime that keeps AI agents talking, working, and present.
Self-hosted AI vulnerability research: agents find, validate, deduplicate, and rank real security issues.
Другие проекты из категории «ИИ-агенты» с наибольшим числом звёзд в каталоге LibreAI — реалистичный список альтернатив, если nono вам не подходит.
A personal AI that really does things — on any OS, with your data staying yours.
An agentic skills framework & software development methodology that works.
Agent harness optimization system with skills, memory and security for Claude Code, Codex and more
The agent that grows with you — a Python framework for adaptive AI agents.
DeepSeek's plugin-based agent harness where everything is a plugin.
Соседние проекты из категории «ИИ-агенты» в каталоге, ближайшие по числу звёзд к nono — продолжайте изучать полку по обе стороны от него.
The Ruby-native AI framework. Chats, agents, tools, images, audio, and video through one consistent API, in plain Ruby or Rails.
Archestra: the enterprise AI platform — chat UI, LLM gateway, and MCP gateway with guardrails
Memory-LanceDB-Pro gives OpenClaw agents hybrid search, smart extraction, and intelligent forgetting
Monid — OpenRouter for agent tools: one base URL and one key give an agent 2,000+ tools across 72+ providers
Agent framework for the JVM. Pronounced Em-BAY-bel /ɛmˈbeɪbəl/
ArcBox: a fast macOS-native container and VM runtime — a drop-in Docker engine with agent sandboxes
Бесплатно и открыто — забирайте исходный код, ставьте звезду репозиторию и начинайте создавать.