$git clone https://github.com/nolabs-ai/nono--- </div>
| 1 | <div align="center"> |
| 2 | |
| 3 | <img src="assets/logo.gif" alt="nono logo" width="600"/> |
| 4 | |
| 5 | <p> |
| 6 | Built by the team that brought you |
| 7 | <a href="https://sigstore.dev"><strong>Sigstore</strong></a> |
| 8 | <br/> |
| 9 | <sub>The standard for secure software attestation, used by PyPI, npm, brew, and Maven Central</sub> |
| 10 | </p> |
| 11 | <p> |
| 12 | <a href="https://opensource.org/licenses/Apache-2.0"><img src="https://img.shields.io/badge/License-Apache%202.0-blue.svg" alt="License"/></a> |
| 13 | <a href="https://github.com/nolabs-ai/nono/actions/workflows/ci.yml"><img src="https://github.com/nolabs-ai/nono/actions/workflows/ci.yml/badge.svg" alt="CI Status"/></a> |
| 14 | <a href="https://www.bestpractices.dev/projects/13332"><img src="https://www.bestpractices.dev/projects/13332/badge" alt="OpenSSF Best Practices"/></a> |
| 15 | <a href="https://docs.nono.sh"><img src="https://img.shields.io/badge/Docs-docs.nono.sh-green.svg" alt="Documentation"/></a> |
| 16 | </p> |
| 17 | <p> |
| 18 | <a href="https://discord.gg/G6qDa7cC7x"> |
| 19 | <img src="https://img.shields.io/badge/Chat-Join%20Discord-7289da?style=for-the-badge&logo=discord&logoColor=white" alt="Join Discord"/> |
| 20 | </a> |
| 21 | <a href="https://nolabs.ai/careers"> |
| 22 | <img src="https://img.shields.io/badge/We're_Hiring-Join_the_team-ff4f00?style=for-the-badge&logo=githubsponsors&logoColor=white" alt="We're hiring"/> |
| 23 | </a> |
| 24 | <a href="https://github.com/marketplace/actions/agent-sign"> |
| 25 | <img src="https://img.shields.io/badge/Secure_Action-agent--sign-2088FF?style=for-the-badge&logo=github-actions&logoColor=white" alt="agent-sign GitHub Action"/> |
| 26 | </a> |
| 27 | </p> |
| 28 | |
| 29 | --- |
| 30 | </div> |
| 31 | |
| 32 | > [!NOTE] |
| 33 | > In the lead-up to a 1.0 release, APIs are stabilizing. API changes may still occur where necessary, but will be kept to a minimum. |
| 34 | |
| 35 | > [!IMPORTANT] |
| 36 | > **Organization migration:** The official nono registry namespace has moved from `always-further` to `nolabs-ai`. Update any references in your scripts, profiles, and CI. |
| 37 | > If you already have a pack installed under the old namespace, remove it first before pulling from the new one: |
| 38 | > ```bash |
| 39 | > nono remove always-further/claude |
| 40 | > nono pull nolabs-ai/claude |
| 41 | > ``` |
| 42 | > The old namespace will be retired — migrate now. |
| 43 | |
| 44 | **Run AI agents in a zero latency sandbox in seconds and with zero setup** — *Claude Code, Codex, Pi, CoPilot, Hermes, OpenCode, OpenClaw* and more — nono gets you up and running within seconds, with no daemon, no container, no VM, and no disk space usage. Out of the box, nono enforces a least-privilege sandbox and supports macOS, Linux, and Windows (WSL2). |
| 45 | |
| 46 | From here **fork the config**, tweak it, theme it, make it your own, and share it with your team or the community via the [nono registry](https://registry.nono.sh). |
| 47 | |
| 48 | **Want to operationalise and run at scale or within your team?** Engineers at some of the largest tech companies in the world use nono as part of their workflows or to run AI agents in production. |
| 49 | |
| 50 | **Copied by many** — nono pioneered the zero-latency, zero-setup agent sandbox, and continues to innovate and lead the way in agent sandboxing. |
| 51 | |
| 52 | --- |
| 53 | |
| 54 | ## Quickstart |
| 55 | |
| 56 | #### curl |
| 57 | |
| 58 | ```bash |
| 59 | curl -fsSL https://nono.sh/install.sh | sh |
| 60 | ``` |
| 61 | |
| 62 | #### macOS / Linux (Homebrew) |
| 63 | ```bash |
| 64 | brew install nono |
| 65 | ``` |
| 66 | |
| 67 | **Other platforms** — Debian/Ubuntu, Fedora, Arch, RHEL, openSUSE, WSL2, and Nix: [see install instructions](https://nono.sh/docs/cli/getting_started/installation). |
| 68 | |
| 69 | ## Run it! |
| 70 | |
| 71 | Search for an agent in the registry, then run it: |
| 72 | |
| 73 | ```bash |
| 74 | $ nono search opencode |
| 75 | nolabs-ai/opencode - Official Opencode Plugin |
| 76 | |
| 77 | $ nono run --profile nolabs-ai/opencode -- opencode |
| 78 | ``` |
| 79 | |
| 80 | That's it. `opencode` now runs with read/write access to the current directory and **nothing else** — your SSH keys, your cloud credentials, the rest of your disk are invisible to it. |
| 81 | |
| 82 | Profiles for all the popular agents live at [registry.nono.sh](https://registry.nono.sh), secured and ready to pull. Each one bundles the right filesystem scope, network allowlist, hooks, skills and more. |
| 83 | |
| 84 | ## Make it your own! |
| 85 | |
| 86 | Outgrow the defaults? Scaffold a profile and tweak it — same command |