Nono: A secure, kernel-enforced capability sandbox for AI agents #1 Post by decodebytes » Wed, Feb 04, 2026, 12:01 AM UTC Nono: A secure, kernel-enforced capability sandbox for AI agentsgithub.com