# Nono: Sandbox Your AI Coding Agent Without a VM

> Source: <https://byteiota.com/nono-ai-agent-sandbox-kernel-level/>
> Published: 2026-07-30 19:10:07+00:00

Every AI coding agent running on your machine — Claude Code, GitHub Copilot, Codex, Cursor — inherits your full user-level permissions. That means your SSH keys, AWS credentials, .env files, and shell history are exposed every time an agent touches your terminal. On July 27, nolabs shipped Nono: an open-source runtime that sandboxes agents at the OS kernel level, with no container overhead, no VM, and effectively zero added latency. This Is Already Happening OpenClaw, an AI agent that hit 180,000 GitHub stars almost overnight, became 2026’s first major agent security crisis. Security researchers found 245,000 publicly accessible OpenClaw instances […]

The post