Articles tagged #sandboxing
7 articles
Why Containers Aren't Enough for AI Agents in Kubernetes
How Kubefence stacks Kata Containers, Seccomp, and Nono to sandbox AI workloads in Kubernetes
Running an AI agent overnight on medical text
Running Karpathy's autoresearch overnight on medical text under nono — kernel-enforced filesystem and network limits inherited by every training subprocess.
nono Now Runs on Windows: Kernel-Enforced Sandboxing via WSL2
nono v0.26.0 brings kernel-enforced sandboxing to Windows via WSL2. Landlock isolation, network filtering, credential injection, and undo — all working on Windows.
Wrapping a Simple GitHub Bot with nono: Kernel-Enforced Security for LLM Agents
How to wrap an LLM-powered GitHub bot with nono's kernel-enforced sandbox — filesystem isolation, network allowlists, credential injection, and trust verification.
Nono vs OpenShell: A Technical Comparison of AI Agent Sandboxes
A deep dive into the architectural differences between Nono and NVIDIA's OpenShell, two leading sandboxing solutions for untrusted AI agents.
How to Build nono Sandbox Profiles for AI Agents
Learn how to use nono learn, policy, and profile commands to build production-ready sandbox profiles for AI agents like Claude Code.
How to sandbox Claude Code with nono
Learn how to sandbox Claude Code with nono's kernel-level isolation. Enforce default-deny filesystem access with Landlock and Seatbelt in 30 seconds.