> ## Documentation Index
> Fetch the complete documentation index at: https://nono.sh/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Core Library

> The nono Rust library providing capability-based sandboxing primitives

The `nono` crate is the foundational Rust library that provides:

* **CapabilitySet** - Builder for defining filesystem and network capabilities
* **Sandbox** - OS-level sandbox enforcement via Landlock (Linux) and Seatbelt (macOS)
* **FFI bindings** - C FFI - for other language integrations (e.g., plain C, Go via cgo, etc.)

## API Documentation

For detailed API documentation, see [docs.rs/nono](https://docs.rs/nono).

## Using the Library

```rust theme={null}
use nono::{CapabilitySet, AccessMode, Sandbox};

let mut caps = CapabilitySet::new();
caps.allow_path("./data", AccessMode::Read)?;
caps.block_network();

Sandbox::apply(&caps)?;
// Process is now sandboxed
```

## Building from Source

```bash theme={null}
git clone https://github.com/always-further/nono
cd nono
cargo build --release
```

See the [Development Guide](/cli/development/index) for more details.