# Nono Docs

## Docs

- [Welcome to Nono](https://nono.sh/docs/introduction.md): Secure, kernel-enforced sandbox CLI and SDKs for AI agents, MCP and LLM workloads. Capability-based isolation with secure key management, atomic rollback, cryptographic immutable audit chain of provenance. Run your agents in a zero-trust environment.
- [Quickstart](https://nono.sh/docs/quickstart.md): Get started with nono in 2 minutes
- [Installation](https://nono.sh/docs/cli/getting_started/installation.md): How to install nono on your system
- [Quickstart](https://nono.sh/docs/cli/getting_started/quickstart.md): Learn how to use nono to sandbox commands
- [Agent Setup Guide](https://nono.sh/docs/cli/clients/quickstart.md): Get started using nono with your preferred AI coding agent
- [Developer Workflows](https://nono.sh/docs/cli/usage/developer-workflows.md): Recommended operational patterns for running coding agents safely with nono
- [Examples](https://nono.sh/docs/cli/usage/examples.md): Common usage patterns and recipes for nono
- [Troubleshooting](https://nono.sh/docs/cli/usage/troubleshooting.md): Common issues and solutions when using nono
- [Profiles & Groups](https://nono.sh/docs/cli/features/profiles-groups.md): Pre-configured capability sets and composable security groups
- [Profile Authoring](https://nono.sh/docs/cli/features/profile-authoring.md): Scaffolding, schema validation, and tooling for creating custom profiles
- [Sandboxed Tool Execution](https://nono.sh/docs/cli/features/tool-sandbox.md): Run selected commands in zero-trust ephemeral per-tool sandboxes with brokered chaining
- [Dangerous Command Blocking](https://nono.sh/docs/cli/features/dangerous-command-blocking.md): Block destructive commands with Tool Sandbox command-control policies
- [Profile Introspection](https://nono.sh/docs/cli/features/profile-introspection.md): Inspect, compare, and validate nono profiles and the policy rules they reference
- [Environment Variable Filtering](https://nono.sh/docs/cli/features/environment.md): Restrict which environment variables are passed to sandboxed processes with an explicit allow-list, preventing credential leaks and reducing the attack surface
- [Session Lifecycle](https://nono.sh/docs/cli/features/session-lifecycle.md): Manage live sandbox sessions with ps, attach, detach, stop, inspect, and prune
- [Managing Packs](https://nono.sh/docs/cli/features/managing-packs.md): Install, update, pin, remove, search, and list nono packs
- [Publishing Packs](https://nono.sh/docs/cli/features/package-publishing.md): End-to-end setup for nono packs, trusted publishing, and the GitHub Action
- [Networking](https://nono.sh/docs/cli/features/networking.md): Network access control — proxy modes, domain filtering, credential injection, and localhost IPC
- [Credential Injection](https://nono.sh/docs/cli/features/credential-injection.md): Keep API keys out of the sandbox with proxy-based credential injection or environment variable injection from the system keystore, 1Password, Bitwarden, Apple Passwords, files, or environment variables
- [Sandboxed OAuth Logins](https://nono.sh/docs/cli/features/sandboxed-oauth-logins.md): Let coding agents run OAuth login flows while the sandbox only receives phantom tokens
- [SPIFFE / SPIRE Workload Identity](https://nono.sh/docs/cli/features/spiffe.md): Authenticate outbound requests using SPIFFE SVIDs — no secrets in your profile, no credentials visible to the sandboxed process.
- [Audit Trail](https://nono.sh/docs/cli/features/audit.md): Session tracking, filtering, and compliance reporting
- [Trust & Attestation](https://nono.sh/docs/cli/features/trust.md): Cryptographic verification of files
- [Attestation Internals](https://nono.sh/docs/cli/internals/signing.md): Sigstore-based cryptographic attestation format and verification pipeline
- [Atomic Rollbacks](https://nono.sh/docs/cli/features/atomic-rollbacks.md): Content-addressable filesystem snapshots with integrity verification
- [Resource Limits](https://nono.sh/docs/cli/features/resource-limits.md): Cap a sandboxed process tree's memory and process count with OS-enforced cgroup limits
- [Architecture Overview](https://nono.sh/docs/cli/internals/overview.md): How nono enforces sandboxing at the OS level - threat model, guarantees, and limitations
- [Execution Modes](https://nono.sh/docs/cli/features/execution-modes.md): Supervised and Direct execution strategies
- [Supervisor Mode](https://nono.sh/docs/cli/features/supervisor.md): Runtime services provided by the trusted parent process
- [Security Model](https://nono.sh/docs/cli/internals/security-model.md): Trust boundaries, Landlock + seccomp-notify layering, and the rationale behind nono's supervisor architecture
- [Linux Landlock](https://nono.sh/docs/cli/internals/landlock.md): How nono uses Landlock LSM on Linux for kernel-level enforcement
- [macOS Seatbelt](https://nono.sh/docs/cli/internals/seatbelt.md): How nono uses Apple's Seatbelt sandbox on macOS
- [WSL2 Support](https://nono.sh/docs/cli/internals/wsl2.md): Running nono inside Windows Subsystem for Linux 2 (WSL2) — what works, what's limited, and why
- [WSL2 Feature Matrix](https://nono.sh/docs/cli/internals/wsl2-feature-matrix.md): Complete feature-by-feature compatibility status for nono on WSL2
- [Why OS-Level Controls](https://nono.sh/docs/cli/internals/application.md): Why kernel enforcement beats application-level controls
- [Capability Manifest](https://nono.sh/docs/cli/internals/capability-manifest.md): Schema-first capability manifest for machine-consumable sandbox configuration
- [nono and containers](https://nono.sh/docs/cli/internals/containers.md): How nono and containers complement each other for sandboxing AI agents
- [CLI Reference](https://nono.sh/docs/cli/usage/flags.md): Complete reference for all nono command-line flags
- [Claude Code](https://nono.sh/docs/cli/clients/claude.md): Sandboxing Anthropic Claude Code with nono
- [Codex](https://nono.sh/docs/cli/clients/codex.md): Sandboxing OpenAI Codex CLI with nono
- [OpenCode](https://nono.sh/docs/cli/clients/opencode.md): Sandboxing OpenCode AI coding assistant with nono
- [OpenClaw](https://nono.sh/docs/cli/clients/openclaw.md): Sandboxing OpenClaw AI coding agent with nono
- [Contributing](https://nono.sh/docs/cli/development/index.md): Contributing to nono - testing, debugging, and development workflows
- [Testing](https://nono.sh/docs/cli/development/testing.md): nono integration test suites, running tests, and CI pipeline
- [OAuth Capture Manual QA](https://nono.sh/docs/cli/development/oauth-capture-manual-qa.md): Manual witness checks for declarative OAuth capture providers.
- [Core Library](https://nono.sh/docs/core/overview.md): The nono Rust library providing capability-based sandboxing primitives
- [Go SDK](https://nono.sh/docs/go/overview.md): CGo bindings for applying nono capability sandboxes from Go applications
- [Go Quickstart](https://nono.sh/docs/go/quickstart.md): Install nono-go and apply a least-privilege sandbox
- [CapabilitySet](https://nono.sh/docs/go/api/capability-set.md): Build filesystem, network, command, and platform-specific capabilities
- [QueryContext](https://nono.sh/docs/go/api/query-context.md): Check whether a capability set would allow filesystem or network access
- [SandboxState](https://nono.sh/docs/go/api/sandbox-state.md): Serialize and restore capability sets as JSON
- [Errors](https://nono.sh/docs/go/api/errors.md): Handle nono-go sentinel errors and detailed FFI error messages
- [Bundled Libraries](https://nono.sh/docs/go/bundled-libraries.md): How nono-go tracks bundled native FFI artifacts
- [Node.js SDK](https://nono.sh/docs/typescript/overview.md): Embed OS-enforced sandboxing directly into your Node.js applications
- [Quickstart](https://nono.sh/docs/typescript/quickstart.md): Get started with nono sandboxing in your Node.js application in 5 minutes
- [CapabilitySet](https://nono.sh/docs/typescript/capability-set.md): Build a set of filesystem and network capabilities for the sandbox
- [QueryContext](https://nono.sh/docs/typescript/query-context.md): Test whether operations would be permitted before applying the sandbox
- [SandboxState](https://nono.sh/docs/typescript/sandbox-state.md): Serialize and deserialize sandbox state for process inheritance
- [Functions](https://nono.sh/docs/typescript/functions.md): Module-level functions for applying sandboxes and checking platform support
- [Types](https://nono.sh/docs/typescript/types.md): TypeScript type definitions for the nono SDK
- [Examples](https://nono.sh/docs/typescript/examples.md): Runnable nono-ts scenarios in JavaScript and TypeScript
- [Demonstrator](https://nono.sh/docs/typescript/demonstrator.md): End-to-end sandboxed file transformer demo for nono-ts
- [Python SDK](https://nono.sh/docs/python/overview.md): Capability-based sandboxing for Python applications
- [Installation](https://nono.sh/docs/python/installation.md): Install the nono Python SDK
- [Quickstart](https://nono.sh/docs/python/quickstart.md): Build your first sandboxed Python application
- [CapabilitySet](https://nono.sh/docs/python/api/capability-set.md): Build and manage sandbox permissions
- [AccessMode](https://nono.sh/docs/python/api/access-mode.md): File system access mode enum
- [ProxyConfig](https://nono.sh/docs/python/api/proxy-config.md): Network proxy configuration
- [SnapshotManager](https://nono.sh/docs/python/api/snapshot-manager.md): Filesystem snapshots and rollback
- [QueryContext](https://nono.sh/docs/python/api/query-context.md): Query permissions without applying the sandbox
- [SandboxState](https://nono.sh/docs/python/api/sandbox-state.md): Serialize and restore capability sets
- [FsCapability](https://nono.sh/docs/python/api/fs-capability.md): Filesystem capability details
- [CapabilitySource](https://nono.sh/docs/python/api/capability-source.md): Origin of a capability grant
- [SupportInfo](https://nono.sh/docs/python/api/support-info.md): Platform support information
- [Module Functions](https://nono.sh/docs/python/api/functions.md): Top-level functions in nono_py
- [Examples](https://nono.sh/docs/python/examples.md): Real-world usage patterns for nono-py

## OpenAPI Specs

- [openapi](https://nono.sh/docs/api-reference/openapi.json)