Power Users/Automators 折腾/讨论/分享各种开源工具/脚本/自动化工作流👥 @zhetengsha_group📌 合集 https://t.me/zhetengsha/2🎁 恰饭 https://t.me/zhetengsha/957📢 广告投放 @xream @xream_botBuy ads: https://telega.io/c/zhetengshafeedId:55438372655431680+userId:62307599601855488http://telegram.zhetengsha.eu.orghttp://telegram.zhetengsha.eu.org/posts/5581http://telegram.zhetengsha.eu.org/posts/5581Fri, 08 May 2026 00:02:22 GMT<div class="image-list-container image-list-odd"> <button type="button" class="image-preview-button image-preview-wrap" popovertarget="modal-5581-0" popovertargetaction="show" aria-label="Open image preview: nono: 面向开发者与 AI Agent 的能力型安全沙箱工具• 基于 Linux Landlock 和 macOS Seatbelt 提供内核级沙箱，权限收敛后可继承到子进程，适合高安全执行场景• 支持 Agent multiplexing、快照回滚、审计日志与策略配置，方便同时运行多个 AI Agent 并保持可观测性• 内置凭证注入、网络过滤与 Sigstore 证明链能力，可直接衔接本地开发、CI、Kubernetes 和云端部署"> <img src="/static/https://cdn5.telesco.pe/file/ZKaZT2KLPlej9lUAGzyk2r0cfXdJUF1vHHEUcGxdO3-Y4K_qWlj8f9uPCJy_SHDX6tl698YaX9jQJUPAEYTQRWmkMZU7qn2rt8Emp6yEyNzhL_bPT5j332ZGw5ZHhPN2HX6xgLAYLlt-hBtTDrCJRKjikMjrfPzjEebg0qOSLSGGOu4Qf72ks0plSXtK2GbSrSRMvC0DLa3z50H0IMGB_6TpRSPw5v7GAWw9QLuW3ax8p7mJkRCG40YegjebBWglnjNppZzl_Sx86EODIkLWz0dXk4mDWSNPUsDCnYn5sN8ScmfBgwi-VJtnOqIxMBmydDJHZh1lRdJr6rUyD3W5NA.jpg" alt="nono: 面向开发者与 AI Agent 的能力型安全沙箱工具• 基于 Linux Landlock 和 macOS Seatbelt 提供内核级沙箱，权限收敛后可继承到子进程，适合高安全执行场景• 支持 Agent multiplexing、快照回滚、审计日志与策略配置，方便同时运行多个 AI Agent 并保持可观测性• 内置凭证注入、网络过滤与 Sigstore 证明链能力，可直接衔接本地开发、CI、Kubernetes 和云端部署" width="800" height="533" loading="eager" /> </button> <div class="modal" id="modal-5581-0" popover="auto" aria-label="Image preview"> <button type="button" class="modal__backdrop" popovertarget="modal-5581-0" popovertargetaction="hide" aria-label="Close image preview"></button> <button type="button" class="modal__close" popovertarget="modal-5581-0" popovertargetaction="hide" aria-label="Close image preview">×</button> <div class="modal__surface"> </div> </div> </div><u>nono: 面向开发者与 AI Agent 的能力型安全沙箱工具</u><br /><br />• 基于 Linux Landlock 和 macOS Seatbelt 提供内核级沙箱，权限收敛后可继承到子进程，适合高安全执行场景<br /><br />• 支持 Agent multiplexing、快照回滚、审计日志与策略配置，方便同时运行多个 AI Agent 并保持可观测性<br /><br />• 内置凭证注入、网络过滤与 <mark class="highlight">Sigstore</mark> 证明链能力，可直接衔接本地开发、CI、Kubernetes 和云端部署<br /><br /><a href="https://github.com/always-further/nono" target="_blank" rel="noopener" title="https://github.com/always-further/nono">https://github.com/always-further/nono</a><br /><br /><img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6327880277607583303.webp" alt="" loading="lazy" width="20" height="20" /> <a href="https://t.me/zhetengsha/2" target="_blank" rel="noopener" title="合集">合集</a> <img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6021860481923288796.webp" alt="" loading="lazy" width="20" height="20" /> <a href="https://t.me/zhetengsha_group" target="_blank" rel="noopener" title="群组">群组</a> <img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6327792445526380187.webp" alt="" loading="lazy" width="20" height="20" /> <a href="https://t.me/zhetengsha/957" target="_blank" rel="noopener" title="恰饭">恰饭</a> <img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6330367862535884142.webp" alt="" loading="lazy" width="20" height="20" /><a href="https://t.me/xream_bot" target="_blank" rel="noopener" title="联系推广">联系推广</a><br /><br /><img class="tg-emoji" src="/static/https://telegram.me/i/emoji/6327836885552991740.webp" alt="" loading="lazy" width="20" height="20" /> <a href="/search/result?q=%23AI" title="#AI">#AI</a> <a href="/search/result?q=%23AI" title="#AI">#AI</a> <a href="/search/result?q=%23Agent" title="#Agent">#Agent</a> <a href="/search/result?q=%23%E5%AE%89%E5%85%A8%E6%B2%99%E7%AE%B1" title="#安全沙箱">#安全沙箱</a> <a href="/search/result?q=%23%E5%BC%80%E5%8F%91%E8%80%85%E5%B7%A5%E5%85%B7" title="#开发者工具">#开发者工具</a> <a href="/search/result?q=%23Rust" title="#Rust">#Rust</a> <a href="/search/result?q=%23GitHub" title="#GitHub">#GitHub</a> <a href="/search/result?q=%23Linux" title="#Linux">#Linux</a> <a href="/search/result?q=%23macOS" title="#macOS">#macOS</a> <a href="/search/result?q=%23Sigstore" title="#Sigstore">#Sigstore</a> <a href="/search/result?q=%23%E4%BA%91%E5%8E%9F%E7%94%9F" title="#云原生">#云原生</a>