What happened
nolabs (founded by Sigstore creator Luke Hinds and Stephen Parkinson) launched July 21, 2026 with 'nono,' an open-source runtime providing kernel-enforced (Linux Landlock / macOS Seatbelt) sandboxing for AI agents, MCP servers, and LLM workloads, plus new 'Agent Tool Sandboxing' that scopes credentials/file/network access per-tool-call rather than per-session. The project already has 3,000+ GitHub stars and adoption/endorsements from Datadog and Control Plane.
Why it matters
Addresses the 'ambient authority' problem in agentic AI deployments (agents inheriting full local/user privileges) with OS-kernel-level enforcement that can't be bypassed by prompt injection or agent misbehavior, directly relevant to the sandbox-escape incidents (OpenAI/Hugging Face, ServiceNow) surfacing this same week.
Applicability
Security and platform engineering teams running local or self-hosted AI coding agents (OpenClaw, Claude Code, etc.) should evaluate now given free OSS availability and growing enterprise adoption.