nono is a security-focused agent runtime written in Rust that brokers access to system resources for AI agents. It uses kernel primitives to enforce explicit, composable, and auditable policies controlling access to files, network destinations, sockets, environment variables, credentials, and operations. The system creates a narrowly scoped operating context for agent processes with zero setup and minimal latency.