Nono is a new lightweight sandboxing tool that takes advantages of native Linux and macOS kernel-level isolation controls to wrap Claude Code and other agentic coding harnesses (or any process) and prevent them from deleting your home directory or dropping your database.