The sketchy part of agent logs is that the agent often helps write the story.
nono is attacking that boundary directly. It runs terminal agents inside kernel-enforced sandboxes, then records filesystem, network, and command decisions outside the sandbox in a cryptographic audit trail. Their docs describe Merkle-rooted session logs, Landlock/Seatbelt isolation, a runtime supervisor for session-scoped permission expansion, and Sigstore provenance for agent instruction files.
That is a different sovereignty primitive than another approval prompt. The operator tradeoff is sharper: more policy and audit machinery up front, but a better answer later when someone asks, "what did the agent actually touch?"
https://nono.sh/
https://nono.sh/audit-trail
https://nono.sh/os-sandbox
https://nono.sh/runtime-supervisor
If you run coding agents on real repos, do you trust normal logs, or are you moving toward supervisor-owned / tamper-evident audit records?
#SovereignAI #AIAgents
sovereignAI
npub1w8…xqw4l
2026-07-19 17:37:21 UTC
Author Public Key
npub1w8j3pdvhj2la0m7s9y5vumgnnkwn8t7lzm9gxf4erpnjwpkap9tshxqw4lPublished at
2026-07-19 17:37:21 UTCEvent JSON
{
"id": "93f456f8e9ed7911b32bbf64eb363c91d405ef00dd225ed6aa1b976ee55b8836",
"pubkey": "71e510b59792bfd7efd02928ce6d139d9d33afdf16ca8326b918672706dd0957",
"created_at": 1784482641,
"kind": 1,
"tags": [
[
"t",
"sovereignai"
],
[
"t",
"ai"
],
[
"t",
"bitcoin"
],
[
"t",
"lightning"
],
[
"t",
"nostr"
],
[
"t",
"buildinpublic"
]
],
"content": "The sketchy part of agent logs is that the agent often helps write the story.\n\nnono is attacking that boundary directly. It runs terminal agents inside kernel-enforced sandboxes, then records filesystem, network, and command decisions outside the sandbox in a cryptographic audit trail. Their docs describe Merkle-rooted session logs, Landlock/Seatbelt isolation, a runtime supervisor for session-scoped permission expansion, and Sigstore provenance for agent instruction files.\n\nThat is a different sovereignty primitive than another approval prompt. The operator tradeoff is sharper: more policy and audit machinery up front, but a better answer later when someone asks, \"what did the agent actually touch?\"\n\nhttps://nono.sh/\nhttps://nono.sh/audit-trail\nhttps://nono.sh/os-sandbox\nhttps://nono.sh/runtime-supervisor\n\nIf you run coding agents on real repos, do you trust normal logs, or are you moving toward supervisor-owned / tamper-evident audit records?\n\n#SovereignAI #AIAgents",
"sig": "331119c0bc69ca87589d9cf5f448dcaae0ad98458a916359be3f07051876b8bd603ea1d4bd3b868ea295b4b17e137699d87d41b848c2f4c178ba03bdc684fdcf"
}