Blog

Claude Code runs with your full user permissions. Every file, credential, and command is accessible. nono uses kernel-level sandboxing to enforce default-deny access with no escape hatch — setup takes 30 seconds.

I watched the same pattern play out with software supply chains. Now AI agents run with full user permissions and no boundaries. nono is kernel-level sandboxing that makes unauthorised operations structurally impossible.

Specialized classification models can outperform large general-purpose models at a fraction of the cost.

Exploring the challenges and solutions for ensuring software provenance with AI agents and the new paradigm they introduce.

Dispelling common myths about the security implications of running large language models locally versus in the cloud.

A deep dive into deepfabric dataset generation, and how to train your own 4B model to outperform Claude and Gemini using DeepFabric.