I’m using Nono in my own coding agent, spawning a new confined process per run of my agent loop. It works fine but I had to use nono wrap because the SDK do not ship the builtin profiles which was a little annoying.