Archhitecture.

Just say nono.

nono gets pitched at coding agents, so most people meet it as a CLI. The SDKs are often overlooked: they let any application that spawns code it doesn't trust apply a kernel-enforced capability sandbox to itself or a child. The integration shapes, what each costs, and when nono is the wrong tool.