~/reading

14

Issue 14/September 16, 2026/11 tools · 1 headlines

Cloneable control planes and sandboxes that let power users own the agent loop

Today's picks emphasize systems-language runtimes, detachable terminal multiplexers, harness optimizers, and isolation layers a power user can wire into long-running coding loops without renting a closed IDE. Fresh repos and rising infra beat brand recognition.

01 — Power tools

The stack

  1. 01harnessGitHub
    Agent Harness Optimizer↗

    Airbnb

    Benchmark-agnostic framework that evolves system prompts and tool-call middleware via eval feedback using genetic or linear optimizers.

    Use caseUse it to automatically lift pass rates on coding or tool-use benchmarks by editing only the harness surfaces.

    optimizerpythonevalmiddleware
  2. 02toolGitHub
    Atomic Agent↗

    AtomicBot-ai

    Local-first AI agent that runs open-weight models via llama.cpp, drives browser and shell with approvals, and persists memory across sessions.

    Use caseUse it to keep private multi-step agent work entirely on-device with local models and MCP tools.

    local-firstllama.cpptuimemory
  3. 03harnessGitHub
    Atomic↗

    bastani-inc

    Verifiable coding-agent runtime that encodes processes as stages, checks, gates and approval graphs instead of free-form prompts.

    Use caseUse it to define durable engineering loops with explicit checkpoints and subagent delegation for long-horizon tasks.

    typescriptworkflowgatesverifiable
  4. 04harnessGitHub
    agent-swarm↗

    desplega-ai

    Open-source agentic OS that lets a lead agent dispatch goals to isolated worker containers running various coding harnesses with shared memory and review gates.

    Use caseUse it to run Slack- or GitHub-triggered multi-agent fleets with Docker isolation and schema-validated results.

    multi-agentdockerorchestrationos
  5. 05harnessGitHub
    Vercel AI Harness↗

    Vercel

    Experimental HarnessAgent plus harness specification with network session sandbox interface for bridge-backed coding agents.

    Use caseUse it to wire Claude Code style harnesses into Vercel sandboxes with streaming and tool execution.

    typescriptsandboxsdkexperimental
  6. 06repoGitHub
    Nightona↗

    nightona-co

    Community fork continuing the last open AGPL Daytona release as self-hostable elastic sandbox infrastructure for AI code execution.

    Use caseUse it to keep a fully open sandbox runtime alive after the original project went private.

    sandboxforkself-hostagpl
  7. 07toolGitHub
    GoatCode↗

    Arhan-w

    Single-binary terminal AI agent with 180+ providers, automatic failover mid-session, prompt caching, parallel subagents and rewind.

    Use caseUse it to keep coding sessions alive across quota limits with live provider switching and cost tracking.

    clifailovermulti-providerbinary
  8. 08harnessGitHub
    Beagle↗

    Salesforce AI Research

    Framework to evaluate and evolve agent harnesses at scale with DarwinX as the core evolution algorithm and verifier-backed tasks.

    Use caseUse it to search for harness changes that improve capability while guarding against regressions.

    evolutionevalresearchharness
  9. 09repoGitHub
    Atomic Agents↗

    Eigenwise

    Lightweight modular framework for building agentic pipelines from single-purpose reusable components with clear schemas.

    Use caseUse it to compose predictable LEGO-style agents and tools without heavy framework lock-in.

    pythonmodularatomicpipeline
  10. 10toolGitHub
    Herdr Agent Inbox↗

    douglascorrea

    Plugin that adds session titles, settle triage, workspace rollups and resumable chat history for agents running inside Herdr.

    Use caseUse it to treat agent panes like an inbox you can settle and reopen with native session resume.

    pluginherdrinboxsession
  11. 11repoGitHub
    AI Coding Agent Harness (minimal)↗

    Zelmoghazy

    Minimal Python example that turns a project folder into an isolated Podman sandbox for tool-calling coding agents.

    Use caseUse it to prototype a secure agent loop with network-disabled containers and resource caps.

    pythonpodmanminimalsandbox

02 — In the wild

Articles and releases

  1. articleDenny Sentinel
    When the Agent Can Turn Off Its Own Cage: The DeepSeek Harness Sandbox Escape↗

    Denny Sentinel

    A critical sandbox escape (CVE-2026-82533) let a confined DeepSeek Harness agent disable its own OS sandbox and approval gates via a local API call. The writeup traces the structural failure shared with prior Claude Code and Cursor escapes.

    securitysandboxcvedeepseek

    Read

Get the daily tools digest

RSS