~/reading

16

Issue 16/September 18, 2026/5 tools · 2 headlines

Sandbox-native harnesses and embeddable runtimes that own the loop

Today's picks cluster around isolation primitives, process-local agent OSes, and batteries-included harness libraries you can clone and wire yourself. Power users get Kubernetes CRDs, KVM sessions, WASM VMs, and memory graphs instead of another closed terminal chatbot.

01 — Power tools

The stack

  1. 01harnessGitHub
    Agentnetes↗

    SuperagenticAI

    Self-organizing multi-agent swarm that invents specialist roles and runs them in isolated sandboxes against a git repo.

    Use caseUse it to turn a natural-language goal into parallel scout, engineer, and tester agents with emergent roles.

    multi-agentsandboxorchestrationnpx
  2. 02toolGitHub
    Forcefield↗

    fabledruns

    Lightweight local-first Go agent harness as a single binary with tools, skills, sessions, memory, and permissions.

    Use caseUse it to run specialized local coding agents with fast startup and no account or telemetry requirement.

    golocal-firstcliharness
  3. 03toolGitHub
    Mem0↗

    Mem0

    Drop-in multi-level memory layer that extracts facts and retrieves them for agents and apps across sessions.

    Use caseUse it to bolt persistent user, session, and agent memory onto any coding or assistant harness.

    memoryfactssdkproduction
  4. 04harnessGitHub
    Letta↗

    Letta

    Stateful agent runtime in the MemGPT lineage where agents edit their own long-term memory with tools.

    Use caseUse it to run agents that manage hierarchical memory as first-class OS-style state rather than prompt stuffing.

    memoryruntimestatefulmemgpt
  5. 05toolGitHub
    Apprentice↗

    skarnati20

    Slim extensible coding harness written in Common Lisp for REPL-native loops, macros, and custom tools.

    Use caseUse it to experiment with macro-defined agent loops inside SBCL instead of a heavy TUI product.

    common-lispreplminimalexperimental

02 — In the wild

Articles and releases

  1. releaseGitHub Releases
    Crush ships Plan Mode and non-interactive reasoning controls↗

    Charmbracelet

    Crush adds Plan Mode activated with shift-tab for collaborative planning before execution, plus performance work and headless reasoning-effort flags. Power users get subscription-backed ChatGPT paths and tighter non-interactive orchestration without leaving the terminal harness.

    crushreleaseplan-modecli

    Shipped

  2. articleAdversa AI
    What is an agent harness and how do you secure one↗

    Sergey Malenkovich

    The essay defines the harness as the loop, tool dispatch, memory, approvals, and sandbox around the model, arguing most real exploits land in that layer. It maps CLI, IDE, and assistant harness types and frames security as governance of scaffolding rather than model breakage.

    securitydefinitionessayharness

    Read

Get the daily tools digest

RSS