16
Sandbox-native harnesses and embeddable runtimes that own the loop
Today's picks cluster around isolation primitives, process-local agent OSes, and batteries-included harness libraries you can clone and wire yourself. Power users get Kubernetes CRDs, KVM sessions, WASM VMs, and memory graphs instead of another closed terminal chatbot.
01 — Power tools
The stack
- 01harnessGitHubAgentnetes↗
SuperagenticAI
Self-organizing multi-agent swarm that invents specialist roles and runs them in isolated sandboxes against a git repo.
Use caseUse it to turn a natural-language goal into parallel scout, engineer, and tester agents with emergent roles.
multi-agentsandboxorchestrationnpx - 02toolGitHubForcefield↗
fabledruns
Lightweight local-first Go agent harness as a single binary with tools, skills, sessions, memory, and permissions.
Use caseUse it to run specialized local coding agents with fast startup and no account or telemetry requirement.
golocal-firstcliharness - 03toolGitHubMem0↗
Mem0
Drop-in multi-level memory layer that extracts facts and retrieves them for agents and apps across sessions.
Use caseUse it to bolt persistent user, session, and agent memory onto any coding or assistant harness.
memoryfactssdkproduction - 04harnessGitHubLetta↗
Letta
Stateful agent runtime in the MemGPT lineage where agents edit their own long-term memory with tools.
Use caseUse it to run agents that manage hierarchical memory as first-class OS-style state rather than prompt stuffing.
memoryruntimestatefulmemgpt - 05toolGitHubApprentice↗
skarnati20
Slim extensible coding harness written in Common Lisp for REPL-native loops, macros, and custom tools.
Use caseUse it to experiment with macro-defined agent loops inside SBCL instead of a heavy TUI product.
common-lispreplminimalexperimental
02 — In the wild
Articles and releases
- releaseGitHub ReleasesCrush ships Plan Mode and non-interactive reasoning controls↗
Charmbracelet
Crush adds Plan Mode activated with shift-tab for collaborative planning before execution, plus performance work and headless reasoning-effort flags. Power users get subscription-backed ChatGPT paths and tighter non-interactive orchestration without leaving the terminal harness.
crushreleaseplan-modecliShipped
- articleAdversa AIWhat is an agent harness and how do you secure one↗
Sergey Malenkovich
The essay defines the harness as the loop, tool dispatch, memory, approvals, and sandbox around the model, arguing most real exploits land in that layer. It maps CLI, IDE, and assistant harness types and frames security as governance of scaffolding rather than model breakage.
securitydefinitionessayharnessRead