24
Hardware-isolated sandboxes and native harnesses power users can own
Today's digest surfaces self-hostable microVMs, Rust runtimes, and Kubernetes primitives that let power users wire isolation and control planes into their agent loops without renting a closed IDE. Fresh clone-and-run repos emphasize local-first execution, secrets that stay off-guest, and evidence gates.
01 — Power tools
The stack
- 01harnessGitHubUnreal Agent↗
unreallabsai
Async-first agent harness focused on non-blocking loops and concurrent tool execution for high-throughput agent systems.
Use caseUse it to build agents that schedule many concurrent tool calls without blocking the main reasoning turn.
asyncharnessconcurrency - 02toolGitHubHarness.apk↗
nev3rfail
On-device Android agent harness that runs the full loop locally with phone sensors, Maps, browser debugging, and widgets.
Use caseUse it to keep an always-on agent in your pocket that can act on photos, maps, and local apps without a remote host.
androidon-devicemobilelocal - 03harnessGitHub / productCanary verification↗
runcanary
Independent verification harness that takes agent changesets, spawns swarms in sandboxes, and returns evidence of failures.
Use caseUse it to pressure-test coding-agent patches with runtime scenarios before you accept the claim of done.
verificationswarmsandboxevidence
02 — In the wild
Articles and releases
- articleForkastGoogle AX climbs HN as substrate for agent lifecycles↗
Blair Hayes
Google's open agentic orchestrator topped Hacker News by offering a kubectl-shaped control plane over gVisor sandboxes and Actor Teleport snapshots. The piece argues the real story is the harness-agnostic substrate underneath rather than yet another framework.
googleorchestrationhnsandboxRead
- releaseHacker News / DockerDocker ships cloud sandboxes for agentic workloads↗
Docker
Docker released cloud sandboxes that isolate agent code with secret injection via an external network proxy so credentials never enter the guest. Discussion highlights how the proxy model improves on traditional shared-kernel containers for agent safety.
dockersandboxsecretsreleaseShipped
- articleGoogle Cloud BlogAgent Factory recap: harnesses, shifting left, autonomous coding↗
Mollie Pettit
Google Cloud recaps the Agent Factory sessions defining an agent as model plus harness and showing why better stacks beat smarter models alone. It ties harness engineering to shifting left on verification and parallel coding agents.
google-cloudharnessautonomousrecapRead