46
Recursive harness optimizers and microVM sandboxes that power users actually wire in
Today's picks center on cloneable harness runtimes, recursive improvement loops around fixed models, and hardware-isolated microVM sandboxes. Power users get control planes, memory fabrics, and eval surfaces they can drop into their own agent loops without vendor lock-in.
01 — Power tools
The stack
- 01harnessGitHuboh-my-hermes↗
rlaope
Packages that layer mixture-of-models routing, long-term project memory, priced cost telemetry, and native TUI surfaces onto Hermes Agent for coding and team workflows.
Use caseUse it to upgrade a Hermes base with subagent teams, memory packs, and live cost HUD without forking the core agent.
harnessmemoryskillstui - 02toolGitHubQwenPaw↗
agentscope-ai
Personal AI assistant runtime with multi-chat-app support, extensible skills, MCP, and self-hosted or cloud deploy options.
Use caseUse it to deploy a personal super-agent that lives in chat apps and grows capabilities via skills.
toolpersonal-agentskillsmcp - 03harnessGitHubnexent↗
ModelEngine-Group
Zero-code platform that auto-generates production-grade agents using harness engineering principles with unified tools, skills, memory, and control planes.
Use caseUse it to generate constrained agent systems with feedback loops and built-in orchestration without writing the loop from scratch.
harnesszero-codecontrol-plane - 04harnessGitHubSandBase Harness↗
sandbaseai
Local-first TypeScript runtime with persistent sessions, sandboxed tools, MCP, memory, credentials, audit logs, and replay.
Use caseUse it to own a self-hosted agent runtime with full audit and replay for long sessions.
harnesslocal-firstauditmcp
02 — In the wild
Articles and releases
- releaseDevOps.comChainguard launches Workspaces for security-first agent isolation↗
Joab Jackson
Chainguard released Workspaces in beta, placing agents in hardware-isolated ephemeral microVMs built from zero-CVE Chainguard OS packages. The platform maps agents to repositories and toolchains while using Chainguard Checks for CI-style verification of generated code.
releasesandboxsecuritymicrovmShipped