Sandbox
12 repos for โ€œagent-harnessโ€ ยท SecurityClear
CodelyTV/
agent-harness

Our agent harness: Skills, plugins, hooks, and utilities to improve the quality of your agent.

261
ruvnet/
metaharness

๐Ÿ› ๏ธ The meta-harness for AI agents โ€” scaffold your own focused, branded agent harness with its own npx CLI, MCP server, memory, learning loop, and witness-signed releases. Works with Claude Code, Codex, pi.dev, Hermes, OpenClaw, and RVM (hardware-isolated sandbox).

645
onecli/onecliHarnesses

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.

3.5k
FailproofAI/
failproofai

Observability and enforcement for AI agent harnesses. Capture every run and runtime reliability with policy enforcement. 40 built-in policies, a local dashboard, no account required with a generous free cloud plan

2.7k
ruvnet/rufloHarnesses

๐ŸŒŠ The original agent meta-harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory, self-learning intelligence, RAG integration, and native Claude Code / Codex / Hermes and many more Integrated

72k
AnastasiyaW/
codex-claude-code-config

Claude Code, Codex, and multi-agent configuration system: principles, hooks, skills, and workflow patterns for AI-assisted development

150
SponsioLabs/SponsioFrameworks & SDKs

Deterministic safety solutions for probabilistic AI agents

440
mturac/
everything-openai-codex

EOC: open-source operating system for OpenAI Codex workflows with agents, skills, hooks, rules, memory, safety gates, and cross-harness adapters.

90

AI coding agent with one Python core and three front-ends โ€” headless CLI, Textual TUI, and an Electron desktop. Works with any OpenAI-compatible API, with risk-tiered permissions, event-sourced replayable sessions, and a fail-closed OS-level sandbox.

119

Fable-style spec + evidence gate for Claude Code + Codex. Makes Opus/Codex work under Fable-like discipline: blocks every edit until a deterministic spec passes, and there is no "done" without live acceptance evidence. Spec-first, verification-gated, forbidden-paths enforced.

46