Y Combinator open-sourced the agent harness it runs its own operations on

The core accepts interchangeable harnesses, "pick your own harness and model and switch between them," with Pi, OpenCode, Codex and Claude Code all driving it through one wiring file. Its predeclared command policy, hard denials for things like recursive deletes and destructive SQL, applies in every security posture including the one named Dangerous, answering failures this feed has already reported. The repository also asks for contributions as human-written intent rather than code; jaggederest checked whether practice matched policy and found the directory meant to hold that text empty: "Aaand it's empty. Well."

Why it matters: A floor no posture can lower is the transferable idea, and it is cheap to copy. The contribution policy currently has no evidence behind it.