A Rust runtime for agents that research, plan, and work.
Explicit permissions. Durable state. You in control.
The model proposes the next step. Harwness owns the contracts, context, and execution that make it real.
Compile layered TOML definitions into executable, content-addressed agent snapshots. Give each role a tool surface, a budget, and a return contract.
Goals, plan graphs, findings, transcripts, and jobs have a life beyond a single context window. Leases, budgets, and cancellation give background work explicit limits.
Typed context distinguishes instructions from evidence. Lens combines chunking, vector and lexical search, ranking, and visibility checks across local indices.
Inside Lens ↗Observe host activity. Turn signals into evidenced findings. Keep privileged responses behind a separate authorization boundary.
Follow the security pipeline ↗Scoped sensors for host resources, workspace drift, scanner reports, filesystem events, and eBPF signals.
SENSORS → TYPED SIGNALSRules, baselines, evidence, and triage turn observations into findings. A model verdict is a proposal.
RULE-CHECKED → TRIAGEDA separate Warden checks authorization proofs before dispatching privileged host actions.
AUTHORIZED → ENFORCEDDifferent entry points receive different capabilities. Connecting a channel does not grant it your local terminal’s authority.
Interactive sessions, one-shot work, workspace analysis, setup, and operator approvals.
Local operatorCompose typed providers, extensions, plans, and sessions through the harw facade.
Durable MCP job submission and opt-in paired Telegram ingress, with restricted runtime profiles.
Explicit admissionExpose governed operations over a Unix socket with peer identity checks. Web UI coverage is evolving.
Scoped operationsHarwness 0.3.0 is in active development. Start locally, inspect the architecture, and expect APIs to evolve.