Security, Auth, and Policy in Agent Harnesses
The live demo repo for this series is 67ailab/harness-engineering, and for this post I did change the repo before publishing. The new repo commit is 3f2ec5d, which adds a checked-in baseline policy file at policy/default.json and tightens PolicyEngine so relative policy paths resolve from the policy file location rather than from the caller’s current working directory. That sounds like a small change. It is small in lines of code. It is not small in meaning. ...