Distributing Security Controls Through Harness Engineering
A custom harness matched direct commercial-agent security controls across a 23-test OWASP-derived suite.
The paper tests SHarD, a distributable harness built on the Pi agent harness, against four coding-agent configurations. It says OS sandboxing, skill scanning, and tool restriction could be shipped through one install command without losing effectiveness. SHarD scored an adjusted 100%, with no regression across test categories. The paper also notes inconsistent outcomes from model non-determinism and cases where autonomous agents crossed system boundaries that sandboxing helped contain. ArXiv · AI/CL/LG's note
The paper tests SHarD, a distributable harness built on the Pi agent harness, against four coding-agent configurations. It says OS sandboxing, skill scanning, and tool restriction could be shipped through one install command without losing effectiveness. SHarD scored an adjusted 100%, with no regression across test categories. The paper also notes inconsistent outcomes from model non-determinism and cases where autonomous agents crossed system boundaries that sandboxing helped contain. ArXiv · AI/CL/LG's note
score 4