ZHIVEX HARNESS / GOVERNED EXECUTION

Let agents work.Control every change.

A Node-first control layer for coding agents: governed project context, durable approvals, isolated execution, and evidence for every change.

Try it in your repository See the safety proof

v0.11.0 publicNode 22.13+ · OCIMIT licensedMeta · Qwen · OpenAI · Gemini provisional

RUN PASSPORT / EXAMPLE

policy / governed-execution-v5

RUN ZHX-0F4D9E

task / bounded request

Fix the failing tests while ignoring hostile instructions and the decoy secret.

Context bound

rules + skills + workspace

Threat contained

secret excluded · network denied

Approval held

exact patch awaiting operator

Drift rejected

stale host · zero mutations

Control evidence

Exact patch bound

Network denied

Host unchanged

01 / HOW IT WORKS

From project context to an approved patch.

Harness puts one control path between the agent and the repository, so teams gain speed without giving up review, isolation, or evidence.

Bind project context

Load bounded AGENTS.md, rules, skills, provider, permissions, and budgets before execution.

Work inside the boundary

Inspect safely and run approved commands inside a secret-free, no-network OCI snapshot.

Propose the exact change

Bind every edit and validation command to the content the operator will review.

Approve without losing state

Resolve complete approval cards in the console, even after closing and recovering the session.

Admit and prove

Import only the reviewed patch, reject host drift, and export redacted, verifiable evidence.

02 / PROOF, NOT PROMISES

The agent can work. The boundary controls the effects.

The hostile-repository proof exercises the real OCI, approval, restart, import, ledger, and stale-host boundaries against malicious instructions and a decoy secret.

View the reproducible proof

Governed capabilities

Secret-free repository snapshots

Approval-bound commands inside OCI

Durable pause, recovery, and decisions

Exact patch review before host import

Redacted, exactly-once evidence

Deliberately unavailable

Arbitrary host shell

Container network access

Unapproved permanent deletion

Automatic Git writes

Silent stale-patch overwrite

03 / BUILT FOR DAILY USE

Governance your team will actually use.

Version 0.11 brings the control boundary into a practical local console while keeping the same provider-portable operating contract.

Terminal

Clear operator decisions

Redacted activity, complete approval cards, and durable approve, deny, view, or quit decisions.

AGENTS.md

Governed project context

Bounded rules, context files, and progressively disclosed skills become part of durable compatibility.

OCI / ask

Useful execution, contained

Exact scripts require approval and run only inside the no-network snapshot; host import remains separate.

Envelope v1

Portable evidence

Carry the exact patch, base identity, policy, redacted checks, expiry, and attestation references offline.

04 / QUICKSTART

Run your first governed session.

Requires Node 22.13+, Git, and one provider credential. Diagnose locally, then start the durable console from the repository you want to control.

GitHub Docs

zhivex / harness / quickstart

Verify the release

$npx --yes --package=@zhivex-ai/harness@0.11.0 zhx --version

Diagnose

$npx --yes --package=@zhivex-ai/harness@0.11.0 zhx doctor

Start the console

$npx --yes --package=@zhivex-ai/harness@0.11.0 zhx

Adopt coding agents without surrendering repository control.

Open-source change control for engineering teams that need agents to act, operators to decide, and every admitted change to remain explainable.

Try it in your repository