harness

Governed AI agents for sensitive data and business-critical apps. Agents never hold credentials: a gateway checks every call against per-resource permissions, and each answer runs in a sealed container.

GitHub

Official source

Start locally with the CLI guide