A raw LLM predicts tokens. A harness turns those predictions into a safe, stateful action loop.
The Model (Passive Predictor)
- Probabilistic next-token distribution
- Static weights + bounded context
- No direct OS or file access
- Cannot see whether code works
The Harness (Active Runtime)
- Context: repo rules, git, code
- Tools: read, edit, test, shell
- Safety: permissions + sandbox
- Control: queues + subagents