YC 开源自家 Harness，3 天斩获 3.9k Star，QM 如何划清 Agent 的权限边界

TL;DR - Y Combinator open-sourced QM, an enterprise Agent harness designed to let organizations deploy AI agents with clear data, identity, and permission boundaries. It shifts the focus from improving individual agents to securely managing agent use across teams.

• Scope-based isolation separates memories, files, credentials, and sandboxes by employee, project, or collaboration channel.
• Persistent sandboxes retain dependencies, configuration, scheduled jobs, and task state across sessions.
• Its model-agnostic architecture supports agent engines such as Claude Code and Codex through standard interfaces.
• Three security modes balance approvals and autonomy, while employee-bound credentials and audit logs enable least-privilege access and accountability.