YC 开源自家 Harness，3 天斩获 3.9k Star，QM 如何划清 Agent 的权限边界
Ranking
Overall
78
Content
90
Popularity
N/A
No observed public metrics; popularity remains neutral/archived.
Merged summary
TL;DR - Y Combinator open-sourced QM, an enterprise Agent harness designed to let organizations deploy AI agents with clear data, identity, and permission boundaries. It shifts the focus from improving individual agents to securely managing agent use across teams.
- Scope-based isolation separates memories, files, credentials, and sandboxes by employee, project, or collaboration channel.
- Persistent sandboxes retain dependencies, configuration, scheduled jobs, and task state across sessions.
- Its model-agnostic architecture supports agent engines such as Claude Code and Codex through standard interfaces.
- Three security modes balance approvals and autonomy, while employee-bound credentials and audit logs enable least-privilege access and accountability.
Sources (1)
YC 开源自家 Harness，3 天斩获 3.9k Star，QM 如何划清 Agent 的权限边界
Public signals
N/A
TL;DR - Y Combinator open-sourced QM, an enterprise Agent harness designed to let organizations deploy AI agents with clear data, identity, and permission boundaries. It shifts the focus from improving individual agents to securely managing agent use across teams.
- Scope-based isolation separates memories, files, credentials, and sandboxes by employee, project, or collaboration channel.
- Persistent sandboxes retain dependencies, configuration, scheduled jobs, and task state across sessions.
- Its model-agnostic architecture supports agent engines such as Claude Code and Codex through standard interfaces.
- Three security modes balance approvals and autonomy, while employee-bound credentials and audit logs enable least-privilege access and accountability.