$ find your agent harness

Open-source (Rust, BSD-3) Codex-native personal agent platform whose defining trait is a hardware-isolated microVM per agent — Firecracker on Linux, Hyper-V on Windows, not just a container — wrapped in zero-trust controls: 'Pipelock' keeps secrets and credentials out of an agent's reach and an egress-allowlist proxy governs outbound traffic. Agents are authored, validated and launched entirely from Codex in-repo ('everything is a skill'), build their own capability-gated WASM tools at runtime, persist memory in a shared knowledge graph, and can run always-on via cron-style schedules and heartbeats.