Emdash vs Prime Agent

Emdash 55

Harness reading. Issue intake from Linear, GitHub, Jira and others, diff review, pull requests and CI checks in one place, local or over SSH (55).

Prime Agent 73

Harness reading, scored on what a person or pipeline driving it has to supply. The model sees three tools (bash, edit, ipython), and MCP tools are searched, described and called from Python instead of being loaded into the prompt (23). Autonomous mode has limits for turns, tokens, time and continuations, a goal token budget and automatic compaction (17). A JSON event stream and exit codes for headless runs, described in the crate README and source only (10). Sessions resume, the daemon restarts workers and restores from JSONL files, refinements can be rolled back and quality gates retry (15). One command starts it and no SDK was found. A provider must be chosen through an interactive /login or supplied as a key first (8).

Emdash 54

Apache 2.0 (30). A telemetry page on the docs site (not read) (18 of 30). No deprecation policy (5). Disclosed with an opt-out (15 of 20). 30 + 18 + 5 + 15 = 68.

Prime Agent 67

MIT in the LICENSE file and Cargo.toml, with a notice that the code is a port of a TypeScript product originally copyright Mario Zechner (30). The first-run notice and the telemetry crate README say what is sent and what is excluded, and name the endpoint and PostHog, but the vendor privacy policy, re-read on 3 November 2026, is still dated 23 February 2024, does not describe agent telemetry and gives no retention period for it (12). No deprecation policy found. Removed flags are recorded in change fragments and, since 0.10.1, in CHANGELOG.md (5). Telemetry is disclosed with a setting, a command and two environment variables to turn it off (20). 30 + 12 + 5 + 20 = 67.

Emdash 38

Harness reading. Telemetry is described as optional and disabled in Settings or with TELEMETRY_ENABLED=false, which reads as on by default (15 of 30). Worktree per task and remote machines over SSH (10 of 20). No prompt-injection guidance (5). No audit log (5). No security policy file found (3). 15 + 10 + 5 + 5 + 3 = 38.

Prime Agent 50

Harness reading of the framework checklist, as used for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Usage telemetry is on by default. It is pseudonymous, limited to primitive values with no prompts, tool content or file paths per the source, disclosed on first run and mirrored to a local telemetry.jsonl (18). No approval prompts were found and there is no sandbox, which the README states. MCP tools can be limited with enabledTools and disabledTools, and the agent is told to recommend a connection, not make one (4). The README tells users to work only with trusted repositories, instructions and skills. No detection or mitigation found (5). Append-only JSONL session files, a prime-agent incident timeline command and the local telemetry mirror (12). The vendor's security policy has a reporting address, safe harbour, response times and discretionary rewards, scoped to its website and API. The repository has no SECURITY.md and no published advisories, CONTRIBUTING.md says to report privately without naming an address, and security.txt returned 404. security.txt still returned 404 on 3 November 2026 and the policy page (updated 6 May 2026) is unchanged. Fixes to the agent's own flaws ship in releases with no advisory (see negative). cargo-deny runs in CI (11). 18 + 4 + 5 + 12 + 11 = 50.

Emdash 55

Harness reading. Docs site and a workspace server package (55).

Prime Agent 45

Harness reading of the framework line. --mode json emits a session event stream and rpc and acp modes exist, but we found no published schema or reference for them outside the source (10). docs.primeintellect.ai serves an llms.txt that still had no Prime Agent page on 3 November 2026 (0). The README states what the agent does, how it differs and that it is not a sandbox, and the bundled skills say when to use each function (10). CLI values are validated with messages that list the valid choices, and MCP tool schemas are read live from the server (7). The README gives the install line and the main commands, the repository's docs folder adds Slack and Google Workspace MCP connector guides, and the MCP skill documents its error types, but there is no headless or configuration guide (5). Versioned stable releases and, since 0.10.1 on 21 October 2026, a dated CHANGELOG.md in the repository. 0.10.0 has no entry and the nightly betas have none of substance (13). 10 + 0 + 10 + 7 + 5 + 13 = 45.

Emdash 70

v1.2.11 on 6 November 2026 (30). v1.2.9, v1.2.10 and v1.2.11 within two weeks (20). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). Current installers and Homebrew cask (15). Release workflows, no test CI (5). 30 + 20 + 0 + 15 + 5 = 70.

Prime Agent 79

Stable v0.10.2 on 28 October 2026, six days before this check (30). 20 stable tags from v0.6.1 (5 August) to v0.10.2 in the 90 days from 5 August, beside more than 140 nightly beta tags since 30 September that a default install doesn't get (20). About 800 commits on main since 5 August. Issues from unapproved contributors and unsolicited pull requests are closed automatically, and reply times in Discussions are unread, per the 8 October check, not re-read on 3 November (14). Binaries for five targets from one release workflow and Homebrew definitions in the repository. No SDK and no registry package found (8). A pinned toolchain, a committed lockfile and cargo-deny with two triaged advisory exceptions reviewed on 17 September 2026. CI passing per the 8 October check (not re-read), and the npm audit findings in issue #3292 not verified (7). 30 + 20 + 14 + 8 + 7 = 79.