Harness vs Verdent

Harness 77

Eleven tools at v0.5.33 (seven on 17 October). Added since then are harness_search, harness_machines, harness_tell and harness_settings; harness_send and harness_tell are listed only inside a harness, so an agent outside one sees nine. Descriptions total about 4,000 characters. Judgement call. By the total, 11 tools fall in the 11 to 30 band (15), with 5 back for listing two tools only inside a harness (20). Counting only the nine an outside agent sees gives 25. We took the stricter reading, as the 17 October check counted the total (20). chars sizes a read (4,000 characters by default), limit sizes a search (10 by default), all widens the list, and any returns on the first finished harness. No pagination (14). Exit codes, refusals returned as answers rather than errors so a model does not retry them, and a timed-out wait reported as still working, in the source (19). readOnlyHint on whoami, list, search, machines, wait and read, destructiveHint false on start, tell and send, idempotentHint on close, and no hint on settings so an engine that asks before an unmarked tool asks the person (16). Two required fields on start, defaults of Claude Code and a 45-second wait. No SDK, but a CLI, an MCP server and a plugin with a skill (8). 20 + 14 + 19 + 16 + 8 = 77.

Verdent 35

Harness reading. MCP servers per project or globally, subagents, skills and rules, but no per-tool disabling or deferred loading found (10). No output-size, turn-limit or budget controls for a run were found beyond credit balances (5). No exit codes or error format, since there is no headless mode (3). Parallel workers in git worktrees and a review column make runs reviewable and reversible, with no resume by ID documented (10). No CLI, API or SDK. A pipeline can only reach Manager through a paired Telegram, Slack or Feishu bot (7). 10+5+3+10+7 = 35.

Harness 85

Read as an MCP server and CLI. Eleven tools in source at v0.5.33, each with a typed JSON Schema input built by one helper, required fields marked, plus --json on every command. No OpenAPI, which a stdio server does not need (23). llms.txt and a Markdown-like agents page written for agents, per the 17 October check, not re-read on 4 November, since Autonomous's terms forbid access to its sites by automated means, including scripts or web crawlers, and its hosts are paused pending the founder (10). The tool descriptions and server instructions say when to call whoami first, to prefer a new project over an existing folder, to read before telling a harness more, and that turning a setting on is the person's yes to give (20). An enum on agent and on the setting name, minItems on wait names, minimum and maximum on timeout_seconds, a minimum on chars and limit. machine, folder, project and model are free strings (12). Worked examples, the exit code table and the Next: line per the 17 October reading of the agents page and llms.txt, with exit codes still in the source (13). Per-component semver tags, but the only CHANGELOG.md covers the provider protocol (0.3.0, 6 August 2026), and GitHub's release pages could not be read (7). 23 + 10 + 20 + 12 + 13 + 7 = 85.

Verdent 55

Framework reading for a harness. No schema for settings or output, only mcp.json examples in the standard mcpServers shape (5). Every current docs page has a Markdown twin at the same path with .md, though no llms.txt (10). The docs say when to use Agent Mode or Plan Mode and what Plan Mode can't do, but the Agent Mode page lists the actions that need approval only as "certain tool executions" and "destructive operations" (12). Modes and BYOA agent types are enumerated, permissions are not (5). Examples on the MCP, BYOA and messaging pages, and a recovery page, with no error codes (8). Version numbers and a dated public changelog (15). The archived 1.0 docs are still served beside the current ones. 5+10+12+5+8+15 = 55.

Harness 54

Harness reading of the framework checklist, as for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Product usage counts are on by default, disclosed with an opt-out in the repository's measurement document (updated 31 October) and without prompts, code or files. Remote traffic is end-to-end encrypted and relays carry ciphertext. Local use needs no account. The daemon updates itself from a checksummed manifest without asking (18). Agents may start harnesses only with the account's Agents can start other agents setting on, with four live harnesses at most and closes limited to their own. Since v0.4.69_cli (26 October 2026) an agent can turn that setting, and the other agent settings, on itself with harness settings <name> on --person-said-yes or the harness_settings tool, after asking the person; the source says the yes is the agent's word and is logged with the agent's name. The tool carries no safe hint, and the command is not in Harness's allow rules, so the engine's own permission prompt still applies. Against that, installing Harness adds its other commands to Claude Code's and Codex's allow rules, Codex runs them outside its sandbox, there is no sandbox of its own, and the device page listed spoken tasks as auto-allowed on 17 October. 13 on 17 October, when an agent could not turn the setting on, so 10 now. The instructions tell an agent never to answer a harness's question or permission prompt. Harness output is another agent's text, and no further guidance on it was found (9). Every harness shows in the person's app with who started it, the device key log keeps an add and remove history, and an agent's settings change is named in the daemon's log. No per-call audit log found (9). SECURITY.md with an email and a three-working-day acknowledgement, and a documented trust model. No security.txt (17 October check), bug bounty or certification found. OSV lists no advisory for @autonomous-ai/harness-mcp (8). 18 + 10 + 9 + 9 + 8 = 54.

Verdent 33

Framework reading (telemetry defaults, approvals, guardrails, sandboxing). Conversation history and tool results go to Verdent's US servers and on to Azure, Bedrock or Vertex, with zero data retention stated for Vertex and Bedrock only. Event logging to log.verdent.ai has no documented opt-out. BYOA keys stay on the machine (10). Plan Mode is read-only, Agent Mode asks before destructive commands and edits outside scope, and workers are isolated by git worktree, but there is no sandbox or network control and the approval list isn't enumerated (9). No prompt-injection guidance found, while web search and fetch results enter the context (2). Usage history in the dashboard, no audit log found (5). A security page with a disclosure address and a five-day acknowledgement, SOC 2 and ISO/IEC 42001 being pursued rather than held, no security.txt and no bug bounty (7). 10+9+2+5+7 = 33.

Harness 40

No payment protocol (0). Read with the self-hosted rule. The software is free and the optional hardware prices are public, per the 17 October check, not re-read on 4 November, since Autonomous's terms forbid access to its sites by automated means, including scripts or web crawlers, and its hosts are paused pending the founder (20). Free with no card (20). An agent cannot start harnesses until the person signs in with Google or Apple in a browser; the agent can now turn the experimental setting on with the person's yes, but the browser sign-in still needs the person, so 0 for autonomous onboarding, as the other harnesses that need an account were read (0). 0 + 20 + 20 + 0 = 40.

Verdent 20

Harness reading of the published rubric, scored on the Verdent subscription the agent needs. No payment protocol (0). Plan prices from $5 a month, top-up prices and the credit value of about $0.059 are public without a login (20). Free Mode and the free trial ended on 29 October 2026, so there is no free tier (0). A person signs up in a browser (0). 0+20+0+0 = 20.

Harness 75

v0.5.33_cli and v1.3.56_desktop on 3 November 2026 (30). 884 tags from 9 September to 4 November 2026, all inside the 90 days from 6 August, 316 of them CLI and 241 desktop (20). Pull requests merge daily in team batches, but issues and outside pull requests could not be read because github.com answers our proxy with 403 (5). In the official MCP registry since 19 October 2026 as ai.autonomous.harness/harness, a reverse-domain namespace for harness.autonomous.ai, with npm package @autonomous-ai/harness-mcp 0.2.0 and a checksummed MCPB file. The registry's latest entry is 0.4.20 while the CLI is 0.5.33 (15; 0 on 17 October, when there was no entry). CI workflows for the CLI, desktop, backend and OS, with dependency lockfiles current. Run results unread (5). 30 + 20 + 5 + 15 + 5 = 75.

Verdent 61

Closed service. v2.18.0 on 29 October 2026, eight days before this check (30). More than three dated releases in the 90 days from 8 August, among them 2.10.0 to 2.18.0 (20). A dated public changelog, a support address, Discord and a subreddit, with no public tracker to read reply times (8). No official SDK or MCP server to keep current (0). No public packages or CI to judge (3). 30+20+8+0+3 = 61.

Harness 64

MIT licence for the whole repository under Autonomous, Inc., with third-party Store covers under their own licences (30). The repository documents what usage counts contain, a 10-day pseudonymous activity mark and the encrypted relay in detail. Autonomous's privacy policy of 7 July 2026 is general to its stores and sites and does not mention Harness, per the 17 October reading and the site's policy reading of 30 October (14). The provider protocol promises both revisions side by side for a deprecation window after a breaking change. Nothing similar for the app or CLI (6). Telemetry is disclosed with an opt-out in the app and CLI, but it is on by default and described in the repository rather than in the privacy policy (14). 30 + 14 + 6 + 14 = 64.

Verdent 55

Proprietary, under terms from Verdent AI, Inc. that are clear on use and ownership (15). The privacy policy and security page agree that data stays in the US and that input isn't trained on without consent, and the security page lists subprocessors. The privacy policy gives no retention periods, names MiniMax as a provider the security list leaves out, and deletion is by email request (14). The credit bonus carries a promise of 15 days' notice, but Free Mode was retired on the day v2.18.0 shipped and no deprecation policy was found (6). Subprocessors and their locations are listed, and the domains the app calls are named, with event logging undescribed (12). 15+14+6+12 = 47.