io-harness 0.19.0

An embeddable agent runtime for Rust: any task, any provider, in your own process. Run commands, edit files and search a repository under a layered permission boundary on files, commands and network; gate the result on the project's own test command in any language, or on nothing at all; and keep a full SQLite trace of every step, refusal and budget draw. With an execution sandbox, contained sub-agents, an MCP client, and durable resume for unattended runs.
Documentation
# Security Policy

## Supported versions

**IO Harness** is pre-release. Only the latest `main` and `develop` receive
security fixes until a stable 1.0.0 is published.

## Reporting a vulnerability

**Do not open a public issue for security problems.**

Email **<project-contact-email>** with:

- A description of the issue and its impact
- Steps to reproduce or a proof of concept
- Affected version, commit, or branch

You will get an acknowledgement, and we will work with you on a fix and
coordinated disclosure. Please give us reasonable time to release a fix before
any public disclosure.

## Scope

This policy covers the code in this repository. Vulnerabilities in dependencies
should be reported upstream; tell us too if this project is affected.