What exists today, and what does not
The honest column, as of 25 Oct 2026. SHarness is at the design stage with the first experiments runnable. What exists as running code is listed here and kept apart from the design, so a reader, human or agent, can tell what they can rely on.
Exists, and can be checked
| Thing | Where to check it |
|---|---|
The sharness-ai package on PyPI, v0.1.0: reports its version and prints its help | pypi.org/project/sharness-ai |
Experiments E01 to E04, E09 and E10 (probe, policy hash, run, hello, the harness under a second kernel in Node, in a browser tab and through chroot, policy translate), with 53 tests, on the CLI's dev branch; unreleased to PyPI | the code · experiments/README.md · E04 and E09 measured on Evidence §9 |
A real Linux kernel in a tab running probe, hello and run: the E09 page | open it · the write-up |
| Seven example policies (two minimal, five profiles P0 to P4 from a hello world to sgit) and a skill for Claude Code sessions | the policies · Examples |
| Two browser mockups that compute and enforce nothing | the policy hash (the same hash as the CLI) · the edge matrix |
| Three storyboards, data drawn by the storyboards.sgit.ai kit | Storyboards; what they show is the design, not something built |
| The design, published for review, with the brief and four drawn diagrams | The brief · the source documents, verbatim |
| Measurements behind the design | Evidence: one Claude agent workspace, with method and date |
| This site, its gate and its deploy pipeline | SHarness-AI/SHarness-AI__Website · how it is built |
Not here yet
| Missing | Status |
|---|---|
| Any SHarness component (launcher, kms, net, fs, bash, llm) | Not built. Designed on Components. |
A CLI release beyond --version | v0.1.0 on PyPI is the skeleton and the pipeline; the experiments are on dev, unreleased (R7). |
| The launcher above the agent | Not built. Every experiment applies a policy to a child process; nothing yet binds the agent itself. |
| The process-tree proof of concept (E06) | Started, not completed, not run. See Enforcing the process tree. |
seccomp, the cpu cgroup, read-only binds | Available in the measured kernel; not yet applied by the CLI or measured (memory and pids caps are, since 25 Oct 2026). See Containment. |
| The newsroom's agents' policies | The second user in the memo. First drafts exist in the v0 shape (P3 the newsroom agent, P4 sgit, here); hosts, uids and signing are not in v0. |
| Markdown twins for the hand-written pages | Every page has a twin except the front page's sections, the mockups and the three project pages (engineering, comms, releases). |