Profiles

Dated project profiles.

One page per watched project. Each profile records what Frontier could verify at a stated date, the operator posture that follows, and the questions still open.

Jeffrey Emanuel (Dicklesworthstone) / reviewed 2026-08-20

Agent Flywheel

The durable product is the operating loop, not any one agent inside it -- but the loop you can install is a month behind the one its author describes.

agent0ai / reviewed 2026-08-20

Agent Zero

v2.10 tags the ACP bridge and interactive browser. Sign-ins are shared across chats. The v2.9 SSRF tests survived.

Google / reviewed 2026-08-20

Antigravity CLI

Google retired the coding CLI you could read, and shipped one you have to trust.

Anthropic / reviewed 2026-08-20

Claude Code

Background work on a leash whose clasp only locks once you test it.

OpenAI / reviewed 2026-08-20

Codex

Guardian V2 is in 0.148.0. The feature flag is still off.

Anysphere / reviewed 2026-08-21

Cursor

Closed editor, CLI, and cloud agent, harvested from the changelog, never from github.com/cursor/cursor.

deepseek-ai / reviewed 2026-08-20

DeepSeek Harness

A frontier lab's own agent harness, MIT-licensed and built so that everything is a plugin -- including the components that enforce the limits.

Vercel / reviewed 2026-08-20

eve

Ships everything it merges. turnPolicy queue did not bind from 0.34.0 through 0.39.2; 0.39.3 copies the field again.

withastro / reviewed 2026-07-27

Flue

Tagged nothing this window while its default branch deleted workflows, the CLI, and the entire run surface. The marketing site still sells all three.

Google / reviewed 2026-08-20

Gemini CLI

The consumer service is gone and the repo is not. Stable runs about two weeks behind its own security merges.

GitHub / reviewed 2026-08-21

GitHub Copilot CLI

A versioned terminal agent with GitHub Releases and npm, and no agent source behind them.

xAI / reviewed 2026-08-21

Grok Build

You can read the loop. The binary on PATH is a different channel.

Nous Research / reviewed 2026-08-20

Hermes Agent

The approval decision moved from you to a classifier, and the controls written to bound it are still on main.

Ronan Berder (hunvreus) / reviewed 2026-07-27

heypi

The strongest fail-closed approval contract in the field, wrapped around an approver identity check that is only a startup warning.

omnigent-ai / reviewed 2026-08-20

Omnigent

The first meta-harness on this watchlist: a governance layer over the coding agents it drives, whose spend cap is enforced before the call and is a downgrade gate rather than a ceiling.

can1357 / reviewed 2026-08-20

OMP (Oh My Pi)

A fork of Pi that outran the project it forked, publishing 17.x against upstream's 0.8x under the same package basename, with a language server and a live debugger wired in.

OpenClaw / reviewed 2026-08-20

OpenClaw

The fixes are real, and they are on a channel you are probably not running.

OpenHands / reviewed 2026-08-20

OpenHands

The platform that fronts other harnesses. Its open-source line thawed for four days in July, then refroze.

Paperclip / reviewed 2026-08-20

Paperclip

Governs agent labor as operating state. Its one Critical advisory this window described a hole it had already closed 97 days earlier.

Earendil Works (formerly badlogic / Mario Zechner) / reviewed 2026-08-22

Pi Coding Agent

Refuses to govern, ships what it merges, and now lets an installed extension own your provider credentials.