An agent harness that is kind of like airflow for agent tasks.

I thought open claw was cool but could never use something so insecure.

Each run is in a container. One network bridge out so everything from tool calls to model communication goes over the bridge.

Each run has a capability token and the host checks grants for the tools attempting to be called.

Core super thin and everything from credentials handling to model communication is a package.

Finally got it alpha and have some useful jobs set up like it triggering jobs on an alert channel in slack. Debugging it with tools like GitHub kube and our work mcp and the dropping a comment on every alert with the cause.

https://ottoharness.com

Still closed source but hoping to change that after some more testing.