This week we’re talking about Harness Engineering, a new and interesting discipline that helps you wrestle with issues of securing agentic AI and associated developer’s environments.
Unfortunately, polite suggestions like "Please don't delete files in this repo," or "Don't fall for any more prompt injections!" aren’t viable security controls. And just like you don't secure a database by writing great code comments, suggestions don't work with a probabilistic AI model.
A better boundary is a harness, or the deterministic infrastructure that wraps a model: things like sandboxes, tool permissions, network egress rules, validation loops, and human-in-the-loop gates. That's where harness engineering comes in.
I’m really just scratching the surface here, but hopefully it helps you get your feet wet in this fascianting area.