Skip to main content

Harness

Permissions

A mode chooses the kind of work. A grant chooses the actual reach. Both have to allow a step before it runs.

Reads​

Reads stay inside the folder you opened. A path outside that folder is not read as part of the project.

Writes​

Writes go only to folders you grant. Those folders must already exist. Harness does not create a grant folder for you. If the folder is missing, create it yourself, then grant it.

Secretary writes into the draft folder only. Researcher does not make general writes.

Shell​

The shell stays off until you turn it on, and only if the mode allows it. Researcher does not run a general shell.

Tests are a separate grant. Web search is a separate grant. Neither one follows from the shell being on.

While you are on the plan​

Plan mode hides tools that change files. Allow is what starts that work. Auto-approve, if you turn it on, lasts for that session only. See Coding.

You pick the engine. DuckDuckGo is the default. It needs no key.

You can also pick Wikipedia, Brave, Tavily, SearXNG, Google Custom Search, Bing, Exa, or Kagi.

Wikipedia needs no key. For an engine that does, set that key in the environment: a Brave key, a Tavily key, a Google key, a Bing key, an Exa key, or a Kagi key. Say it that way in your own notes. Do not put the secret in a page, and do not expect this guide to show one. SearXNG uses the address you configure, not a sample key.