Threat explainer

AI harness supply chain

Package install, skill install, and tool bootstrap risks for AI coding.

Install steps can change what your agent trusts.

AI harness supply-chain attacks combine package metadata, postinstall scripts, and agent-readable config files.

HOL Guard turns these moments into private receipts first, then public lessons only after redaction and moderation.

Harness setup guides

Protect the coding tools your team already uses without forcing everyone to become a security expert.

harness

Terminal-native coding agent with broad shell reach.

harness

Open-source agent harness for local coding loops.

harness

Command-line agent workflow for local projects.

Real protection moments, scrubbed for safety before becoming public learning pages.

codex

A redacted example of a local secret read attempt.

Practice attack patterns with static simulations. Nothing dangerous executes.

secret-exfiltration

Practice spotting a secret read request without exposing real secrets.

supply-chain

Walk through a simulated install that tries to change agent trust.