The DOI matches its DataCite record; 5 of the 5 references it cites were found in a registry or an index.
Dive into Claude Code: The Design Space of Today's and Future AI Agent Systems
Open accessAbstract
Claude Code is an agentic coding tool that can run shell commands, edit files, and call external services on behalf of the user. This study describes its architecture by analyzing the publicly available source code and comparing it with two independent open-source AI agent systems, OpenClaw and Hermes Agent, that answer many of similar or even the same design questions. Our analysis identifies five human values, philosophies, and needs that motivate the architecture: human decision authority, safety, security, and privacy, reliable execution, capability amplification, and contextual adaptability. We then trace them through thirteen design principles to implementation choices. The core of the system is a simple while-loop that calls the model, runs tools, and repeats. Most of the code, however, lives in the systems around this loop: a permission system with seven modes and an ML-based classifier, a five-layer compaction pipeline for context management, four extensibility mechanisms (MCP, plugins, skills, and hooks), a subagent delegation and orchestration mechanism, and append-oriented session storage. Comparisons with OpenClaw and Hermes Agent show that the same design questions produce different answers across three deployment contexts. Claude Code emphasizes per-action safety, OpenClaw emphasizes perimeter-level access, and Hermes renders per-action approvals across many surfaces. At the runtime layer, Claude Code uses a single CLI loop, OpenClaw embeds the runtime within a…
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“Yet agent harnesses are still largely engineered by human experts, a paradigm that scales poorly as modern LLMs become increasingly diverse and rapidly evolving.”
From Self-Harness: Harnesses That Improve Themselves (2026) · cites this paper as Liu et al., 2026
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The publisher hasn’t deposited this paper’s reference list.
Research works printed but not linked: 89
- Michael Ahn, Anthony Brohan, Noah Brown, Yevgen Chebotar, Omar Cortes, Byron David, Chelsea Finn, Chuyuan Fu, Keerthana Gopalakrishnan, Karol Hausman, et al. Do as i can, not as i say: Grounding language in robotic affordances. arXiv preprint arXiv:2204.01691 , 2022. · arXiv
- Aizierjiang Aiersilan. The vibe-check protocol: Quantifying cognitive offloading in ai programming. arXiv preprint arXiv:2601.02410 , 2026. · arXiv
- Joel Becker, Nate Rush, Elizabeth Barnes, and David Rein. Measuring the impact of early-2025 ai on experienced open-source developer productivity. arXiv preprint arXiv:2507.09089 , 2025. · arXiv
- Joeran Beel, Min-Yen Kan, and Moritz Baumgart. Evaluating sakana's ai scientist: Bold claims, mixed results, and a promising future? In ACM SIGIR Forum , volume 59, pages 1-20. ACM New York, NY, USA, 2025.
- Yoshua Bengio, Stephen Clare, Carina Prunkl, Maksym Andriushchenko, Ben Bucknall, Malcolm Murray, Rishi Bommasani, Stephen Casper, Tom Davidson, Raymond Douglas, et al. International ai safety report 2026. arXiv preprint arXiv:2602.21012 , 2026. · arXiv
- Piercosma Bisconti, Matteo Prandi, Federico Pierucci, Federico Sartore, Enrico Panai, Laura Caroli, Yue Zhu, Adam Leon Smith, Luca Nannini, Marcello Galisai, et al. Boiling the frog: A multi-turn benchmark for agentic safety. arXiv preprint arXiv:2605.22643 , 2026. · arXiv
- Johan Bjorck, Fernando Castañeda, Nikita Cherniadev, Xingye Da, Runyu Ding, Linxi Fan, Yu Fang, Dieter Fox, Fengyuan Hu, Spencer Huang, et al. Gr00t n1: An open foundation model for generalist humanoid robots. arXiv preprint arXiv:2503.14734 , 2025. · arXiv
- Kevin Black, Noah Brown, Danny Driess, Adnan Esmail, Michael Equi, Chelsea Finn, Niccolo Fusai, Lachy Groom, Karol Hausman, Brian Ichter, et al. π 0 : A vision-language-action flow model for general robot control. arXiv preprint arXiv:2410.24164 , 2024. · arXiv
- Anthony Brohan, Noah Brown, Justice Carbajal, Yevgen Chebotar, Xi Chen, Krzysztof Choromanski, Tianli Ding, Danny Driess, Avinava Dubey, Chelsea Finn, et al. Rt-2: Vision-language-action models transfer web knowledge to robotic control. arXiv preprint arXiv:2307.15818 , 2023. · arXiv
- Yuandao Cai, Yuzhang Zhu, Liyou Gao, Wensheng Tang, and Shengchao Qin. Push your agent: Measuring and enforcing quantitative goal persistence in long-horizon LLM agents. 2026. https://arxiv.org/abs/2605.23574 . · arXiv
- Mert Cemri, Melissa Z Pan, Shuyi Yang, Lakshya A Agrawal, Bhavya Chopra, Rishabh Tiwari, Kurt Keutzer, Aditya Parameswaran, Dan Klein, Kannan Ramchandran, et al. Why do multi-agent llm systems fail? arXiv preprint arXiv:2503.13657 , 2025. · arXiv
- Mark Chen, Jerry Tworek, Heewoo Jun, Qiming Yuan, Henrique Ponde De Oliveira Pinto, Jared Kaplan, Harri Edwards, Yuri Burda, Nicholas Joseph, Greg Brockman, et al. Evaluating large language models trained on code. arXiv preprint arXiv:2107.03374 , 2021. · arXiv
- Valerie Chen, Alan Zhu, Sebastian Zhao, Hussein Mozannar, David Sontag, and Ameet Talwalkar. Need help? designing proactive ai assistants for programming. In Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems , pages 1-18, 2025.
- Weize Chen, Yusheng Su, Jingwei Zuo, Cheng Yang, Chenfei Yuan, Chi-Min Chan, Heyang Yu, Yaxi Lu, Yi-Hsin Hung, Chen Qian, et al. Agentverse: Facilitating multi-agent collaboration and exploring emergent behaviors. In The Twelfth International Conference on Learning Representations , 2023.
- Xuanze Chen, Xukang Xie, Wentao Fu, Jiajun Zhou, Shanqing Yu, and Qi Xuan. Memsecbench: Tracking agent memory poisoning from persistence to consequence and repair. arXiv preprint arXiv:2607.27080 , 2026. · arXiv
- Prateek Chhikara, Dev Khant, Saket Aryan, Taranjeet Singh, and Deshraj Yadav. Mem0: Building production-ready ai agents with scalable long-term memory. arXiv preprint arXiv:2504.19413 , 2025. · arXiv
- Musa Cim, Burak Topcu, Chita Das, and Mahmut Taylan Kandemir. Parallel context compaction for long-horizon llm agent serving. arXiv preprint arXiv:2605.23296 , 2026. · arXiv
- Yang Deng, Lizi Liao, Wenqiang Lei, Grace Hui Yang, Wai Lam, and Tat-Seng Chua. Proactive conversational ai: A comprehensive survey of advancements and opportunities. ACM Transactions on Information Systems , 43(3):1-45, 2025.
- Shuangrui Ding, Xuanlang Dai, Long Xing, Shengyuan Ding, Ziyu Liu, Yang JingYi, Penghui Yang, Zhixiong Zhang, Xilin Wei, Xinyu Fang, et al. Wildclawbench: A benchmark for real-world, long-horizon agent evaluation. arXiv preprint arXiv:2605.10912 , 2026. · arXiv
- Yilun Du, Shuang Li, Antonio Torralba, Joshua B Tenenbaum, and Igor Mordatch. Improving factuality and reasoning in language models through multiagent debate. In Forty-first international conference on machine learning , 2024.
- Yuetian Du, Yucheng Wang, He Xu, Jiexu Xu, Shanwen Tan, Bing Zhao, Boyu Yang, Zhijie Xu, Ming Kong, Hu Wei, et al. Living-harness is an interactive-agent evolver. arXiv preprint arXiv:2607.26598 , 2026. · arXiv
- Yuyuan Feng, Zhishang Xiang, Chaobin Yang, Qichao Ma, Zerui Chen, Yujing Zhang, Ke Huang, Chuanjie Wu, Zhaoxu Liu, Yili Wang, et al. Graph engineering in the era of llm agents: From individual intelligence to system intelligence. arXiv preprint arXiv:2608.21156 , 2026. · arXiv
- Juraj Gottweis, Wei-Hung Weng, Alexander Daryin, Tao Tu, Anil Palepu, Petar Sirkovic, Artiom Myaskovsky, Felix Weissenberger, Keran Rong, Ryutaro Tanno, et al. Towards an ai co-scientist. arXiv preprint arXiv:2502.18864 , 2025. · arXiv
- Hao He, Courtney Miller, Shyam Agarwal, Christian Kästner, and Bogdan Vasilescu. Speed at the cost of quality: How cursor ai increases short-term velocity and long-term complexity in open-source projects. arXiv preprint arXiv:2511.04427 , 2025. · arXiv
- Zeyu He, Hannah Kim, Dan Zhang, and Estevam Hruschka. How to steer your multi-agent system: Human-llm collaborative planning. In Proceedings of the ACM Conference on AI and Agentic Systems , pages 330-347, 2026.
- Deyao Hong, Yizhe Chi, Wenyi Li, Xiaoqiu Wang, Mingju Gao, Kaisen Yang, Bingxiang He, Youjie Zheng, Calvin Xiao, and Qinhuai Na. Swe refactor bench: Can coding agents complete a long-horizon, whole-repository stack migration? arXiv preprint arXiv:2608.23564 , 2026. · arXiv
- Sirui Hong, Mingchen Zhuge, Jonathan Chen, Xiawu Zheng, Yuheng Cheng, Jinlin Wang, Ceyao Zhang, Zili Wang, Steven Ka Shing Yau, Zijuan Lin, et al. Metagpt: Meta programming for a multi-agent collaborative framework. In The twelfth international conference on learning representations , 2023.
- Xinyi Hou, Yanjie Zhao, Shenao Wang, and Haoyu Wang. Model context protocol (mcp): Landscape, security threats, and future research directions. ACM Transactions on Software Engineering and Methodology , 2025.
- Shengran Hu, Cong Lu, and Jeff Clune. Automated design of agentic systems. arXiv preprint arXiv:2408.08435 , 2024. · arXiv
- Yuyang Hu, Shichun Liu, Yanwei Yue, Guibin Zhang, Boyang Liu, Fangyi Zhu, Jiahang Lin, Honglin Guo, Shihan Dou, Zhiheng Xi, et al. Memory in the age of ai agents. arXiv preprint arXiv:2512.13564 , 2025. · arXiv
- Wei-Chieh Huang, Weizhi Zhang, Yueqing Liang, Yuanchen Bei, Yankai Chen, Tao Feng, Xinyu Pan, Zhen Tan, Yu Wang, Tianxin Wei, et al. Rethinking memory mechanisms of foundation agents in the second half. arXiv preprint arXiv:2602.06052 , 2026. · arXiv
- Carlos E Jimenez, John Yang, Alexander Wettig, Shunyu Yao, Kexin Pei, Ofir Press, and Karthik Narasimhan. Swe-bench: Can language models resolve real-world github issues? arXiv preprint arXiv:2310.06770 , 2023. · arXiv
- Sayash Kapoor, Benedikt Stroebl, Zachary S Siegel, Nitya Nadgir, and Arvind Narayanan. Ai agents that matter. arXiv preprint arXiv:2407.01502 , 2024. · arXiv
- Sajjad Khan. Resume means resume: A machine-checked conformance contract for checkpoint, interrupt, and resume semantics in workflow persistence layers. arXiv preprint arXiv:2608.03836 , 2026. · arXiv
- Omar Khattab, Arnav Singhvi, Paridhi Maheshwari, Zhiyuan Zhang, Keshav Santhanam, Sri Vardhamanan, Saiful Haq, Ashutosh Sharma, Thomas T Joshi, Hanna Moazam, et al. Dspy: Compiling declarative language model calls into self-improving pipelines. arXiv preprint arXiv:2310.03714 , 2023. · arXiv
- Nataliya Kosmyna, Eugene Hauptmann, Ye Tong Yuan, Jessica Situ, Xian-Hao Liao, Ashly Vivian Beresnitzky, Iris Braunstein, and Pattie Maes. Your brain on chatgpt: Accumulation of cognitive debt when using an ai assistant for essay writing task. arXiv preprint arXiv:2506.08872 , 4, 2025. · arXiv
- Arseny Kravchenko, Vadim Liventsev, Innokentii Konstantinov, Ildar Iskhakov, and Matvey Kukuy. Appa: Recoverable information-flow control for real-world llm agents. arXiv preprint arXiv:2607.24625 , 2026. · arXiv
- Chenqian Le, Jiayi Cheng, Qijia He, Runhao Li, Yinghao Li, and Xupeng Chen. What does multi-harness rl learn? credit assignment and portability in coding agents. arXiv preprint arXiv:2609.04518 , 2026. · arXiv
- Geonsun Lee, Min Xia, Nels Numan, Xun Qian, David Li, Yanhe Chen, Achin Kulshrestha, Ishan Chatterjee, Yinda Zhang, Dinesh Manocha, et al. Sensible agent: A framework for unobtrusive interaction with proactive ar agents. In Proceedings of the 38th Annual ACM Symposium on User Interface Software and Technology , pages 1-22, 2025.
- Guohao Li, Hasan Hammoud, Hani Itani, Dmitrii Khizbullin, and Bernard Ghanem. Camel: Communicative agents for" mind" exploration of large language model society. Advances in neural information processing systems , 36: 51991-52008, 2023.
- Han Li, Zhemin Fang, Rili Feng, Yingqi Zhao, Jiaheng Liu, Pengfei Gao, He Ye, Dayi Lin, Qingwei Lin, Saravan Rajmohan, et al. Loopsbench: From harness engineering to loop engineering in coding agent evaluation. arXiv preprint arXiv:2608.00267 , 2026. · arXiv
- Tian Liang, Zhiwei He, Wenxiang Jiao, Xing Wang, Yan Wang, Rui Wang, Yujiu Yang, Shuming Shi, and Zhaopeng Tu. Encouraging divergent thinking in large language models through multi-agent debate. In Proceedings of the 2024 conference on empirical methods in natural language processing , pages 17889-17904, 2024.
- Xingyu Bruce Liu, Shitao Fang, Weiyan Shi, Chien-Sheng Wu, Takeo Igarashi, and Xiang'Anthony' Chen. Proactive conversational agents with inner thoughts. In Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems , pages 1-19, 2025.
- Yue Liu, Ratnadira Widyasari, Yanjie Zhao, Ivana Clairine Irsan, and David Lo. Debt behind the ai boom: A large-scale empirical study of ai-generated code in the wild. arXiv preprint arXiv:2603.28592 , 2026. · arXiv
- Chris Lu, Cong Lu, Robert Tjarko Lange, Jakob Foerster, Jeff Clune, and David Ha. The ai scientist: Towards fully automated open-ended scientific discovery. arXiv preprint arXiv:2408.06292 , 2024. · arXiv
- Aman Madaan, Niket Tandon, Prakhar Gupta, Skyler Hallinan, Luyu Gao, Sarah Wiegreffe, Uri Alon, Nouha Dziri, Shrimai Prabhumoye, Yiming Yang, et al. Self-refine: Iterative refinement with self-feedback. Advances in neural information processing systems , 36:46534-46594, 2023.
- Miles McCain, Thomas Millar, Saffron Huang, Jake Eaton, Kunal Handa, Michael Stern, Alex Tamkin, Matt Kearney, Esin Durmus, Judy Shen, Jerry Hong, Brian Calvert, Jun Shern Chan, Francesco Mosconi, David Saunders, Tyler Neylon, Gabriel Nicholas, Sarah Pollack, Jack Clark, and Deep Ganguli. Measuring AI agent autonomy in practice. Anthropic Research Blog, https://anthropic.com/research/measuring-agent-autonomy , 2026.
- Ethan Mollick. Co-intelligence: Living and working with AI . Penguin, 2024.
- Luca Nannini, Adam Leon Smith, Michele Joshua Maggini, Enrico Panai, Sandra Feliciano, Aleksandr Tiulkanov, Elena Maran, James Gealy, and Piercosma Bisconti. Ai agents under eu law. arXiv preprint arXiv:2604.04604 , 2026. · arXiv
- Xuying Ning, Katherine Tieu, Dongqi Fu, Tianxin Wei, Zihao Li, Yuanchen Bei, Jiaru Zou, Mengting Ai, Zhining Liu, Ting-Wei Li, et al. Code as agent harness. arXiv preprint arXiv:2605.18747 , 2026. · arXiv
- Kai Pan. Agent-first tool api: A semantic interface paradigm for enterprise ai agent systems. arXiv preprint arXiv:2605.10555 , 2026. · arXiv
- Gil Pasternak, Dheeraj Rajagopal, Julia White, Dhruv Atreja, Matthew Thomas, George Hurn-Maloney, and Ash Lewis. Beyond reactivity: Measuring proactive problem solving in llm agents. arXiv preprint arXiv:2510.19771 , 2025. · arXiv
- Divya Pathak, Harshit Kumar, Anuska Roy, Felix George, Mudit Verma, and Pratibha Moogi. Detecting silent failures in multi-agentic ai trajectories. arXiv preprint arXiv:2511.04032 , 2025. · arXiv
- Kevin Pu, Daniel Lazaro, Ian Arawjo, Haijun Xia, Ziang Xiao, Tovi Grossman, and Yan Chen. Assistance or disruption? exploring and evaluating the design and trade-offs of proactive ai programming support. In Proceedings of the 2025 CHI conference on human factors in computing systems , pages 1-21, 2025.
- Chen Qian, Wei Liu, Hongzhang Liu, Nuo Chen, Yufan Dang, Jiahao Li, Cheng Yang, Weize Chen, Yusheng Su, Xin Cong, et al. Chatdev: Communicative agents for software development. In Proceedings of the 62nd annual meeting of the association for computational linguistics (volume 1: Long papers) , pages 15174-15186, 2024.
- Gwendolyn Rak. How to stay ahead of AI as an early-career engineer. IEEE Spectrum , 2025. https://spectrum.ieee. org/ai-effect-entry-level-jobs .
- Charles Reis and Steven D Gribble. Isolating web programs in modern browser architectures. In Proceedings of the 4th ACM European conference on Computer systems , pages 219-232, 2009. ruvnet. Open claude code. https://github.com/ruvnet/open-claude-code , 2026. Accessed May 2026.
- Ravi S Sandhu, Edward J Coyne, Hal L Feinstein, and Charles E Youman. Role-based access control models. Computer , 29(2):38-47, 2002.
- Timo Schick, Jane Dwivedi-Yu, Roberto Dessì, Roberta Raileanu, Maria Lomeli, Eric Hambro, Luke Zettlemoyer, Nicola Cancedda, and Thomas Scialom. Toolformer: Language models can teach themselves to use tools. Advances in neural information processing systems , 36:68539-68551, 2023.
- Judy Hanwen Shen and Alex Tamkin. How ai impacts skill formation. arXiv preprint arXiv:2601.20245 , 2026. · arXiv
- Noah Shinn, Federico Cassano, Ashwin Gopinath, Karthik Narasimhan, and Shunyu Yao. Reflexion: Language agents with verbal reinforcement learning. Advances in neural information processing systems , 36:8634-8652, 2023.
- Leon Staufer, Kevin Feng, Kevin Wei, Luke Bailey, Yawen Duan, Mick Yang, A Pinar Ozisik, Stephen Casper, and Noam Kolt. The 2025 ai agent index: Documenting technical and safety features of deployed agentic ai systems. arXiv preprint arXiv:2602.17753 , 2026. · arXiv
- Viktoria Stray, Elias Goldmann Brandtzæg, Viggo Tellefsen Wivestad, Astri Barbala, and Nils Brede Moe. Developer productivity with and without github copilot: A longitudinal mixed-methods case study. arXiv preprint arXiv:2509.20353 , 2025. · arXiv
- Yifan Sui, Han Zhao, Rui Ma, Zhiyuan He, Hao Wang, Jianxun Li, and Yuqing Yang. Act while thinking: Accelerating llm agents via pattern-aware speculative tool execution. arXiv preprint arXiv:2603.18897 , 2026. · arXiv
- Weiwei Sun, Xuhui Zhou, Weihua Du, Xingyao Wang, Sean Welleck, Graham Neubig, Maarten Sap, and Yiming Yang. Training proactive and personalized llm agents. arXiv preprint arXiv:2511.02208 , 2025. · arXiv
- The Linux Foundation. Linux foundation announces the formation of the agentic AI foundation (AAIF), anchored by new project contributions including model context protocol (MCP), goose and AGENTS.md. Linux Foundation Press Release, 2025. https://www.linuxfoundation.org/press/ linux-foundation-announces-the-formation-of-the-agentic-ai-foundation .
- Priyansh Trivedi and Olivier Schmitt. Does code cleanliness affect coding agents? a controlled minimal-pair study. arXiv preprint arXiv:2605.20049 , 2026. ultraworkers. Claw code. https://github.com/ultraworkers/claw-code , 2026. Accessed May 2026. · arXiv
- Guanzhi Wang, Yuqi Xie, Yunfan Jiang, Ajay Mandlekar, Chaowei Xiao, Yuke Zhu, Linxi Fan, and Anima Anandkumar. Voyager: An open-ended embodied agent with large language models. arXiv preprint arXiv:2305.16291 , 2023. · arXiv
- Lei Wang, Chen Ma, Xueyang Feng, Zeyu Zhang, Hao Yang, Jingsen Zhang, Zhiyuan Chen, Jiakai Tang, Xu Chen, Yankai Lin, et al. A survey on large language model based autonomous agents. Frontiers of Computer Science , 18 (6):186345, 2024a.
- Xingyao Wang, Boxuan Li, Yufan Song, Frank F Xu, Xiangru Tang, Mingchen Zhuge, Jiayi Pan, Yueqi Song, Bowen Li, Jaskirat Singh, et al. Openhands: An open platform for ai software developers as generalist agents. arXiv preprint arXiv:2407.16741 , 2024b. · arXiv
- Yi Wang, Haopeng Zhang, Chengxiang Huang, Rui Dai, Kaikui Liu, Piotr Koniusz, and Xiangxiang Chu. Looparena: Benchmarking models as runtime controllers for loop engineering. arXiv preprint arXiv:2608.28281 , 2026a. · arXiv
- Yike Wang, Huaisheng Zhu, Zhengyu Hu, Yige Yuan, Zhengyu Chen, Shakti Senthil, Hannaneh Hajishirzi, Yulia Tsvetkov, Pradeep Dasigi, and Teng Xiao. Rethinking the evaluation of harness evolution for agents. arXiv preprint arXiv:2607.12227 , 2026b. · arXiv
- Zora Zhiruo Wang, Jiayuan Mao, Daniel Fried, and Graham Neubig. Agent workflow memory. arXiv preprint arXiv:2409.07429 , 2024c. · arXiv
- Michael Wooldridge. An introduction to multiagent systems . John Wiley & Sons, 2009.
- Qingyun Wu, Gagan Bansal, Jieyu Zhang, Yiran Wu, Beibin Li, Erkang Zhu, Li Jiang, Xiaoyun Zhang, Shaokun Zhang, Jiale Liu, et al. Autogen: Enabling next-gen llm applications via multi-agent conversations. In First conference on language modeling , 2024.
- Qing Xiao, Xinlan Emily Hu, Mark E Whiting, Arvind Karunakaran, Hong Shen, and Hancheng Cao. Ai hasn't fixed teamwork, but it shifted collaborative culture: A longitudinal study in a project-based software development organization (2023-2025). arXiv preprint arXiv:2509.10956 , 2025. · arXiv
- Bin Xu. Ai agent systems: Architectures, applications, and evaluation. arXiv preprint arXiv:2601.01743 , 2026. · arXiv
- Wujiang Xu, Yu Wang, Kai Mei, Kaiqu Liang, Zhenting Wang, Mingyu Jin, Han Zhang, Shi-Xiong Zhang, Wenyue Hua, Sambit Sahu, et al. Memgym: a long-horizon memory environment for llm agents. arXiv preprint arXiv:2605.20833 , 2026. · arXiv
- Chen Yang, Jiashuo Tian, Ziqi Wang, Xinyin Liu, Meiru Ye, and Junjie Chen. Learning globally reusable skills for coding agents. arXiv preprint arXiv:2608.06153 , 2026a. · arXiv
- Chenyang Yang, Xinran Zhao, Tongshuang Wu, and Christian Kästner. Better harnesses, smaller models: Building 90% cheaper agents via automated harness adaptation. arXiv preprint arXiv:2607.08938 , 2026b. · arXiv
- John Yang, Carlos E Jimenez, Alexander Wettig, Kilian Lieret, Shunyu Yao, Karthik Narasimhan, and Ofir Press. Swe-agent: Agent-computer interfaces enable automated software engineering. Advances in Neural Information Processing Systems , 37:50528-50652, 2024.
- Shunyu Yao, Jeffrey Zhao, Dian Yu, Nan Du, Izhak Shafran, Karthik R Narasimhan, and Yuan Cao. React: Synergizing reasoning and acting in language models. In The eleventh international conference on learning representations , 2022.
- Shunyu Yao, Noah Shinn, Pedram Razavi, and Karthik Narasimhan. τ -bench: A benchmark for tool-agent-user interaction in real-world domains. arXiv preprint arXiv:2406.12045 , 2024. · arXiv
- Zhou Yu, Bin Bi, Shiva Kumar Pentyala, Shubham Mehrotra, Sougata Chaudhuri, Shilpa Bhagavath, Zeyuan Chen, Ran Xu, Phil Mui, James Zhu, et al. Co-evolving harnesses and models: On-policy correction helps weaker models catch up where imitation fails. arXiv preprint arXiv:2609.09134 , 2026. · arXiv
- Qizheng Zhang, Changran Hu, Shubhangi Upasani, Boyuan Ma, Fenglu Hong, Vamsidhar Kamanuru, Jay Rainton, Chen Wu, Mengmeng Ji, Hanchen Li, et al. Agentic context engineering: Evolving contexts for self-improving language models. arXiv preprint arXiv:2510.04618 , 2025a. · arXiv
- Zeyu Zhang, Quanyu Dai, Xiaohe Bo, Chen Ma, Rui Li, Xu Chen, Jieming Zhu, Zhenhua Dong, and Ji-Rong Wen. A survey on the memory mechanism of large language model-based agents. ACM Transactions on Information Systems , 43(6):1-47, 2025b.
- Andy Zhou, Kai Yan, Michal Shlapentokh-Rothman, Haohan Wang, and Yu-Xiong Wang. Language agent tree search unifies reasoning acting and planning in language models. arXiv preprint arXiv:2310.04406 , 2023. · arXiv
- Hao Zhou, Haichuan Hu, Tianyu Luo, Ye Shang, Chunrong Fang, Zhenyu Chen, Liang Xiao, and Quanjun Zhang. Self-evolving coding agents. arXiv preprint arXiv:2608.03392 , 2026. · arXiv
- Mingchen Zhuge, Wenyi Wang, Louis Kirsch, Francesco Faccio, Dmitrii Khizbullin, and Jürgen Schmidhuber. Gptswarm: Language agents as optimizable graphs. In Forty-first International Conference on Machine Learning , 2024.
Cited by
Sorted by citations
HARBOR: Automated Harness OptimizationPreprint
Sengupta, B., & Wang, J. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2604.20938 · Cited by 17
Generative to Agentic AI: Survey, Conceptualization, and Challenges
Schneider, J. (2025) · arXiv · doi:10.48550/arxiv.2504.18875 · Cited by 13
BraveGuard: From Open-World Threats to Safer Computer-Use AgentsPreprint
Feng, Y., Du, X., Deng, X., Ding, Y., Wen, M., Wang, Y., Xie, Y., Zheng, B., Tan, Y., Li, Y., et al. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2606.01166 · Cited by 7
Mao, X., Zhao, L., Wang, L., Qian, R., Huang, Q., Wang, W., Han, B., Zheng, X., & Wang, C. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2607.10526 · Cited by 8
Verifiable Manifest Signing and Transparency Enforcement for Secure MCP-Based LLM PipelinesPreprint
Jamshidi, S., Nafi, K. W., Dakhel, A. M., Khomh, F., & Hamdaqa, M. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2601.23132 · Cited by 4
PILOT in the Loop: Live Self-Improvement for Long-Horizon AgentsPreprint
Xiao, Y., Sun, Y., Wu, H., Hui, W., Da, W., Luo, Z., Chuan, M., Hu, Y., Li, W., & Jiang, C. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2608.26530 · Cited by 4
Silva, I. (2026) · Zenodo (CERN European Organization for Nuclear Research) · doi:10.5281/zenodo.20694341 · Cited by 3
Harness-MU: A Safe, Governed, and Effective Harness for Multi-User LLM AgentsPreprint
Fan, W., Nie, X., & Dai, Z. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2606.21856 · Cited by 3
JANUS: Foreseeing Latent Risk for Long-Horizon Agent SafetyPreprint
Xiong, Y. L., Hao, L., He, S., Deng, K., Wang, Y., & Li, L. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2607.19913 · Cited by 3
CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using AgentsPreprint
Delattre, B., Wang, C., & Cao, Y. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2607.29190 · Cited by 3
Deep Agentic Search for Repository-Level Code Question Answering: An Empirical StudyPreprint
Oskooei, A. R., Ilci, B., Kayim, A., Uzun, M. E., Berat, C. A. N., Kara, K. E., Orhan, O., & Aktaş, M. S. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2608.01507 · Cited by 3
ScientistTwo: Pioneering the Human Knowledge Frontier with Autonomous AI
Nam, J., Yoon, J., Pan, Y., Wang, Y., Meng, R., Ranganathan, P., & Pfister, T. (2026) · SuperIntelligence - Robotics - Safety & Alignment · doi:10.70777/si.v3i3.18734 · Cited by 2
"Skill Issues'': Data-Centric Optimization of Lakehouse AgentsPreprint
Schneider, N. R., Ghilardi, D., Piccinini, G., & Tagliabue, J. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2606.01185 · Cited by 2
Lin, H., Pao, H., Zhan, S., & Zheng, H. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2606.00288 · Cited by 2
FinanceComplexQA: Benchmarking Agentic Reasoning on Industrial-grade Financial DocumentsPreprint
Cheng, X., Zhang, S., Zhao, J. M., Yang, J., Wang, X., Zhou, M., Zhou, W., Guan, X., Li, X., Wu, Z. Z., et al. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2607.19238 · Cited by 2
LEGO-Anything: Coding Agents for 3D Scene ReconstructionPreprint
Li, X., Shi, P., Dong, M., Zhang, S., Xu, Z., Lee, D., Chang, S., Xiang, Y., Pan, L., & Jiang, J. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2609.36380 · Cited by 2
A survey of multi-agent geosimulation methodologies: from ABM to LLM
Padilla, V., & Dávila, J. A. (2026) · Academia AI and Applications · doi:10.20935/acadai8466 · Cited by 1
forge-harness: Engineering Methods for Robust AI Collaboration HarnessesPreprint
Kwon, S. (2026) · Zenodo (CERN European Organization for Nuclear Research) · doi:10.5281/zenodo.20397565 · Cited by 1
GraniKV: Asymmetric Granularity KV-Cache Paging for Multi-Agent Systems with Long Shared PrefixPreprint
Jeon, J., & Yoo, S. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2608.15584 · Cited by 1
Applying Anthropic Primitives at Large Enterprises: Harness Paradigm for Knowledge WorkPreprint
Salapa, G. J. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2608.20622 · Cited by 1
Nikitin, D. M., Borisov, N., Savchenko, M., Bobe, A. S., Meerson, M., Nesmelov, A. A., Harutyunyan, N., Paponova, S., Kravets, A., Zaitsev, A., et al. (2026) · bioRxiv (Cold Spring Harbor Laboratory) · doi:10.64898/2026.09.15.751825 · Cited by 1
Nguyen, T., Cao, T., Le, K., Nguyen, C.-D., Vo, Q., Ng, S.-K., & Kuen-Yew, B. H. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2609.29607 · Cited by 1
Hearsay: Can an Auditor Trust the Record a Deployed Agent Harness Writes?Preprint
Jiahong, D., Yang, Z., Shao, P., Ng, K., Liu, Z., Ju, C., He, Y., & Hu, B. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2609.32495 · Cited by 1
When Does Restricting a Coding Agent to execute_code Help? A Regime $\times$ Agent-Design Ablation
Yang, H., Yu, Q., & Desell, T. (2026) · arXiv · doi:10.48550/arxiv.2607.10569
“Liu et al. offer an architectural taxonomy of Claude Code’s primitives explicitly without ablation [19]; the Ver-dent technical report describes a single-vendor informal ablation without public methodology or regime stratification [33].”
Self-Harness: Harnesses That Improve Themselves
Zhang, H., Zhang, S., Li, K., Zhang, C., Chen, Y., Zhang, Y., Bai, L., & Hu, S. (2026) · arXiv · doi:10.48550/arxiv.2606.09498
“ReAct, SWE-agent, Claude Code, and SemaClaw/OpenClaw illustrate how such surrounding mechanisms shape long-horizon agent behavior and software-engineering performance [29, 28, 9, 36].”
Harness-of-Harness: Multi-Day Autonomous Software Development with Continual Improvement
Yan, H., Su, M.-L., Zhang, H., Li, Z., Zhang, C., Zhang, S., Chen, Y., Bai, L., & Hu, S. (2026) · arXiv · doi:10.48550/arxiv.2609.01481 · Cited by 5
Ning, X., Tieu, K., Fu, D., Wei, T., Li, Z., Bei, Y., Zou, J., Ai, M., Liu, Z., Li, T.-W., et al. (2026) · arXiv · doi:10.48550/arxiv.2605.18747
Redefining AI Red Teaming in the Agentic Era: From Weeks to HoursPreprint
Dheekonda, R. S. R., Pearce, W., & Landers, N. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2605.04019
forge-harness: Engineering Methods for Robust AI Collaboration HarnessesPreprint
Kwon, S. (2026) · Zenodo (CERN European Organization for Nuclear Research) · doi:10.5281/zenodo.20397566
Gajjar, P., Mamaghani, A., Bharadia, D., & Shah, V. K. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2606.05001
Ge, H., Jia, Y., Li, Y., Chen, Z., Shi, L., Han, L., Zhou, G., & Huang, R. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2606.08542
Silva, I. (2026) · Zenodo (CERN European Organization for Nuclear Research) · doi:10.5281/zenodo.20694340
VectorizationLLM: Smart Vectorization Based AI AssistantPreprint
Duke, R. (2026) · arXiv (Cornell University) · doi:10.13140/rg.2.2.28329.35680/3
The Application of Large Language Models in Vertical Domains: learning assistance
Lin, D., & Li, P. (2026) · Academic Journal of Science and Technology · doi:10.54097/sk4p8931
Co-design of LLM-based preference agents: participation may drive overtrustPreprint
Fell, M. J. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2607.21757
Where Is the Tradeoff in Using Third-Party API Routers for Agentic Software Development?Preprint
Fu, D., Li, J., Jiang, X., & Dong, Y. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2607.23624
MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM AgentsPreprint
Chen, J., Gao, Y., Li, Y., Liu, Z., Zhang, Y., & Zhang, J. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2608.03844
Agentic Nesting: A New Methodology for Existing Enterprise Application Integration and ServicesPreprint
Wang, X., Li, K., Ling, X., Yin, G., Zhang, L., Wu, J., Lei, W., Xu, J., Wang, A., Zhang, F., et al. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2608.05159
Taju, S. W., Tangka, G. M. W., & Chrisanti, I. R. (2026) · Advances in Human Resource Management Research · doi:10.60079/ahrmr.v4i3.1008
He, Z., Liang, C., & Liang, H. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2608.14093
Ong, T. K. C., & Xiao, S. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2608.17504
VibeJam: A User Study Platform for Web Development with AgentsPreprint
Balepur, N., Baumler, C., Chen, V., Choi, E., Rudinger, R., & Boyd-Graber, J. L. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2608.29889
Vulnerabilities in Personalization: Assessing Health Privacy Risks in ChatGPT Logs and MemoryPreprint
Zaman, S. M. M., & Hoque, M. M. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2609.14697
Trust propagation and structural containment in Multi-agent LLM pipelinesPreprint
Safin, T. H., Zisad, S. N., Shatabda, S., & Hasan, R. (2026) · arXiv (Cornell University)
Single-Cell Study Designs Are Systematically Underpowered for Small-Effect GenesPreprint
Crampton, C., Fawad, S., Clark, T., Dash, H., Kövér, B., Cotton, G., Lee, D., Duff, E. P., Bottolo, L., Matthews, P. M., et al. (2026) · bioRxiv (Cold Spring Harbor Laboratory) · doi:10.64898/2026.09.17.752063
GenAI, Emotion, and Computing Education: A Case for Hope in the Face of AI Encroachment
Ali, M. (2026) · ACM Transactions on Computing Education · doi:10.1145/3849389
Singh, A. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.7549740
Doing More with Less Tokens: Hierarchical Reinforcement Learning for Efficient Coding AgentsPreprint
Li, H., Jiang, L., Huang, Z., Yang, M., & Peng, X. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2609.38885
Tanaka, K., Katagiri, T., Nakano, T., & Mochizuki, Y. (2026) · ChemRxiv · doi:10.26434/chemrxiv.15009760/v1
Tanaka, K., Katagiri, T., Nakano, T., & Mochizuki, Y. (2026) · ChemRxiv · doi:10.26434/chemrxiv.15009760/v2
AgSpec: Pushing the Limits of Retrieval-Based Speculative Decoding in Coding Agent PipelinesPreprint
Lee, S., Cho, S., Lim, S., & Kwon, Y. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2610.01108
Tanaka, K., Katagiri, T., Nakano, T., & Mochizuki, Y. (2026) · ChemRxiv · doi:10.26434/chemrxiv.15009760/v3
Aligning Model-Driven Engineering and Spec-Driven Development for Agentic AI Software Engineering.
Cabot, J., Combemale, B., Bruel, J., Clarisó, R., de Lara, J., Ruscio, D. D., & Mussbacher, G. (2026) · The Journal of Object Technology · doi:10.5381/jot.2026.25.2.c1
Context Inflation: The Hidden Cost of AI Coding Agents in Real-World Repositories
Turchi, T., & Palazzo, L. (2026) · International Conference on Information Technology for Social Good (GoodIT) · doi:10.1145/3794786.3830732
Mandl, P., Mandl, P., & Häusl, M. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2610.06255
Incremental Open-Ended Deep Research with Structured HarnessPreprint
Chen, M., & Bao, H. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2610.11566
The rise of agentic AI in drug discovery from static tools to autonomous virtual scientists
Zhao, D., Fang, M., Mao, L., Zhu, Y., Su, Q., Shi, H., Xu, H., Li, L., Hou, T., & Hsieh, C.-Y. (2026) · npj Drug Discovery. · doi:10.1038/s44386-026-00075-0
The Future of AI-assisted Physics: Discovering, Verifying and Organizing Results via FormalizationPreprint
Krippendorf, S., Sarra, L., & Tooby‐Smith, J. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2610.14059
L3M: A Verifiable Harness and Runtime for Self-Extending and Self-Improving AgentsPreprint
Eisenach, C., George, R. J., Quenneville-Bélair, V., Gwimm, K., & Foster, D. P. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2610.19591
forge-harness: Engineering Methods for Robust AI Collaboration HarnessesPreprint
Kwon, S. (2026) · Zenodo (CERN European Organization for Nuclear Research) · doi:10.5281/zenodo.22542168
CTXAgent - Self-Controlled Context Management of LLM AgentsPreprint
Busch, M., Tacke, M., Aydin, R. C., Feiler, C., & Cyron, C. J. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2610.34425
Hidden in Plain Sight: an Empirical Study about The Instruction Stacks of Coding AgentsPreprint
Paixão, F. P., Tavares, D., Almeida, E. B., & Ahmed, I. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2610.37332
kw-bench: Breaking Frontier Harnesses on Real-World TasksPreprint
Salapa, G. J. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2610.36405
Fine-Tuning AraBert with BiLSTM and Layer-Freezing Strategies for Arabic AI-Generated Text Detection
Khalil, H., & Altweel, H. (2026) · المجلة الدولية للعلوم الهندسية وتقنية المعلومات. · doi:10.36602/ijeit.v16i1.732
When Skills Tell Agents Not to Ask: A Large-Scale Study of Oversight Directives in Agent SkillsPreprint
Sanko, T., & Tian, Y. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2610.37734
Metadata
- Authors
- Liu, J., Zhao, X., Shang, X., & Shen, Z.
- Affiliations
- Mohamed bin Zayed University of Artificial Intelligence (AE)
- ORCID
- Shang, Xinyi
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2026
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 2604.14228
- OpenAlex
- W7154745240
- Cited by
- 2
- References
- 0
- Citations by year
- 2026: 2
- Type
- posted content
- Language
- en
- Open access
- green
- doi.org
- Licence
- Locations
- arXiv (Cornell University) (cc-by-nc-sa)
- Topics
- Physical Sciences › Computer Science › Software › Advanced Software Engineering Methodologies
- Physical Sciences › Computer Science › Artificial Intelligence › Artificial Intelligence Applications
- Physical Sciences › Computer Science › Information Systems › Software Engineering Techniques and Practices
- Keywords
- Claude Code, agent architecture, OpenClaw, privacy, contextual adaptability, permission system
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review