agent-harness

This is an automation wrapper whose intended function is to fetch and execute checkpoint validators. It contains no evident direct malware such as credential theft, exfiltration, persistence, or sabotage. However, it has a significant supply-chain security risk because the default runner comes from the mutable main branch and is executed with bash, while cached repositories are trusted without integrity verification. Runner and checkpoint refs should be immutable and verified by commit or checksum, and checkpoint paths should be constrained within the fetched repository.