An agent cli provides a sandbox, with permission systems and auto command classifiers. That’s part of the harness.