arXiv: HarnessRisk: A Lifecycle-Oriented Benchmark for Agent Harness Safety

The publication introduces HarnessRisk, a new benchmark framework designed to evaluate the safety of AI agent harnesses—the software layers that connect large language models to external tools and environments. Rather than focusing on model outputs alone, this work assesses risks across the entire agent lifecycle, including planning, tool selection, execution, and error recovery. It provides a structured methodology for identifying failure modes such as prompt injection, unsafe tool calls, and unintended cascading actions, which are critical for operational AI systems.

This change primarily affects organizations deploying autonomous or semi-autonomous AI agents in regulated sectors, including financial services, healthcare, and critical infrastructure. Compliance teams in these industries must now consider that existing model-level safety testing may be insufficient; the harness itself introduces new attack surfaces and accountability gaps. Regulators are increasingly scrutinizing end-to-end system behavior, so any firm using agents for customer-facing decisions, data processing, or internal workflow automation should treat this benchmark as a reference point for upcoming audits.

Compliance teams should immediately review their current AI risk assessment frameworks and map them against the lifecycle stages outlined in HarnessRisk. They should update internal testing protocols to include harness-specific adversarial scenarios, document mitigation controls for tool misuse, and ensure that incident response plans cover agent-level failures. Proactively aligning with this benchmark will help organizations demonstrate due diligence and reduce exposure to enforcement actions as EU AI Act obligations expand to cover system-level safety.