arXiv: HarnessSafe: Evaluating Safety Across Persistent Carriers in Agent Harnesses

A new research paper, HarnessSafe, has been published on arXiv, introducing a framework for evaluating the safety of AI agent harnesses, which are the software layers that connect large language models to external tools and data. The paper specifically addresses the risks posed by persistent carriers, meaning long-term memory, state, and context that an agent retains across multiple interactions. It proposes a testing methodology to identify when these carriers can be manipulated to cause harmful actions, such as data exfiltration or unintended system changes, even if the underlying model is aligned.

This publication is directly relevant to any organization deploying autonomous AI agents, particularly in regulated sectors like finance, healthcare, and critical infrastructure. Compliance teams in these areas must recognize that existing model-level safety tests are insufficient; the harness itself introduces new attack surfaces. The paper signals that regulators and auditors will likely begin expecting evidence of harness-level safety validation, not just model behavior checks.

Compliance teams should immediately review their AI governance frameworks to include harness-specific risk assessments. Next steps include inventorying all agent deployments, identifying which ones use persistent memory or state, and running adversarial tests similar to those proposed in HarnessSafe. Additionally, teams should update their incident response plans to account for attacks that exploit carrier persistence, and begin tracking this research as a potential basis for future regulatory guidance on agentic AI safety.