Search papers, labs, and topics across Lattice.
This paper explores the implementation of off-the-shelf security controls in commercial AI coding agents through a custom agent harness called SHarD (Secure Harness Distribution). By employing a phased testing methodology across various configurations, the authors demonstrate that security measures like OS sandboxing, skill scanning, and tool restriction can be effectively distributed via a single installation command, achieving a perfect score in security efficacy. The findings reveal that while model non-determinism can lead to inconsistent security outcomes, SHarD maintains equivalent performance to directly installed security configurations, highlighting its potential for scalable security in AI deployments.
SHarD can embed and distribute robust security controls for AI coding agents with a single command, achieving perfect security efficacy without compromising performance.
AI coding agents are being adopted at historic speed, yet security and risk concerns remain the primary barrier to scaling agentic AI across organizations. Existing security controls for coding agents are not systematically distributed to engineering teams, and vendor-native solutions introduce ecosystem dependencies that may not suit every deployment context. This paper investigates whether off-the-shelf security controls can be implemented on commercial AI coding agents and scaled to a distributed user base via a custom agent harness. A phased testing methodology was applied across four agent configurations --- two commercial agents with and without controls, a baseline harness, and a security-hardened harness --- using a 23-test suite derived from the OWASP Top 10 for Agentic Applications. SHarD (Secure Harness Distribution), a distributable harness built on the Pi agent harness, demonstrated that three categories of security controls --- OS sandboxing, skill scanning, and tool restriction --- can be embedded and distributed via a single install command while retaining equivalent efficacy to direct installation on commercial agents. SHarD achieved an adjusted score of 100\%, matching the best securely configured commercial agent, with no regression across any test category. Notable observations include evidence that model non-determinism produces inconsistent security outcomes and that autonomous agent behavior can cross system boundaries in ways that OS sandboxing directly mitigates. Initial characteristics toward a control harness fitness framework are proposed, and a third research question is identified for future investigation.
