herness — a verification-first agent harness. An agent runs inside an isolated room with its own kernel, no shell, and six tools with declared closures. Access decisions are made by a policy, not by the code that uses it, and the policy is proved in Lean. Every claim carries an evidence type, every gate can fail, and every gate is tested with a planted defect.
