Under the hood

Detailed reference for Agent Harbor: capabilities, supported agents and terminals, filesystem providers, and quick start.

Core capabilities

Sandboxed execution

Every agent runs in an isolated environment:

• Read-only baseline — Host filesystem is protected
• Copy-on-write overlay — Changes are captured, never written to your actual files
• Sensitive areas shielded — Credentials directories blocked by default
• Network isolation — Egress disabled by default, opt-in when needed

Parallel agent execution

Launch multiple agents on the same task and keep the best result:

• Each agent works in its own filesystem branch
• No conflicts between concurrent sessions
• Compare outputs and cherry-pick the best solution

Time-travel debugging

Rewind to any point in an agent’s session:

• Filesystem snapshots at logical boundaries (per command, per tool use)
• Branch from any snapshot with new instructions
• Compare execution paths across branches

Session recording

Every session is captured for replay and analysis:

• Terminal I/O recording with exact visual playback
• Filesystem state at each snapshot point
• Branch points for intervention

Filesystem snapshot providers

Supported agents

Supported terminal environments

Multiplexers

tmux is the recommended multiplexer. Zellij and GNU Screen may have UI rendering issues.

Terminal emulators

Editor terminals

Quick start

Install via Nix

nix profile install github:blocksense-network/agent-harbor

Verify installation

ah health

Start an agent

ah agent start --agent claude --prompt "Add unit tests"

Or launch the interactive TUI

ah

See Installation for detailed setup and First Task for a complete walkthrough.