Dimensional Frame Harness · a builder's showcase
I study how coordination fails. Agents fail the same way.
A short walk through how I got here, and then the harness itself, running on real code. It reads an agent's whole run and blocks the harm that no single step is. Here is the road to it, the thing running, and the one lesson worth taking away.
02 · what I built
I wrote the patterns down, and made them run.
What we tested
- Whether those failure-patterns could be made enforceable, not just described.
What we learned
- They can: a suite of five kinds of integrity on a floor of precision, meaning, structure, data, evaluation, and time.
- Made executable, so a machine holds a live system to them, not just a person reading a document.
- The harness is the layer on top that puts them to work on a running agent.
05 · watch it run
So I built a harness that reads the whole run.
Here it is, running on real code. The run builds on the left and the monitor evaluates it on the right. The one thing to watch for: the send that carries a sensitive record out of the system, which every step approved.
Press Run the agent to start. The monitor evaluates each action as the agent takes it, and logs one record for every action whether or not a rule fires.
Per-action gate · what the field builds
idleDimensional Frame Harness
idleReview queue · what no rule could rule on
- empty
08 · the lesson
Read the run, not just the step.
Agent safety is a coordination problem. Do not only gate actions one at a time. Read the run as a whole, and hold each action to what the agent said it was doing. That is the mistake you now do not have to make.
The standards behind it
The demo above is the real deterministic monitor from the DFH prototype, running in your browser, on a scenario modeled on the shape of the July 2026 Hugging Face incident: an agent moving sensitive material out, then re-routing through a channel no rule covers. The verdicts are the code's own output. It is not a claim that this harness would have stopped that breach.
How the harness reads an agent's operating stance from its own language is a separate method, held. What runs here is the deterministic layer that works today: it blocks what the standards cover, and surfaces what they do not.