Project Info
Inspiration
Modern coding Agents are already capable. They plan, use tools, test, review, and repair their work. A reusable workflow can help, but it can also slow the model down, create rituals, and introduce new mistakes. Timeless Harness began as a broad method for improving every Agent task. Its own evaluation contradicted that idea. The older wrapper won fewer recorded pair preferences than the native condition and added unnecessary process. I chose to remove the failed design instead of protecting it. That left one useful question: Does this reusable Agent workflow still earn its cost?
What it does
Timeless Harness governs Skills, instructions, memory rules, evaluators, and repair methods. It does not wrap ordinary work. It has two parts: A small Skill gives an Agent a lifecycle policy: keep, narrow, revise, retire, or unresolved. A Python Governor makes native-versus-workflow comparisons inspectable. The Governor can: freeze the task, Skill, rubric, starting workspace, evaluator, and cost rule before outputs exist; run a native baseline and workflow treatment with the same model settings; keep the two executions in separate random temporary roots; hash captures, telemetry, final workspaces, file contents, and file modes, then detect later changes; reject missing telemetry, non-finite cost rules, sensitive workspace files, and unsupported sandbox access; prepare a condition-label-blind packet containing answers, artifact manifests, and optional evaluator results; combine reviewer quality with tokens and wall time; return a clearly labeled provisional lifecycle candidate. A single pair is never presented as proof. Final decisions require repeated representative cases and a stopping rule chosen before seeing results. The self-audit The public repository includes the complete evidence that caused Timeless to retire its first design: 4 fixed tasks; 12 paired trials; 24 outputs with opaque IDs; 72 rubric score rows; 36 recorded pair preferences from three grader result sets; grader notes, revealed mapping, and SHA-256 checksums. Anyone can run one zero-credit command to verify 44 files and recompute the result: The recurring failure was concrete. The old wrapper added an arbitrary three-pass release ritual without improving the answer. That result removed routine invocation, fixed process stages, persistent workspace ceremony, and general superiority claims. The evidence supports retiring the tested old wrapper. It does not prove that the new narrow Governor improves unseen tasks. That claim remains unresolved and is stated plainly in the product. How I built it The Governor uses only the Python standard library. The judge path makes no model call and needs no credentials. Codex was the main engineering environment. I used it to reverse the submission requirements into acceptance checks, implement the Governor, test failures, inspect the recovered raw evaluation package, audit privacy, simplify the repository, and keep the README, Skill, CLI, evidence, and submission story consistent. GPT-5.6 Sol with ultra reasoning was used through Codex for implementation, adversarial review, evidence analysis, security review, and product critique. Separate fresh-context review passes found real defects, including a NaN cost-policy bypass, mutable run evidence, incomplete workspace hashing, weak condition separation, and a misleading synthetic Demo. Those defects were repaired, covered by tests, or removed. The human author set the product goal, privacy boundary, evaluation policy, and final release decision. Challenges The first challenge was resisting the urge to make a philosophy look like a product. The useful part had to change a real decision. The second was using a strong baseline. Timeless should not win because the native Agent was artificially restricted. The prospective runner therefore fixes the model settings and starting artifacts, while the treatment changes only the reusable Skill. The third was keeping the evaluation honest. Hashes are not signatures. Separate temporary roots are not operating-system isolation. A blind grader can still be wrong. The repository states these limits instead of turning risk reduction into a security claim. The fourth was allowing deletion to count as progress. The best feature of the first prototype was the evidence that showed it should not survive. What I learned A workflow should not survive because it sounds wise, took effort to create, or makes an Agent look busy. As models improve, instruction debt becomes a product problem. Every reusable rule should have a claim, evidence, scope, cost, and retirement condition. Timeless Harness does not promise to make every Agent smarter. It makes the outer workflow earn the right to stay. A tie with more process is a loss.
Timeless Harness
An evidence-led governor for reusable Agent workflows.
![]()
Modern Agents already plan, code, research, test, and review well. Adding a workflow can improve them. It can also slow them down, create rituals, and introduce new mistakes.
Timeless Harness asks one question:
Does this reusable Agent workflow still earn its cost?
It governs Skills, instructions, memory rules, evaluators, and repair methods. It does not wrap ordinary work. The native Agent works first. Timeless is used only when the reusable method itself needs review.
The product in one minute
Timeless has two parts:
SKILL.mdgives an Agent a small lifecycle policy:keep | narrow | revise | retire | unresolved.tools/harness_governor.pycreates a matched native-versus-workflow screen, seals the evidence, prepares a blind review, measures cost, and returns a provisional lifecycle candidate.
Reusable workflow makes a claim
|
freeze task, rubric, workspace, model, and cost rule
|
run native baseline and workflow treatment separately
|
blind review final answers, artifact manifests, and evaluator results
|
combine quality with tokens and time
|
keep | narrow | revise | retire | unresolved
A single pair is only a screen. It is not proof. A final lifecycle decision needs repeated representative cases and a stopping rule chosen before results are seen.
Proof through self-correction
The first Timeless prototype wrapped routine Agent work. Its own evaluation showed that this was worse than leaving a strong model alone.
The complete, privacy-safe evidence is published in examples/self-audit. It includes 4 tasks, 24 opaque outputs, 72 score rows, 36 blind preferences, grader notes, the revealed mapping, and checksums.
Recompute it without an API key, network access, or model credits:
RESULT="$(mktemp -d)/timeless-self-audit"
python3 tools/harness_governor.py self-audit \
--evidence examples/self-audit \
--output "$RESULT"
Expected output:
EVIDENCE: VERIFIED 44 FILES
PREFERENCES: NATIVE 19 | TIMELESS 6 | TIES 11
MEAN SCORE: NATIVE 3.991 | TIMELESS 3.889
FATAL OMISSIONS: NATIVE 0 | TIMELESS 0
UNNECESSARY PROCESS: NATIVE 0 | TIMELESS 9
DECISION: RETIRE TESTED GENERAL WRAPPER
CURRENT GOVERNOR: UNRESOLVED
The recurring failure was concrete. The old wrapper added an arbitrary three-pass release ritual without improving the answer. Timeless therefore removed routine invocation, fixed process stages, persistent workspace ceremony, and general superiority claims.
This proves that the evidence can reproduce the decision to retire the tested old wrapper. It does not prove that the new narrow Governor is better. That claim remains unresolved. See EVALUATION.md.
Timeless did not discard truth-seeking, causal repair, whole-artifact finishing, or learning. It changed their role. They remain optional depth for disputed evidence, repeated failure, and durable learning decisions instead of becoming mandatory ceremony around every task. The Governor keeps those reusable rules accountable to observed value and cost.
Why this is not another workflow pack
| Product | Main job |
|---|---|
| Codex or Claude Code | Do the task |
| Workflow packs such as Superpowers | Add reusable ways to do tasks |
| Eval frameworks | Measure outputs |
| Timeless Harness | Govern whether a reusable workflow should survive, change, or be removed |
Timeless can use an evaluator, but it is not an eval framework. Its concern is the lifecycle of instruction debt around an increasingly capable Agent.
Judge test path
Requirements: Git and Python 3.10 or newer. The self-audit and test suite use only the Python standard library.
git clone --branch v0.1.0 --depth 1 \
https://github.com/FuturizeRush/timeless-harness.git
cd timeless-harness
RESULT="$(mktemp -d)/timeless-self-audit"
python3 tools/harness_governor.py self-audit \
--evidence examples/self-audit \
--output "$RESULT"
python3 -m unittest discover -s tests -v
This path makes no model call and needs no credentials.
Install the Skill
Both commands install the pinned v0.1.0 release and refuse to overwrite an existing destination.
Codex
(
set -eu
VERSION=v0.1.0
DEST="${CODEX_HOME:-$HOME/.codex}/skills/timeless-harness"
[ ! -e "$DEST" ] || { printf 'Refusing to overwrite: %s\n' "$DEST" >&2; exit 1; }
mkdir -p "$(dirname "$DEST")"
trap 'rm -rf "$DEST"' EXIT HUP INT TERM
git clone --filter=blob:none --no-checkout \
https://github.com/FuturizeRush/timeless-harness.git "$DEST"
git -C "$DEST" checkout --quiet --detach "$VERSION^{commit}"
trap - EXIT HUP INT TERM
)
Start a new Codex session, then say:
Use $timeless-harness to review whether this reusable workflow should be kept, narrowed, revised, or retired.
Claude Code
(
set -eu
VERSION=v0.1.0
DEST="$HOME/.claude/skills/timeless-harness"
[ ! -e "$DEST" ] || { printf 'Refusing to overwrite: %s\n' "$DEST" >&2; exit 1; }
mkdir -p "$(dirname "$DEST")"
trap 'rm -rf "$DEST"' EXIT HUP INT TERM
git clone --filter=blob:none --no-checkout \
https://github.com/FuturizeRush/timeless-harness.git "$DEST"
git -C "$DEST" checkout --quiet --detach "$VERSION^{commit}"
trap - EXIT HUP INT TERM
)
Start a new Claude Code session, then invoke:
/timeless-harness Review whether this reusable workflow should be kept, narrowed, revised, or retired.
Review any third-party Skill before consequential use.
Run a prospective screen with Codex
The live path is optional. It spends two Codex runs. Use only trusted local inputs.
Prepare a task, the Skill under review, a rubric, and one starting workspace:
python3 tools/harness_governor.py prepare \
--task /path/to/TASK.md \
--skill /path/to/SKILL.md \
--rubric /path/to/RUBRIC.md \
--source /path/to/start-workspace \
--output /tmp/timeless-experiment \
--max-cost-ratio 1.25
An optional trusted executable can evaluate each final workspace:
--evaluator /path/to/read-only-evaluator
The evaluator receives the candidate workspace as its current directory. If it changes the workspace, the run fails.
Run the matched pair:
python3 tools/harness_governor.py run \
--experiment /tmp/timeless-experiment \
--model gpt-5.6-sol \
--reasoning ultra \
--sandbox workspace-write \
--run-id screen-1 \
--allow-live
Prepare the blind packet:
python3 tools/harness_governor.py blind \
--experiment /tmp/timeless-experiment \
--run-id screen-1
Give only runs/screen-1/grader/ to a reviewer. Keep private/ hidden. After the reviewer completes a verdict JSON:
python3 tools/harness_governor.py decide \
--experiment /tmp/timeless-experiment \
--run-id screen-1 \
--verdict /path/to/verdict.json
The terminal labels the result PROVISIONAL SCREEN and CANDIDATE. It never presents one pair as a final lifecycle verdict.
Safety and evidence limits
- Live calls require
--allow-live, so the tool cannot spend credits silently. danger-full-accessis rejected.- Common credential files such as
.env, auth files, and private keys are rejected before the workspace is copied. - Conditions run in separate random temporary roots. The first root is removed before the second exists. This reduces accidental cross-condition reading but is not an operating-system isolation guarantee.
- Final workspaces, captures, telemetry, and file modes are hash-sealed. The tool detects later mismatches. These hashes are not signatures and do not prove who produced the evidence.
- External evaluators receive a detached candidate copy, no Codex authentication, and no candidate capture path. Mutation of the detached copy fails the run.
- Blind packets include final answers, anonymous artifact manifests, and optional evaluator results. They do not decide whether the evaluator itself is valid.
- Local live mode is for trusted code. Use an external sandbox for untrusted code.
Supported and tested
- Skill host tested: Codex CLI
0.144.1on macOS, 2026-07-16 - Compatibility target tested: Claude Code
2.1.157on macOS, 2026-07-16 - Governor: Python
3.10+, standard library only - Local tests: Python
3.14.5, Git2.50.1, macOS - Live Governor runner: Codex only
The Markdown Skill may work on Windows and Linux. Those platforms are not yet verified.
Built with Codex and GPT-5.6
Codex was the main engineering environment. It was used to reverse the submission requirements into acceptance checks, implement the Governor, run tests, audit the repository, review claims, inspect the raw evaluation bundle, and remove features that did not earn their cost.
GPT-5.6 Sol with ultra reasoning was used through Codex for implementation, adversarial review, security review, evidence analysis, documentation, and the product decision to retire the original wrapper. Separate fresh-context review passes found concrete defects, including a NaN cost-policy bypass and mutable run evidence. Those defects were repaired and added to the test suite.
The human author set the product goal, privacy boundary, evaluation policy, and final release decision. No private code, credentials, conversation text, or project identity is included.
Repository map
SKILL.md small runtime lifecycle policy
tools/harness_governor.py standard-library Governor CLI
tests/ integrity and lifecycle contract tests
examples/self-audit/ complete published self-correction evidence
EVALUATION.md results, limits, and next validation
references/ optional operational depth
docs/PHILOSOPHY.md human and engineering constitution
agents/openai.yaml Codex interface metadata
The broad philosophy lives in docs/PHILOSOPHY.md. It is not loaded into routine work. Every runtime instruction must earn its context cost.
License
Analysis
View
Metric
- 1
Figures cover GitHub contributors during the hackathon window. A co-authored commit counts in full for each author, so per-member totals add up to more than the whole-team figures.
Technology
- PythonIn code
1 of 1 appear in the indexed code.
AI coding agents
No AI coding agent signals were found in this repository.
Detected from committed agent config files and commit authorship. Absence of a signal is not proof an agent was unused.
Codebase size
Source size
212 KB
Source files
50
Counts recognized source files only; vendored directories, binaries and lockfiles are excluded, so this is smaller than the repository on disk.
Repository
FuturizeRush/timeless-harness
61 files · 2.9 MB · @ c6ca27c
Structure
Application logic
10 files · 16%Domain rules, services and shared utilities.
Supporting
Layers are inferred from where files sit in the tree, not from reading the code. A project that names its directories unconventionally will read oddly here — open the file browser to check anything the diagram implies.
Languages
- Markdown59%
- Python40%
- YAML1%
Share of indexed source by file size. Binary and vendored files are excluded.
This project’s features have not been analysed yet.
Export this project's context (description, README, evidence, key source files) to chat with an AI agent elsewhere.