When building
@Muse Code, the team spent a lot of time testing and hardening security, iterating for many weeks on guardrails and built-in skills to make the agent safer to use. It's great to see our robust security measures validated by this paper.
"We demonstrate that local agents in popular harnesses such as Claude Code, Codex, OpenCode, Antigravity, Grok Build, Muse Code, ZCode and Kimi Code can in fact tamper and delete entire traces when deployed in full-access mode across all three settings, with Muse Code being significantly safer."
(Holds true even on --yolo mode!)
Full text: