The open source projects people use to build and run AI agents, sorted by the job they do. Stars show attention, not quality. Licence and activity tell you more about whether a project is safe to build on.
Stars gained in the four weeks from 21 September to 18 October 2026. Large projects lead on raw gain. Small, new projects lead on growth rate.
Every agent is a model inside a harness. An open, auditable stack that no single vendor controls needs as much of the work as possible to live in the harness, as files and code that people can read, version and run on any model. Each row in this guide shows which jobs its harness takes from the model.
Changing the harness did not change the average score. It changed results by task type, and it changed cost. One researcher ran two models on the same 80 private coding tasks. Each model ran in its maker's own harness (Claude Agent SDK, OpenAI Codex SDK) and in a neutral one (LangChain Deep Agents).
So in this study the harness mattered most for fit to the task and for cost, which an open harness can control. It is one single-author preprint, not yet peer reviewed.
Source: Arjmandi, "Harness or Model?", arXiv 2609.11987, Sep 2026
Saved skills can move ability from a strong model into the harness, but a bad skill can hurt.
Hermes Agent and Stagehand build this idea in. Hermes writes skill files from experience, and Stagehand caches browser actions. Their own docs describe the features but do not measure them.
Sources: Guo et al., "Skill-DisCo", arXiv 2606.26669, Jun 2026 · Dong et al., "Agent Skills Can Be Harmful", arXiv 2608.11888, Aug 2026
Some builders keep the harness thin on purpose. AWS calls Strands "model-driven": the model directs its own steps and tool calls. Anthropic advises "finding the simplest solution possible, and only increasing complexity when needed." Both designs bet that better models will need less harness.
Sources: AWS, "Introducing Strands Agents" · Anthropic, "Building effective agents"
Some projects move work back into the model. Agent Lightning uses reinforcement learning to train the model inside an existing agent on that agent's own runs. The procedure the harness learned becomes model weights.
Sources: Agent Lightning, arXiv 2508.03680 · v1.0 technical report, arXiv 2608.17528
Researchers now treat the model and harness as one system. A June 2026 survey splits the harness into six jobs: observation, context, control, action, state and verification. It argues that agent quality comes from how the model, the harness, the task and the evaluation fit together.
Source: Guo et al., "From Question Answering to Task Completion", arXiv 2606.20683
One way to build agents that are secure, auditable, international and not tied to one company, using projects in this guide. This is a starting map for discussion, not a tested design.
| Layer | Open parts | Why it fits |
|---|---|---|
| Model | Open-weight models from several countries (DeepSeek, Qwen, Kimi and GLM from China, Mistral from France, Llama and gpt-oss from the US) behind a router | The model becomes a part you can swap. No single lab can switch the stack off. |
| Protocols | MCP for tools, A2A for agent-to-agent calls | Both are now governed by Linux Foundation bodies, not by the companies that created them. |
| Control and state | LangGraph or Microsoft Agent Framework (US), Haystack (Germany) | Saved state lets a person pause, inspect, replay and resume every run. |
| Skills | Skill folders in the open Agent Skills format, as Hermes Agent and the Claude Agent SDK use | Procedures are plain files you can review, version and share between harnesses. |
| Memory | Mem0, Graphiti, Hindsight, Letta | Memory lives in your own database, not in a vendor account. |
| Guard | NVIDIA OpenShell, E2B, one container per agent (as in NanoClaw) | The harness, not the model, decides what files, network and secrets an agent can reach. |
| Audit | OpenTelemetry traces from the control layer, with cost records (as in Paperclip) | Each action and each dollar can be traced to an agent, a person and a policy. |
| Team layer | QM, Paperclip, Onyx, n8n (Germany) | Accounts, permissions and budgets for an organization, on infrastructure you run. |