Agent = Model + Harness.

The Paradox

You're the PM. You did the work. Two quarters of it. Discovery, specs, edge cases handed to engineering in tidy tickets. Your data, your embeddings, your carefully tuned prompts. You even wrote evals. You were one of the responsible ones.

The feature shipped. Then you used it.

It breaks the moment a request is ambiguous.

It forgets what it was told six turns in.

It answers from a script.

And one afternoon someone points Claude Code at the same job. Two MCP servers, zero product context. It quietly runs circles around the thing you built.

Your product owns the data, the domain, the users.

The general tool owns none of it.

It should not win. It does.

The gaps that made your feature feel dumb were product calls. The kind that used to be yours.

Hold that.

MCP & Chill

Faced with that afternoon, a reasonable person reaches an obvious conclusion: stop competing. Expose your data over MCP, call yourself agent-friendly, and let the general agents do the work. Half the industry is reaching the same conclusion with you.

Before you take the exit, look at what you'd be signing.

⤢ click to enlarge AGENT MODEL theirs HARNESS three layers INSTRUCTION prompts · skills theirs EXECUTION tools · actions theirs, via MCP MEMORY context · your data yours, for now
ModelThe labs always had it. Not yours.
InstructionTheir defaults, their orchestration, their idea of how your workflow runs.
ExecutionHanded over via MCP. That was its entire point.
MemoryYour data, permissions, workflows. Yours, for now.
An agent, decomposed. Three of the four boxes are already spoken for.

An agent is a model plus a harness: the environment that turns a text generator into something that acts.

The labs always had the model. MCP hands them your execution layer; that was its entire point. And once your product is consumed from inside their harness, instruction is theirs too: their defaults, their orchestration, their idea of how your workflow should run.

Shipping an MCP server instead of a product isn't dodging the fight. It is the surrender, formalized. You've volunteered to become the memory layer: one box of four, and the only one you hold by inertia, not craft.

To be clear: ship the MCP server. Agents are a distribution channel now, and being unreachable is worse. The surrender is the strategy that stops there, the roadmap that shelves native AI because “the agents will handle it.”

The problem was never the MCP. It's the chill.

Kept in its place, the server even pays you back: watch a general agent drive your tools, and it will show you, for free, exactly which decisions your native product needs to make.

Salesforce has already made this walk, on the record:

Oct 2024
“Copilot is a flop… Clippy 2.0, anyone?” Benioff, selling Agentforce as the smartest agent in the room.
The claim: the entire harness is ours
Jun 2025
Agentforce 3 ships MCP support, in the name of interoperability. The harness they claimed was theirs alone, they now let in.
Execution: opened to external agents
2026
The pitch is now “the operating system for the agentic enterprise”: the place where humans and agents land. The surrender is in the company's own language now, and its direction.
Transition complete: memory is the pitch

Eighteen months, smartest-in-the-room to landing zone. So the moat is that your customer's world is already stuck with you.

The labs are already shipping memory features.

What happens when they figure it out?

You Should Be Winning

The other route: bring their model, build the harness yourself. Before you call that pride, price the harness:

Top 30 → Top 5
LangChain's coding agent climbed Terminal-Bench 2.0 from 52.8 to 66.5, a 13.7-point jump, changing only the harness. Model untouched. (LangChain, Feb 2026)
#1
rank among all same-model agents on Terminal-Bench 2.0, for a harness discovered by automated search rather than hand-tuning. (Stanford/MIT, Meta-Harness, Mar 2026)

Same model. Same weights.

The harness isn't a wrapper around the product; it's most of the product.

Now the arithmetic. If the harness moves outcomes that much, and you hold the domain, the data, the distribution, and the right to tune every step for one workflow instead of all of them, then your native feature should beat a general harness that has never met your users.

Yes, the labs employ some of the best harness engineers alive. That's the craft half, and they hold it. But craft is learnable, and your half isn't copyable. Be precise about which half that is. Not the data in your warehouse; the labs are coming for that. It's the judgment you only get by living in the domain.

Data exports. Judgment doesn't.

And don't be intimidated by the general agent's tricks. Yes, it can fork work and launch sub-agents. That's not the advantage. It is still discovering the decomposition during the run, inside a generic harness and one model family.

You know the job before the first token is spent.

The general harness
Yours
Discovers the decomposition during the run
Pre-wires recurring branches into the workflow
One provider, one model family
Routes each step across providers and tiers
Infers what deserves intelligence
Knows where judgment changes the outcome
Generic cost-quality tradeoffs
Allocates spend using the economics of the job
Safe for everyone, optimal for no one
Optimal for exactly one thing

The field tilts your way.

You just need to know how to swing.

Which turns the paradox into an indictment:

If we can't beat a generic agent on our own turf, it's not because the route is closed. It's because we don't yet know how to build AI products.

We're losing on the learnable part.

The Skill Issue

Gamers have a word for losing with the better loadout: a skill issue.

Not the gear. Not the map. The player.

So what's the skill?

If products could be fully specified, every state documented in advance, the PM wouldn't exist. You'd hand engineering the document and go home.

The job exists because the document is never complete.

Any PM who has shipped a complex product knows this in their bones. The Figma covers two screens; the system has eleven states. The PRD reads complete until the legacy codebase throws up something nobody researched, and you're in a hallway, trading scope against a deadline.

No document authorized that call.

You made it anyway, on intuition compounded over years.

Call them micro-decisions: closing the gap between spec and reality, one small call at a time. They never appear in a document, and they compound into the product. That intuition was the asset you were paid for.

The missing skill is product intuition for a layer we have never lived in. Where a system will fumble, what a user will forgive, which ambiguity is real and which is a flow you were too lazy to define.

We built that feel for screens over fifteen years of shipping and breaking things. For this layer, we have shipped nothing, broken nothing, watched nothing run.

The intuition isn't depreciated.

It was never built.

Nobody's Name on It

Your AI feature has more of these unmade calls than any screen product ever did; non-determinism multiplies ambiguity. Here's one you didn't know you were making.

Does your feature get a conversational layer at all? A real one is hard to build, so we ship wizards instead: three steps, a spinner, one shot at the answer. Look at the math that choice signs you up for:

The wizard
The conversation
80% right reads as failure
80% right is a starting point
Wrong output: restart, everything discarded, including what was correct
Wrong output: one more message, the correct 80% survives
Accuracy must be near-perfect, first try
Accuracy climbs turn by turn

Then we measure “accuracy,” watch users turn away, and blame the system we knew was non-deterministic when we picked it.

You didn't decide against a repair loop.

Nobody decided. That's the point.

For anything bigger than a small job, the repair loop is table stakes now. And read “conversation” as the loop, not the chat box: an editable preview, an inline suggestion, a one-click correction all qualify. The requirement is that the correct 80% survives the fix.

It's also why the generic tool wins on page one: it's allowed to be wrong.

A confusing interaction gets pinned on the PM or the designer. On us. For the AI feature, we absolved ourselves: declared it a blackbox, moved the failure into the realm of weather. Each unmade call surfaces one expensive dev cycle later, filed under “the model is being weird.”

It's not a blackbox.

It's a stack of decisions with nobody's name on them.

Those decisions live in the harness, in the very layers we just watched everyone surrender. They set the quality your user feels, and the bill your CFO reads.

If you're not the model, you're the harness.

A Layer Down

So here's the test, and you can run it alone. Five questions of the kind that never make it into a PRD:

  • Does your user know enough to feed a strict flow, or does the answer only emerge from a back-and-forth that ends in a plan?
  • Is your workflow defined enough to chain deterministically? If yes, which steps are you buying a model for?
  • Which reasoning tier does each step deserve, and what is each action allowed to cost?
  • What does the model see of your data: raw memory, an abstraction, or a pre-processed layer?
  • What context can the product hand the model upfront, so the user isn't interrogated for what you already know?

Now pull up the last AI spec you wrote. Did it answer any of these? Or did it define point A, point B, and place a model-shaped capability between them?

Every interaction with the model is UI/UX now.

Output quality is a product requirement. So is the reasoning bill.

The spec stayed silent because nobody knew these were decisions. That's the stack with nobody's name on it. It's also your job description, returned.

You can't answer them from a chair, and an eval won't answer them either: it grades a system you've decided not to understand — that it failed, never why. Intuition gets built the way it always was: watch things run, watch them break, make the calls.

If we were losing on structure, this essay would be an obituary. We're losing on the learnable part. That's the best possible diagnosis.

The Whole Magic

Strip the branding and what the labs actually own — beyond the model anyone can rent — is a conversational harness. That's the whole magic. Every other piece is already in your building: your MCP tools and instructions, your data, the customer specifics no lab will ever know.

In their harness, those made you a layer.

In yours, they make you an owner.

So learn harness engineering. Not to become the engineer; so your taste has somewhere to land. Nobody has written the manual, and the AI-PM guides out there are generic for the same reason your specs are: written from the chair. Two ways in.

Do it yourself. Clone openclaw, an open-source harness in the same family as the tools you already use. Point Claude at the repo and ask it to walk you through what the harness does around the model. An afternoon buys you half the vocabulary.

Or take the guided route. Part 2 opens the machine: nine parts, one dial. The dial trades reliability against the feeling of intelligence, and it's being set on your product right now, by whoever sits closest to the code. Part 3 runs the method on a real build, Yukta, down to the spec that fell out of it.

Your product doesn't have to suck.

But somebody has to start making the decisions.

Sources

  • Salesforce timeline Benioff, Oct 2024: “Copilot is a flop… Clippy 2.0, anyone?” (Fortune, Windows Central); the open-interop pivot (A2A protocol; MCP support in Agentforce 3, June 2025); and the current “operating system for the Agentic Enterprise / landing zone” framing.
  • Top 30 → Top 5 without touching the model LangChain, “Improving Deep Agents with harness engineering” (Feb 2026): 52.8 → 66.5 on Terminal-Bench 2.0, +13.7 points, model held fixed (gpt-5.2-codex).
  • Automated harness search Meta-Harness: End-to-End Optimization of Model Harnesses (Lee, Nair, Zhang, Lee, Khattab, Finn; Stanford and MIT; March 2026): discovered harnesses surpass hand-engineered baselines on TerminalBench-2, ranking #1 among all Haiku 4.5 agents; +7.7 points over a state-of-the-art context system using 4x fewer tokens.
  • Repos to spelunk openclaw, an open-source local-first assistant harness. Background on how the smartest harnesses are built: the Claude Code source-map leak of March 2026 (InfoQ coverage).
  • “Agent = Model + Harness” Framing popularized in the agent-engineering community; see LangChain's deepagents.