Meta’s official macOS cookbook ships metacua—a hackable CLI where Muse Spark captures the screen, calls computer tools with normalized 0–1000 coordinates, and executes native mouse/keyboard events until `computer.stop`. Distinct from community Muse Jailbreak (Chrome tunnel): this is Model API + local GUI loop. Warning: real Mac control; prefer a VM/dedicated user; leave `--allow-bash` off unless isolated.
MIT Python package signs every policy-gated tool call into a hash-chained .tkb file verifiable offline (Python+TS); works across Claude Code, OpenAI Agents, LangChain/LangGraph, MCP and more—agents can edit their own logs but not hide edits when the signer is out of reach.
Claustrum (alpha, .NET NativeAOT) is a harness-neutral conductor: an architect in Claude Code, Cursor, Copilot CLI, opencode, or desktop delegates builds/reviews/tests to agents on any other harness/model and gets one normalized JSON receipt. Two doors — `claustrum run` CLI and `claustrum mcp` stdio server. Parallel builders on git worktrees, budget ledger, backends doctor. Role-based routing (strong model for architect/reviewer, cheap for builders) without locking the pipeline to one vendor.
Apache-2.0 agent-native sandbox (Linux FUSE/Landlock, macOS APFS clones+Seatbelt) gives agents a confined FS view with unified text diffs, binary markers, and per-task or per-tool-call commit/abort—optional JSON-RPC adapters for Pi and policy for secrets/network.