Surfaces

Background Execution

Agents working unattended — visibility, notification, and re-engagement.

Observed Examples

Agent-generated TypeScript programs run in isolated QuickJS worker threads, decoupled from the host application's runtime.

The harness abstraction is designed to wrap and manage agents running autonomously, controlling their execution environment and lifecycle.

The attack exploits unattended/auto mode execution where no human is present to catch the prompt injection or override the blocked cleanup.

Claude Code executes multi-step tasks autonomously in the terminal without requiring step-by-step human prompting.