An agentic Code mode
A sandboxed local coding agent that plans, edits, tests and self-corrects on any local model — workspace-confined filesystem, macOS Seatbelt shell, per-action diff approval, context compaction, real-browser automation, local vision — with shipped prompt-injection defenses. Measured on a 45-task SWE-bench Verified subset: its tool loop takes the same 35B-A3B (MoE) model to 15 solved — ahead of qwen-code (12), pi (10), opencode (7) and a bare-bash ablation (6) on identical setups. v2.0 opens it into a platform: a hand-written MCP client with a live-certified server store, markdown skills, and cross-session project memory — every addition budgeted to fit a 16K context.