Perplexity open-sources Numbat to normalize agent behavior across Claude Code, Codex, and other clients into one security rule set

当硬边界撞上 Harness 碎片化：Perplexity Numbat 与跨客户端 Agent 行为归一化

Engineers routinely use Claude Code, Codex, OpenCode, and others, but each tool has different hook names, log formats, and blocking capabilities, making unified security enforcement difficult. Perplexity open-sourced Numbat (Apache 2.0), a static Go binary that normalizes actions from different clients into five event types—command.exec, file.write, etc.—and applies 52 CEL rules for cross-client checks. Built-in rules default to monitor-only and automatically fall back to detect-only on complex commands to avoid breaking dev scripts. Numbat handles behavioral observation and detection normalization, not physical sandboxing; synchronous blocking for OpenCode is still unsupported, and its SQLite log parser remains deferred.

Why it matters: Perplexity open-sourced Numbat to tackle fragmentation in multi-agent client security management, with a concrete technical approach under Apache 2.0. Practical value for teams using Claude Code, Codex, and OpenCode simultaneously. Not scored higher because it's an engineering...