TrueFoundry open-sources an agent harness and calls managed agents a lock-in play

TrueFoundry has released TrueForge, an open source agent harness billed directly as an alternative to Claude Managed Agents, Anthropic's hosted service that runs, sandboxes and orchestrates autonomous Claude agents ^[1][2]. What is being sold here is less the code than the argument attached to it: that the harness under an agent, not the model inside it, is the layer that decides cost and control ^[16].

The headline number is a claimed reduction in total agent operating cost of an estimated 50 percent, alongside support for any model or MCP server ^[3]. The company's supporting illustration is a price spread, not a benchmark. TrueFoundry co-founder and CEO Nikunj Bajaj, previously a machine learning tech lead at Meta ^[7], told The New Stack that "a provider selling you a million tokens for $50 has zero incentive to tell you the same task could be done using a model that charges 50 cents for a million tokens" ^[8]. That is a hundredfold difference in unit price ^[10], which is worth holding next to the 50 percent figure: if swapping models can cut token cost by 99 percent and total operating cost only halves, then tokens are one line item among several, or the estimate is doing work the source does not show. The article states the reduction as an estimate and gives no workload, benchmark or methodology behind it ^[17], and does not state TrueForge's license or what TrueFoundry charges ^[18].

The structural claim is more testable. Bajaj argues the harness is the layer between the user, the model and everything else, deciding when to call an MCP server, when to reuse an existing agent, what context to keep, and which model handles which part of a plan ^[11]. He adds that some actions need to run in a completely isolated sandbox and some data should never reach a closed-source model, that this logic lives in the harness, and that teams without one build it from scratch ^[12]. Anyone who has shipped an agent will recognise the list of things you then own: persistent sessions, tool credentials, execution sandboxes, context, human approvals, debugging, access policies and spend, across every agent you run ^[13]. TrueFoundry's bet is that enterprises would rather own that layer than inherit it from a model provider ^[15].

The catch is in the plumbing. TrueForge routes every model call and MCP interaction through TrueFoundry's own AI Gateway, which is how budget enforcement, rate limits and guardrails get applied ^[14]. If the harness is the strategic control point, and all traffic passes through one vendor's gateway, the choke point has moved rather than disappeared ^[20]. Model neutrality and infrastructure neutrality are separate properties.

Timing is worth noting too. Claude Managed Agents only reached beta in April of this year ^[4], so the lock-in being described is a forecast about where hosted agent infrastructure goes, not an established position, and the cheap-model half of the thesis rests on open models such as Z.ai's GLM-5.2 continuing to close on proprietary frontier models ^[5][6].