mlsanityData to 14 Oct 2026

Dive into Claude Code: The Design Space of Today's and Future AI Agent Systems

arXiv 2604.14228 ↗First posted 14 Apr 2026cs.SE cs.AI cs.CLcited by 38

On the map: LLM agents and tool use → Software engineering coding agents

Abstract (arXiv)

Claude Code is an agentic coding tool that can run shell commands, edit files, and call external services on behalf of the user. This study describes its architecture by analyzing the publicly available source code and comparing it with two independent open-source AI agent systems, OpenClaw and Hermes Agent, that answer many of similar or even the same design questions. Our analysis identifies five human values, philosophies, and needs that motivate the architecture: human decision authority, safety, security, and privacy, reliable execution, capability amplification, and contextual adaptability. We then trace them through thirteen design principles to implementation choices. The core of the system is a simple while-loop that calls the model, runs tools, and repeats. Most of the code, however, lives in the systems around this loop: a permission system with seven modes and an ML-based classifier, a five-layer compaction pipeline for context management, four extensibility mechanisms (MCP, plugins, skills, and hooks), a subagent delegation and orchestration mechanism, and append-oriented session storage. Comparisons with OpenClaw and Hermes Agent show that the same design questions produce different answers across three deployment contexts. Claude Code emphasizes per-action safety, OpenClaw emphasizes perimeter-level access, and Hermes renders per-action approvals across many surfaces. At the runtime layer, Claude Code uses a single CLI loop, OpenClaw embeds the runtime within a gateway control plane, and Hermes uses one process whose role is set by its entry point. At the context and extension layer, Claude Code extends the context window, OpenClaw registers gateway-wide capabilities, and Hermes provides pluggable memory and model backends. We finally identify six open design directions for future agent systems, grounded in recent empirical, architectural, and policy literature.

Key facts. Cited by 38 papers in the map (data through 14 Oct 2026). Placed in Software engineering coding agents, one of 16 directions in LLM agents and tool use. Builds on 63 of its 98 references that are in the map. First posted on arXiv 14 Apr 2026.

Builds on

63 of 98 references.

Closest ancestors · 9

Same direction, newest first

  1. 2026Parallelizing Tool Execution and LLM Generation for Low-Latency Agent Serving19 Mar
  2. 2025Speed at the Cost of Quality: How Cursor AI Increases Short-Term Velocity and Long-Term Complexity in Open-Source Projects6 Nov
  3. 2025Detecting Silent Failures in Multi-Agentic AI Trajectories6 Nov
  4. 2025AlphaEvolve: A coding agent for scientific and algorithmic discovery16 Jun
  5. 2025Why Do Multi-Agent LLM Systems Fail?17 Mar
  6. 2024OpenHands: An Open Platform for AI Software Developers as Generalist Agents23 Jul
  7. 2024SWE-agent: Agent-Computer Interfaces Enable Automated Software Engineering6 May
  8. 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation16 Aug
  9. 2023ChatDev: Communicative Agents for Software Development16 Jul

Other references · 54

  1. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
  2. 2021Evaluating Large Language Models Trained on Codecited by 8,320
  3. 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
  4. 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
  5. 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,442
  6. 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,373
  7. 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 3,080
  8. 2024π0: A Vision-Language-Action Flow Model for General Robot Controlcited by 2,407
  9. 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,348
  10. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
  11. 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,191
  12. 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,808
38 more
  1. 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,784
  2. 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,402
  3. 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,395
  4. 2023MemGPT: Towards LLMs as Operating Systemscited by 1,389
  5. 2025GR00T N1: An Open Foundation Model for Generalist Humanoid Robotscited by 1,225
  6. 2024The AI Scientist: Towards Fully Automated Open-Ended Scientific Discoverycited by 1,071
  7. 2025A-MEM: Agentic Memory for LLM Agentscited by 1,063
  8. 2023Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debatecited by 1,011
  9. 2023DSPy: Compiling Declarative Language Model Calls into Self-Improving Pipelinescited by 832
  10. 2025Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memorycited by 779
  11. 2024Large Language Model based Multi-Agents: A Survey of Progress and Challengescited by 769
  12. 2024A Survey on the Memory Mechanism of Large Language Model based Agentscited by 634
  13. 2023AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviorscited by 598
  14. 2023Language Agent Tree Search Unifies Reasoning Acting and Planning in Language Modelscited by 574
  15. 2024Automated Design of Agentic Systemscited by 407
  16. 2025Accelerating scientific discovery with Co-Scientistcited by 401
  17. 2025Agentic Context Engineering: Evolving Contexts for Self-Improving Language Modelscited by 398
  18. 2024Agent Workflow Memorycited by 383
  19. 2025Memory in the Age of AI Agentscited by 303
  20. 2025Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directionscited by 265
  21. 2024AI Agents That Mattercited by 219
  22. 2022Grounded Copilot: How Programmers Interact with Code-Generating Modelscited by 218
  23. 2022Do Users Write More Insecure Code with AI Assistants?cited by 192
  24. 2025Measuring AI Ability to Complete Long Software Taskscited by 156
  25. 2025Your Brain on ChatGPT: Accumulation of Cognitive Debt when Using an AI Assistant for Essay Writing Taskcited by 106
  26. 2025Measuring the Impact of Early-2025 AI on Experienced Open-Source Developer Productivitycited by 101
  27. 2025Training Proactive and Personalized LLM Agentscited by 46
  28. 2026A Survey of Agent Memory in the Second Half: Towards Self-Evolving and Long-Horizon Agentscited by 44
  29. 2024Need Help? Designing Proactive AI Assistants for Programmingcited by 43
  30. 2024Proactive Conversational Agents with Inner Thoughtscited by 36
  31. 2025Assistance or Disruption? Exploring and Evaluating the Design and Trade-offs of Proactive AI Programming Supportcited by 34
  32. 2025Evaluating Sakana's AI Scientist: Bold Claims, Mixed Results, and a Promising Future?cited by 32
  33. 2026The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systemscited by 30
  34. 2026How AI Impacts Skill Formationcited by 24
  35. 2026International AI Safety Report 2026cited by 22
  36. 2025Sensible Agent: A Framework for Unobtrusive Interaction with Proactive AR Agentscited by 15
  37. 2026AI Agent Systems: Architectures, Applications, and Evaluationcited by 13
  38. 2025Beyond Reactivity: Measuring Proactive Problem Solving in LLM Agentscited by 10

50 most cited of 54 All 54 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 38.

38 papers.

Sort:

By area:

  1. 2026Self-Harness: Harnesses That Improve Themselvescited by 107
  2. 2026Code as Agent Harnesscited by 47
  3. 2026HARBOR: Automated Harness Optimizationcited by 11
  4. 2026Coding Agents Are Guessing: Measuring Action-Boundary Violations in Underspecified DevOps Instructionscited by 10
  5. 2026BraveGuard: From Open-World Threats to Safer Computer-Use Agentscited by 4
  6. 2026PILOT in the Loop: Live Self-Improvement for Long-Horizon Agentscited by 4
  7. 2026Harness-of-Harness: Multi-Day Autonomous Software Development with Continual Improvementcited by 4
  8. 2026Model-Native Computing Architecture: Envisioning Future System Architecture Through the Lens of Computer Architecturecited by 2
  9. 2026Mesh Memory Protocol: Semantic Infrastructure for Multi-Agent LLM Systemscited by 1
  10. 2026Redefining AI Red Teaming in the Agentic Era: From Weeks to Hourscited by 1
  11. 2026"Skill Issues'': Data-Centric Optimization of Lakehouse Agentscited by 1
  12. 2026Harness-MU: A Safe, Governed, and Effective Harness for Multi-User LLM Agentscited by 1
26 more
  1. 2026WebSwarm: Recursive Multi-Agent Orchestration for Deep-and-Wide Web Searchcited by 1
  2. 2026When Does Restricting a Coding Agent to executecode Help? A Regime × Agent-Design Ablationcited by 1
  3. 2026JANUS: Foreseeing Latent Risk for Long-Horizon Agent Safetycited by 1
  4. 2026CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agentscited by 1
  5. 2026Deep Agentic Search for Repository-Level Code Question Answering: An Empirical Studycited by 1
  6. 2026When Video Misreads: Closed-Loop Distillation of Reading Heuristics for Exploratory Manipulation Trace QAcited by 0
  7. 2026VectorizationLLM: Smart Vectorization Based AI Assistantcited by 0
  8. 2026Agents Don't Just Agree, They Remember: Benchmarking Persistent Sycophancy in Self-Improving Personal Agentscited by 0
  9. 2026Where Is the Tradeoff in Using Third-Party API Routers for Agentic Software Development?cited by 0
  10. 2026Agentic AI Autonomy Assessment: A Decision-Support Framework Towards Governed Supply Chain Systemscited by 0
  11. 2026MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agentscited by 0
  12. 2026Agentic Nesting: A New Methodology for Existing Enterprise Application Integration and Servicescited by 0
  13. 2026GraniKV: Asymmetric Granularity KV-Cache Paging for Multi-Agent Systems with Long Shared Prefixcited by 0
  14. 2026Applying Anthropic Primitives at Large Enterprises: Harness Paradigm for Knowledge Workcited by 0
  15. 2026VibeJam: A User Study Platform for Web Development with Agentscited by 0
  16. 2026What Do CAE Simulation Agents Really Need Beyond a Generic Harness?cited by 0
  17. 2026Trust propagation and structural containment in Multi-agent LLM pipelinescited by 0
  18. 2026STRAND: Benchmarking and Improving Object-Centric Spatio-Temporal Monitoring in Video Large Language Modelscited by 0
  19. 2026Hearsay: Can an Auditor Trust the Record a Deployed Agent Harness Writes?cited by 0
  20. 2026StateTape: Action-Conditioned Evidence Lifecycle Modeling for Long-Horizon Coding Agentscited by 0
  21. 2026LEGO-Anything: Coding Agents for 3D Scene Reconstructioncited by 0
  22. 2026AgSpec: Pushing the Limits of Retrieval-Based Speculative Decoding in Coding Agent Pipelinescited by 0
  23. 2026Do Tool Calls Execute as Intended? Measuring and Repairing Intent-Execution Correspondence in LLM Agentscited by 0
  24. 2026Incremental Open-Ended Deep Research with Structured Harnesscited by 0
  25. 2026The Future of AI-assisted Physics: Discovering, Verifying and Organizing Results via Formalizationcited by 0
  26. 2026L3M: A Verifiable Harness and Runtime for Self-Extending and Self-Improving Agentscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025Decoding the Configuration of AI Coding Agents: Insights from Claude Code Projects
  2. 2025On the Use of Agentic Coding Manifests: An Empirical Study of Claude Code
  3. 2026Understanding the Architecture of Coding Agents: An Exploratory Study Using a Research Prototype
  4. 2026Harness Engineering for Agentic AI Coding Tools: An Exploratory Study
  5. 2026Humans are Missing from AI Coding Agent Research
  6. 2026The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities
  7. 2025AI Agentic Programming: A Survey of Techniques, Challenges, and Opportunities
  8. 2026SWE-chat: Coding Agent Interactions From Real Users in the Wild