Dive into Claude Code: The Design Space of Today's and Future AI Agent Systems
On the map: LLM agents and tool use → Software engineering coding agents
Abstract (arXiv)
Claude Code is an agentic coding tool that can run shell commands, edit files, and call external services on behalf of the user. This study describes its architecture by analyzing the publicly available source code and comparing it with two independent open-source AI agent systems, OpenClaw and Hermes Agent, that answer many of similar or even the same design questions. Our analysis identifies five human values, philosophies, and needs that motivate the architecture: human decision authority, safety, security, and privacy, reliable execution, capability amplification, and contextual adaptability. We then trace them through thirteen design principles to implementation choices. The core of the system is a simple while-loop that calls the model, runs tools, and repeats. Most of the code, however, lives in the systems around this loop: a permission system with seven modes and an ML-based classifier, a five-layer compaction pipeline for context management, four extensibility mechanisms (MCP, plugins, skills, and hooks), a subagent delegation and orchestration mechanism, and append-oriented session storage. Comparisons with OpenClaw and Hermes Agent show that the same design questions produce different answers across three deployment contexts. Claude Code emphasizes per-action safety, OpenClaw emphasizes perimeter-level access, and Hermes renders per-action approvals across many surfaces. At the runtime layer, Claude Code uses a single CLI loop, OpenClaw embeds the runtime within a gateway control plane, and Hermes uses one process whose role is set by its entry point. At the context and extension layer, Claude Code extends the context window, OpenClaw registers gateway-wide capabilities, and Hermes provides pluggable memory and model backends. We finally identify six open design directions for future agent systems, grounded in recent empirical, architectural, and policy literature.
Key facts. Cited by 38 papers in the map (data through 14 Oct 2026). Placed in Software engineering coding agents, one of 16 directions in LLM agents and tool use. Builds on 63 of its 98 references that are in the map. First posted on arXiv 14 Apr 2026.
Builds on
63 of 98 references.
Closest ancestors · 9
Same direction, newest first
- 2026Parallelizing Tool Execution and LLM Generation for Low-Latency Agent Serving19 Mar
- 2025Speed at the Cost of Quality: How Cursor AI Increases Short-Term Velocity and Long-Term Complexity in Open-Source Projects6 Nov
- 2025Detecting Silent Failures in Multi-Agentic AI Trajectories6 Nov
- 2025AlphaEvolve: A coding agent for scientific and algorithmic discovery16 Jun
- 2025Why Do Multi-Agent LLM Systems Fail?17 Mar
- 2024OpenHands: An Open Platform for AI Software Developers as Generalist Agents23 Jul
- 2024SWE-agent: Agent-Computer Interfaces Enable Automated Software Engineering6 May
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation16 Aug
- 2023ChatDev: Communicative Agents for Software Development16 Jul
Other references · 54
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2021Evaluating Large Language Models Trained on Codecited by 8,320
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
- 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,442
- 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,373
- 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 3,080
- 2024π0: A Vision-Language-Action Flow Model for General Robot Controlcited by 2,407
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,348
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
- 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,191
- 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,808
38 more
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,784
- 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,402
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,395
- 2023MemGPT: Towards LLMs as Operating Systemscited by 1,389
- 2025GR00T N1: An Open Foundation Model for Generalist Humanoid Robotscited by 1,225
- 2024The AI Scientist: Towards Fully Automated Open-Ended Scientific Discoverycited by 1,071
- 2025A-MEM: Agentic Memory for LLM Agentscited by 1,063
- 2023Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debatecited by 1,011
- 2023DSPy: Compiling Declarative Language Model Calls into Self-Improving Pipelinescited by 832
- 2025Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memorycited by 779
- 2024Large Language Model based Multi-Agents: A Survey of Progress and Challengescited by 769
- 2024A Survey on the Memory Mechanism of Large Language Model based Agentscited by 634
- 2023AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviorscited by 598
- 2023Language Agent Tree Search Unifies Reasoning Acting and Planning in Language Modelscited by 574
- 2024Automated Design of Agentic Systemscited by 407
- 2025Accelerating scientific discovery with Co-Scientistcited by 401
- 2025Agentic Context Engineering: Evolving Contexts for Self-Improving Language Modelscited by 398
- 2024Agent Workflow Memorycited by 383
- 2025Memory in the Age of AI Agentscited by 303
- 2025Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directionscited by 265
- 2024AI Agents That Mattercited by 219
- 2022Grounded Copilot: How Programmers Interact with Code-Generating Modelscited by 218
- 2022Do Users Write More Insecure Code with AI Assistants?cited by 192
- 2025Measuring AI Ability to Complete Long Software Taskscited by 156
- 2025Your Brain on ChatGPT: Accumulation of Cognitive Debt when Using an AI Assistant for Essay Writing Taskcited by 106
- 2025Measuring the Impact of Early-2025 AI on Experienced Open-Source Developer Productivitycited by 101
- 2025Training Proactive and Personalized LLM Agentscited by 46
- 2026A Survey of Agent Memory in the Second Half: Towards Self-Evolving and Long-Horizon Agentscited by 44
- 2024Need Help? Designing Proactive AI Assistants for Programmingcited by 43
- 2024Proactive Conversational Agents with Inner Thoughtscited by 36
- 2025Assistance or Disruption? Exploring and Evaluating the Design and Trade-offs of Proactive AI Programming Supportcited by 34
- 2025Evaluating Sakana's AI Scientist: Bold Claims, Mixed Results, and a Promising Future?cited by 32
- 2026The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systemscited by 30
- 2026How AI Impacts Skill Formationcited by 24
- 2026International AI Safety Report 2026cited by 22
- 2025Sensible Agent: A Framework for Unobtrusive Interaction with Proactive AR Agentscited by 15
- 2026AI Agent Systems: Architectures, Applications, and Evaluationcited by 13
- 2025Beyond Reactivity: Measuring Proactive Problem Solving in LLM Agentscited by 10
50 most cited of 54 All 54 (JSON)
Built on by
Citing papers per year: 2026: 38.
38 papers.
Sort:
By area:
- 2026Self-Harness: Harnesses That Improve Themselvescited by 107
- 2026Code as Agent Harnesscited by 47
- 2026HARBOR: Automated Harness Optimizationcited by 11
- 2026Coding Agents Are Guessing: Measuring Action-Boundary Violations in Underspecified DevOps Instructionscited by 10
- 2026BraveGuard: From Open-World Threats to Safer Computer-Use Agentscited by 4
- 2026PILOT in the Loop: Live Self-Improvement for Long-Horizon Agentscited by 4
- 2026Harness-of-Harness: Multi-Day Autonomous Software Development with Continual Improvementcited by 4
- 2026Model-Native Computing Architecture: Envisioning Future System Architecture Through the Lens of Computer Architecturecited by 2
- 2026Mesh Memory Protocol: Semantic Infrastructure for Multi-Agent LLM Systemscited by 1
- 2026Redefining AI Red Teaming in the Agentic Era: From Weeks to Hourscited by 1
- 2026"Skill Issues'': Data-Centric Optimization of Lakehouse Agentscited by 1
- 2026Harness-MU: A Safe, Governed, and Effective Harness for Multi-User LLM Agentscited by 1
26 more
- 2026WebSwarm: Recursive Multi-Agent Orchestration for Deep-and-Wide Web Searchcited by 1
- 2026When Does Restricting a Coding Agent to executecode Help? A Regime × Agent-Design Ablationcited by 1
- 2026JANUS: Foreseeing Latent Risk for Long-Horizon Agent Safetycited by 1
- 2026CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agentscited by 1
- 2026Deep Agentic Search for Repository-Level Code Question Answering: An Empirical Studycited by 1
- 2026When Video Misreads: Closed-Loop Distillation of Reading Heuristics for Exploratory Manipulation Trace QAcited by 0
- 2026VectorizationLLM: Smart Vectorization Based AI Assistantcited by 0
- 2026Agents Don't Just Agree, They Remember: Benchmarking Persistent Sycophancy in Self-Improving Personal Agentscited by 0
- 2026Where Is the Tradeoff in Using Third-Party API Routers for Agentic Software Development?cited by 0
- 2026Agentic AI Autonomy Assessment: A Decision-Support Framework Towards Governed Supply Chain Systemscited by 0
- 2026MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agentscited by 0
- 2026Agentic Nesting: A New Methodology for Existing Enterprise Application Integration and Servicescited by 0
- 2026GraniKV: Asymmetric Granularity KV-Cache Paging for Multi-Agent Systems with Long Shared Prefixcited by 0
- 2026Applying Anthropic Primitives at Large Enterprises: Harness Paradigm for Knowledge Workcited by 0
- 2026VibeJam: A User Study Platform for Web Development with Agentscited by 0
- 2026What Do CAE Simulation Agents Really Need Beyond a Generic Harness?cited by 0
- 2026Trust propagation and structural containment in Multi-agent LLM pipelinescited by 0
- 2026STRAND: Benchmarking and Improving Object-Centric Spatio-Temporal Monitoring in Video Large Language Modelscited by 0
- 2026Hearsay: Can an Auditor Trust the Record a Deployed Agent Harness Writes?cited by 0
- 2026StateTape: Action-Conditioned Evidence Lifecycle Modeling for Long-Horizon Coding Agentscited by 0
- 2026LEGO-Anything: Coding Agents for 3D Scene Reconstructioncited by 0
- 2026AgSpec: Pushing the Limits of Retrieval-Based Speculative Decoding in Coding Agent Pipelinescited by 0
- 2026Do Tool Calls Execute as Intended? Measuring and Repairing Intent-Execution Correspondence in LLM Agentscited by 0
- 2026Incremental Open-Ended Deep Research with Structured Harnesscited by 0
- 2026The Future of AI-assisted Physics: Discovering, Verifying and Organizing Results via Formalizationcited by 0
- 2026L3M: A Verifiable Harness and Runtime for Self-Extending and Self-Improving Agentscited by 0
- 2026L3M: A Verifiable Harness and Runtime for Self-Extending and Self-Improving Agents14 Oct 2026
- 2026Incremental Open-Ended Deep Research with Structured Harness8 Oct 2026
- 2026The Future of AI-assisted Physics: Discovering, Verifying and Organizing Results via Formalization6 Oct 2026
- 2026Do Tool Calls Execute as Intended? Measuring and Repairing Intent-Execution Correspondence in LLM Agents3 Oct 2026
- 2026AgSpec: Pushing the Limits of Retrieval-Based Speculative Decoding in Coding Agent Pipelines1 Oct 2026
- 2026LEGO-Anything: Coding Agents for 3D Scene Reconstruction28 Sep 2026
- 2026StateTape: Action-Conditioned Evidence Lifecycle Modeling for Long-Horizon Coding Agents28 Sep 2026
- 2026Hearsay: Can an Auditor Trust the Record a Deployed Agent Harness Writes?26 Sep 2026
- 2026Trust propagation and structural containment in Multi-agent LLM pipelines15 Sep 2026
- 2026What Do CAE Simulation Agents Really Need Beyond a Generic Harness?3 Sep 2026
- 2026Harness-of-Harness: Multi-Day Autonomous Software Development with Continual Improvement1 Sep 2026
- 2026VibeJam: A User Study Platform for Web Development with Agents30 Aug 2026
26 more
- 2026STRAND: Benchmarking and Improving Object-Centric Spatio-Temporal Monitoring in Video Large Language Models28 Aug 2026
- 2026PILOT in the Loop: Live Self-Improvement for Long-Horizon Agents27 Aug 2026
- 2026Applying Anthropic Primitives at Large Enterprises: Harness Paradigm for Knowledge Work20 Aug 2026
- 2026GraniKV: Asymmetric Granularity KV-Cache Paging for Multi-Agent Systems with Long Shared Prefix16 Aug 2026
- 2026MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents4 Aug 2026
- 2026Deep Agentic Search for Repository-Level Code Question Answering: An Empirical Study2 Aug 2026
- 2026CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents31 Jul 2026
- 2026Agentic AI Autonomy Assessment: A Decision-Support Framework Towards Governed Supply Chain Systems28 Jul 2026
- 2026Where Is the Tradeoff in Using Third-Party API Routers for Agentic Software Development?26 Jul 2026
- 2026JANUS: Foreseeing Latent Risk for Long-Horizon Agent Safety22 Jul 2026
- 2026When Does Restricting a Coding Agent to executecode Help? A Regime × Agent-Design Ablation12 Jul 2026
- 2026Agents Don't Just Agree, They Remember: Benchmarking Persistent Sycophancy in Self-Improving Personal Agents12 Jul 2026
- 2026WebSwarm: Recursive Multi-Agent Orchestration for Deep-and-Wide Web Search9 Jul 2026
- 2026VectorizationLLM: Smart Vectorization Based AI Assistant8 Jul 2026
- 2026Coding Agents Are Guessing: Measuring Action-Boundary Violations in Underspecified DevOps Instructions2 Jul 2026
- 2026Harness-MU: A Safe, Governed, and Effective Harness for Multi-User LLM Agents20 Jun 2026
- 2026Self-Harness: Harnesses That Improve Themselves8 Jun 2026
- 2026When Video Misreads: Closed-Loop Distillation of Reading Heuristics for Exploratory Manipulation Trace QA7 Jun 2026
- 2026"Skill Issues'': Data-Centric Optimization of Lakehouse Agents31 May 2026
- 2026BraveGuard: From Open-World Threats to Safer Computer-Use Agents31 May 2026
- 2026Model-Native Computing Architecture: Envisioning Future System Architecture Through the Lens of Computer Architecture29 May 2026
- 2026Agentic Nesting: A New Methodology for Existing Enterprise Application Integration and Services25 May 2026
- 2026Code as Agent Harness18 May 2026
- 2026Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours5 May 2026
- 2026HARBOR: Automated Harness Optimization22 Apr 2026
- 2026Mesh Memory Protocol: Semantic Infrastructure for Multi-Agent LLM Systems21 Apr 2026
- 2026Self-Harness: Harnesses That Improve Themselvescited by 107
- 2026Code as Agent Harnesscited by 47
- 2026HARBOR: Automated Harness Optimizationcited by 11
- 2026Coding Agents Are Guessing: Measuring Action-Boundary Violations in Underspecified DevOps Instructionscited by 10
- 2026BraveGuard: From Open-World Threats to Safer Computer-Use Agentscited by 4
- 2026Harness-of-Harness: Multi-Day Autonomous Software Development with Continual Improvementcited by 4
- 2026Mesh Memory Protocol: Semantic Infrastructure for Multi-Agent LLM Systemscited by 1
- 2026Redefining AI Red Teaming in the Agentic Era: From Weeks to Hourscited by 1
- 2026"Skill Issues'': Data-Centric Optimization of Lakehouse Agentscited by 1
- 2026Harness-MU: A Safe, Governed, and Effective Harness for Multi-User LLM Agentscited by 1
- 2026WebSwarm: Recursive Multi-Agent Orchestration for Deep-and-Wide Web Searchcited by 1
- 2026When Does Restricting a Coding Agent to executecode Help? A Regime × Agent-Design Ablationcited by 1
12 most cited of 25 All 25 (JSON)
- 2026L3M: A Verifiable Harness and Runtime for Self-Extending and Self-Improving Agents14 Oct 2026
- 2026Do Tool Calls Execute as Intended? Measuring and Repairing Intent-Execution Correspondence in LLM Agents3 Oct 2026
- 2026AgSpec: Pushing the Limits of Retrieval-Based Speculative Decoding in Coding Agent Pipelines1 Oct 2026
- 2026StateTape: Action-Conditioned Evidence Lifecycle Modeling for Long-Horizon Coding Agents28 Sep 2026
- 2026Trust propagation and structural containment in Multi-agent LLM pipelines15 Sep 2026
- 2026What Do CAE Simulation Agents Really Need Beyond a Generic Harness?3 Sep 2026
- 2026Harness-of-Harness: Multi-Day Autonomous Software Development with Continual Improvement1 Sep 2026
- 2026VibeJam: A User Study Platform for Web Development with Agents30 Aug 2026
- 2026MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents4 Aug 2026
- 2026Deep Agentic Search for Repository-Level Code Question Answering: An Empirical Study2 Aug 2026
- 2026CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents31 Jul 2026
- 2026Agentic AI Autonomy Assessment: A Decision-Support Framework Towards Governed Supply Chain Systems28 Jul 2026
12 newest of 25 All 25 (JSON)
- 2026PILOT in the Loop: Live Self-Improvement for Long-Horizon Agentscited by 4
- 2026Model-Native Computing Architecture: Envisioning Future System Architecture Through the Lens of Computer Architecturecited by 2
- 2026JANUS: Foreseeing Latent Risk for Long-Horizon Agent Safetycited by 1
- 2026When Video Misreads: Closed-Loop Distillation of Reading Heuristics for Exploratory Manipulation Trace QAcited by 0
- 2026VectorizationLLM: Smart Vectorization Based AI Assistantcited by 0
- 2026Agents Don't Just Agree, They Remember: Benchmarking Persistent Sycophancy in Self-Improving Personal Agentscited by 0
- 2026Applying Anthropic Primitives at Large Enterprises: Harness Paradigm for Knowledge Workcited by 0
- 2026Hearsay: Can an Auditor Trust the Record a Deployed Agent Harness Writes?cited by 0
- 2026LEGO-Anything: Coding Agents for 3D Scene Reconstructioncited by 0
- 2026Incremental Open-Ended Deep Research with Structured Harnesscited by 0
- 2026The Future of AI-assisted Physics: Discovering, Verifying and Organizing Results via Formalizationcited by 0
- 2026Incremental Open-Ended Deep Research with Structured Harness8 Oct 2026
- 2026The Future of AI-assisted Physics: Discovering, Verifying and Organizing Results via Formalization6 Oct 2026
- 2026LEGO-Anything: Coding Agents for 3D Scene Reconstruction28 Sep 2026
- 2026Hearsay: Can an Auditor Trust the Record a Deployed Agent Harness Writes?26 Sep 2026
- 2026PILOT in the Loop: Live Self-Improvement for Long-Horizon Agents27 Aug 2026
- 2026Applying Anthropic Primitives at Large Enterprises: Harness Paradigm for Knowledge Work20 Aug 2026
- 2026JANUS: Foreseeing Latent Risk for Long-Horizon Agent Safety22 Jul 2026
- 2026Agents Don't Just Agree, They Remember: Benchmarking Persistent Sycophancy in Self-Improving Personal Agents12 Jul 2026
- 2026VectorizationLLM: Smart Vectorization Based AI Assistant8 Jul 2026
- 2026When Video Misreads: Closed-Loop Distillation of Reading Heuristics for Exploratory Manipulation Trace QA7 Jun 2026
- 2026Model-Native Computing Architecture: Envisioning Future System Architecture Through the Lens of Computer Architecture29 May 2026
Similar, not cited
Close in wording, no citation either way
- 2025Decoding the Configuration of AI Coding Agents: Insights from Claude Code Projects
- 2025On the Use of Agentic Coding Manifests: An Empirical Study of Claude Code
- 2026Understanding the Architecture of Coding Agents: An Exploratory Study Using a Research Prototype
- 2026Harness Engineering for Agentic AI Coding Tools: An Exploratory Study
- 2026Humans are Missing from AI Coding Agent Research
- 2026The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities
- 2025AI Agentic Programming: A Survey of Techniques, Challenges, and Opportunities
- 2026SWE-chat: Coding Agent Interactions From Real Users in the Wild