Harness app docs should make local state, sensitive files, and policy boundaries explicit before encouraging users to run autonomous or container-backed workflows.
draftOperators and security reviewersVerified 2026-06-03
State Locations
Path
Purpose
GENE_HOME
Override for the default GeneSYS home directory.
~/.gene/config.json
Primary local configuration.
~/.gene/env.sh
Shell-exported environment values.
~/.gene/sessions/
Session state, archives, and summaries.
~/.gene/memory/
Memory indexes and backend data.
~/.gene/runtime/
Runtime state and service coordination files.
~/.gene/runtime/viewer-logs/
Terminal viewer logs.
~/.gene/audit.log.ndjson
Local audit stream.
~/.gene/audit-logs/
Rotated or grouped audit logs.
~/.gene/reference/
Reference repository checkouts and analysis artifacts.
~/.gene/selfheal/
Self-heal snapshots, approvals, and outputs.
~/.gene/trading-help/
TradingAgents checkpoints, reports, and JSON outputs.
Environment Variables And Secrets
Name
Use
OPENAI_API_KEY
OpenAI provider calls.
ANTHROPIC_API_KEY
Anthropic provider calls.
GOOGLE_API_KEY
Google provider calls.
OPENROUTER_API_KEY
OpenRouter provider calls.
ALPHA_VANTAGE_API_KEY
Trading/help market data workflows.
TAVILY_API_KEY
Tavily web search provider.
BRAVE_API_KEY
Brave web search provider.
GENE_LIVE_E2E
Live end-to-end runtime behavior when documented.
CLI secrets
Document how gene secret differs from shell environment variables and how values are redacted in logs, audit files, and JSON output.
Security And Policy Model
Explain local-first security posture and backend-required versus local-only commands.
Document managed policy defaults, overrides, and effective/platform views.
Describe approval gates and approval tokens.
Explain tool modes and the gene tools modes matrix.
Define sandbox, workspace, and browser isolation boundaries.