What the Claude Code Leak Reveals: The Engine Isn't the Moat — The Harness Is

On March 31, 2026, security researcher Chaofan Shou discovered something Anthropic probably didn't want the world to see: the entire source code of Claude Code — Anthropic's official AI coding CLI — sitting in plain sight on the npm registry via a .map file bundled into the published package. The model wasn't leaked. The weights are safe. But everything else — the agent architecture, the multi-agent orchestration, the memory system, the internal feature flags — all of it was exposed. And what it reveals is fascinating: the real competitive advantage in AI agents isn't the engine. It's the harness. The Car Analogy Think of an AI agent like a car: Engine = The LLM (Claude, GPT, Gemini). Raw power. Expensive to build. Harness = The agent framework (Claude Code, OpenClaw, Cursor). How the engine connects to the world. Driver's Manual = The behavioral specification. How the agent should drive. The Claude Code leak exposed the harness — and Anthropic has been building exactly what the open-s