Warren runs agent harnesses as isolated, observable workloads on infrastructure you control. It owns the workspace, limits, live events, recovery, and Git delivery.