OpenHands — lessons for Forge

Sources:

• https://github.com/OpenHands/OpenHands/blob/main/docs/architecture.md
• https://docs.openhands.dev/openhands/usage/sandboxes/overview
• https://docs.openhands.dev/sdk/arch/security

Observed source lessons

OpenHands separates the frontend from the execution/sandbox layer: the UI renders and calls an agent/server API rather than executing actions directly. Its workspace/sandbox concepts support multiple execution locations.

Forge decisions influenced

• renderer is a client, not a process/filesystem owner;
• Execution Environment is separate from Agent Adapter;
• future local/Docker/remote environments should not change the Task model;
• security/risk classification and confirmation are separate concerns, reinforcing Forge's split between agent claims and host enforcement.