Prime Agent hit 95.5% on ARC-AGI using self-improving harnesses on Claude Opus, up from 30% on the private set without scaffolding.
The demo at YC Paper Club showed three live systems, Prime Agent, Open Jarvis and YC's QM, all rewriting their own prompts and code. They run as persistent local processes with file, REPL and sub-agent access, so the real risk is local session access, not remote exploit.
