QM

Multiplayer agent harness for work (MIT, ~3.8k stars) that YC open-sourced under its yc-software org and says it runs its own accounting, legal, events, and engineering on, QM included. Company-wide rather than single-user: each person and each room (a Slack channel or project) gets its own scoped memory, files, keychain view, permissions, and a workspace that persists between sessions, so one person's context does not bleed into another's. Lives in both Slack and a web app as the same assistant. Swappable core: Pi, OpenCode, Codex, and Claude Code all drive the same harness, so you can change the underlying model without rebuilding around it. It installs into a cloud account your company owns (Fly.io or AWS) via `qm init` from the @yc-software/qm npm package, so it is a framework you deploy on your own bill with your own keys, not a SaaS you sign up for. An org picks one security posture (from strict, where every tool call pauses for approval, to dangerous), but a predeclared command policy hard-denies destructive actions (recursive delete, destructive SQL) in every posture, dangerous included. Honest catch: it is days old and small, and it emails one-time login links, so it needs an email sender (a Resend key or SMTP) wired in before anyone can sign in, the step people most often forget.