Skip to content

System Comparisons

This is a factual operational comparison, not a leaderboard.

It compares scoped interfaces by architectural role and keeps finding, delivery mechanism, evidence/outcome, review date, material configuration, and limitations independently visible.

Unknown is not unsupported. Not applicable is not a failure. A failed live test is not partial support. A shared protocol is not proof of tested interoperability.

For definitions and correction rules, see the comparison methodology.

7 systems ·15 capabilities ·4 directed integration observations

Rows are scoped to a specific interface, version, deployment mode, material platform/plan/configuration when present, and review date. Unknown is not unsupported. Not applicable is not a failure.

AvailablePartial / conditionalUnsupported in scopeUnknownNot applicable

Harnesses

Harness rows describe native agent-session, tool, permission, coordination, and evidence surfaces.

System / scopeInteractive operationAccess and deploymentMachine control surfaceAccess and deploymentStable session identityIdentity and lifecycleResume or reconnectIdentity and lifecycleCancellation or interruptionIdentity and lifecycleParallel agent executionCoordinationDelegation or handoffCoordinationPre-execution gateGovernanceAttributed decisionGovernanceExecution isolation boundaryIsolation and credentialsCredential mediationIsolation and credentialsUsage reportingResourcesEnforced resource limitsResourcesOperational event exportEvidenceResolved execution factsEvidence
Anthropic Claude CodeClaude Code CLI2.1.282local CLI processConfig: Documentation-backed review of Claude Code 2.1.282 and current first-party docs; live Harness Operations tests pending.AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • This observation is for the terminal CLI, not Claude Desktop or IDE-specific UX.
Evidence
AvailableNativePrimary docs + Live test (pass) · Sep 25, 2026
Evidence & scopePrerequisites
  • Use Claude Code non-interactive/print mode for scripting and automation.
Limitations
  • Agent SDK provides a richer programmatic surface but is deliberately out of scope for this CLI row.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Session identity is native Claude Code state and should not be renamed to a Harness Operations Run.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Resume semantics depend on persisted Claude Code session state.
Evidence
AvailableNativeRelease note · Sep 25, 2026
Evidence & scopeLimitations
  • Interrupting the current turn does not imply rollback of already completed tool side effects.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopePrerequisites
  • Subagents are available natively; agent teams are experimental and require explicit enablement.
Limitations
  • Agent teams are experimental; this finding does not claim identical semantics between subagents and agent teams.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • This finding covers Claude Code-native delegation to subagents; it does not establish cross-vendor handoff or A2A interoperability.
Evidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopePrerequisites
  • Use permission rules and/or PreToolUse hooks rather than bypassPermissions when a protected gate is required.
Limitations
  • Prompt instructions such as CLAUDE.md are not equivalent to this technical gate.
Evidence
Partial / conditionalConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Session/hook context can identify the session and decision path, but the reviewed CLI docs do not establish durable named-human Principal attribution for every approval decision.
Evidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopePrerequisites
  • Enable supported sandbox mode and do not use bypass permissions when an isolation boundary is required.
Limitations
  • Sandbox availability and enforcement depend on platform/configuration; permission prompts alone are not an OS isolation boundary.
Evidence
UnknownNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Claude Code supports managed authentication, helpers, gateways, and environment configuration, but this review has not established the stronger matrix definition that credentials are consistently brokered/withheld from model context and tools.
Evidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopePrerequisites
  • Enable/configure Claude Code monitoring or use the built-in usage/status surfaces as appropriate.
Limitations
  • Exact exported metrics depend on telemetry configuration and privacy settings.
Evidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopePrerequisites
  • Configure one of the documented hard bounds such as tool/subagent concurrency or output-token limits.
Limitations
  • This does not imply a universal monetary budget or all-resource quota system.
Evidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopePrerequisites
  • Persist session transcripts and/or enable OpenTelemetry export.
Limitations
  • Raw prompt/tool content is redacted or disabled by default in several telemetry paths; enabling raw content has privacy implications.
Evidence
Partial / conditionalConfigured nativePrimary docs + Release note · Sep 25, 2026
Evidence & scopeLimitations
  • Session transcripts, version/session IDs, hook data, managed-settings telemetry, and OTel signals retain material facts, but this review has not established a complete durable record of every resolved policy, credential, environment, approval identity, and side-effect fact.
Evidence
CursorCursor CLIhosted docs observed 2026-09-25local CLI processConfig: Rolling first-party docs; exact installed CLI build not independently pinned in this observation.AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Rolling hosted interface; not an immutable binary-version claim.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
UnknownNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • No generic cancel/interrupt contract is claimed from this review.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopePrerequisites
  • Configure blocking hooks/permissions for the protected operation.
Evidence
Partial / conditionalConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Not every permission/approval decision is shown to produce a durable named-Principal audit record.
Evidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopePrerequisites
  • Sandbox must be enabled/configured for the intended boundary.
Evidence
Partial / conditionalConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • This establishes one mediated credential path, not general secret brokering for all tools/services.
Evidence
UnknownNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
UnknownNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Partial / conditionalConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Does not establish a complete immutable record of every policy, credential, sandbox, approval, and side-effect fact.
Evidence
OpenAI CodexCodex App Server0.157.0local App Server processConfig: Documentation-backed review of rust-v0.157.0; live Harness Operations tests pending.Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • App Server is a machine-facing interface; interactive Codex UI surfaces are deliberately out of scope for this observation.
Evidence
AvailableNativePrimary docs + Live test (pass) · Sep 25, 2026
Evidence & scopePrerequisites
  • Launch Codex App Server and speak its bidirectional JSON-RPC-lite protocol over the supported transport.
Limitations
  • This observation does not imply equivalence with Codex Web or Agents API.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Codex calls the durable native identity a thread, not a Harness Operations Run.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Resume semantics are thread-native and should not be generalized to every Codex surface.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Interrupting an active turn is not proof that already completed side effects were rolled back.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Concurrency limits and scheduling policy are not established by this documentation-backed observation.
Evidence
UnknownNativeRelease note · Sep 25, 2026
Evidence & scopeLimitations
  • Current Codex releases contain multi-agent functionality, but this review has not yet established a stable App Server delegation/handoff contract for this capability definition.
Evidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopePrerequisites
  • Approval policy/configuration must require client review for the protected action.
Limitations
  • Approval requests cover specific Codex actions under configured policy; this is not a universal organizational approval system.
Evidence
Partial / conditionalNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • The reviewed App Server approval flow is scoped to thread/turn/client interaction, but the sources reviewed do not establish that every approval response carries a durable named human Principal identity suitable for Harness Operations accountability.
Evidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopePrerequisites
  • Use read_only or workspace_write sandbox rather than full_access when an isolation boundary is required.
Limitations
  • Specific enforcement details vary by sandbox mode/platform; full_access intentionally removes filesystem access restrictions.
Evidence
UnknownNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Codex manages authentication and credential state, but this review has not yet established the stronger matrix definition that raw secrets can be brokered or withheld from model context across the scoped interface.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • The reviewed SDK exposes token usage; this observation does not claim cost/compute/storage reporting.
Evidence
UnknownNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Sandbox and network policy are access controls, not evidence of generic token/cost/duration/compute/concurrency limits under this capability definition.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Retention and downstream audit guarantees remain the responsibility of the integrating client/operator.
Evidence
Partial / conditionalNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Thread/turn metadata, usage, items, settings, and persisted history provide material evidence, but this review has not established preservation of every resolved policy, credential, environment, and authority fact needed for a complete Harness Operations Audit Record.
Evidence
OpenCodeOpenCode CLI / headless server1.18.32local CLI/server processConfig: Documentation-backed review of v1.18.32 and current first-party docs.AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopePrerequisites
  • Configure ask/deny rules; auto mode changes ask behavior but explicit deny remains enforced.
Evidence
Partial / conditionalNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Reviewed docs do not establish durable named-human Principal attribution for every response.
Evidence
Partial / conditionalConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • This review does not establish an OS-level sandbox equivalent to AX/Cursor sandboxing.
Evidence
UnknownNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Partial / conditionalConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Does not establish generic token/cost/duration/compute budgets.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Partial / conditionalNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Complete historical policy/credential/environment resolution is not established.
Evidence

Clients

Client rows describe operator-facing control surfaces; underlying Harness semantics remain separate.

System / scopeInteractive operationAccess and deploymentMachine control surfaceAccess and deploymentStable session identityIdentity and lifecycleResume or reconnectIdentity and lifecycleCancellation or interruptionIdentity and lifecycleParallel agent executionCoordinationDelegation or handoffCoordinationPre-execution gateGovernanceAttributed decisionGovernanceExecution isolation boundaryIsolation and credentialsCredential mediationIsolation and credentialsUsage reportingResourcesEnforced resource limitsResourcesOperational event exportEvidenceResolved execution factsEvidence
PaseoPaseo client/control layer0.9.2desktop/web/mobile clients + self-hosted daemon/CLIConfig: Tagged v0.9.2 release and provider-registry source.AvailableNativeRelease note · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativeSource · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativeSource · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativeSource · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativeSource · Sep 25, 2026
Evidence & scopeLimitations
  • Actual downstream interruption semantics remain provider-native.
Evidence
AvailableNativeRelease note · Sep 25, 2026
Evidence & scopeEvidence
Partial / conditionalExternal controllerSource · Sep 25, 2026
Evidence & scopeLimitations
  • Delegation semantics remain Harness-native rather than a universal Paseo protocol.
Evidence
AvailableExternal controllerSource · Sep 25, 2026
Evidence & scopeLimitations
  • Effectiveness depends on the selected provider's enforcement semantics.
Evidence
Partial / conditionalExternal controllerSource · Sep 25, 2026
Evidence & scopeLimitations
  • This source review does not establish a universal durable named-Principal audit identity for every response.
Evidence
UnknownExternal controllerSource · Sep 25, 2026
Evidence & scopeEvidence
UnknownExternal controllerSource · Sep 25, 2026
Evidence & scopeEvidence
UnknownExternal controllerSource · Sep 25, 2026
Evidence & scopeEvidence
UnknownExternal controllerSource · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativeSource · Sep 25, 2026
Evidence & scopeEvidence
Partial / conditionalNativeSource · Sep 25, 2026
Evidence & scopeLimitations
  • Complete immutable policy/credential/environment/approval evidence is not established.
Evidence

Control layers

Control-layer rows describe cross-Harness observation and control without assuming the layer owns every enforcement boundary.

System / scopeInteractive operationAccess and deploymentMachine control surfaceAccess and deploymentStable session identityIdentity and lifecycleResume or reconnectIdentity and lifecycleCancellation or interruptionIdentity and lifecycleParallel agent executionCoordinationDelegation or handoffCoordinationPre-execution gateGovernanceAttributed decisionGovernanceExecution isolation boundaryIsolation and credentialsCredential mediationIsolation and credentialsUsage reportingResourcesEnforced resource limitsResourcesOperational event exportEvidenceResolved execution factsEvidence
PaseoPaseo client/control layer0.9.2desktop/web/mobile clients + self-hosted daemon/CLIConfig: Tagged v0.9.2 release and provider-registry source.AvailableNativeRelease note · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativeSource · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativeSource · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativeSource · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativeSource · Sep 25, 2026
Evidence & scopeLimitations
  • Actual downstream interruption semantics remain provider-native.
Evidence
AvailableNativeRelease note · Sep 25, 2026
Evidence & scopeEvidence
Partial / conditionalExternal controllerSource · Sep 25, 2026
Evidence & scopeLimitations
  • Delegation semantics remain Harness-native rather than a universal Paseo protocol.
Evidence
AvailableExternal controllerSource · Sep 25, 2026
Evidence & scopeLimitations
  • Effectiveness depends on the selected provider's enforcement semantics.
Evidence
Partial / conditionalExternal controllerSource · Sep 25, 2026
Evidence & scopeLimitations
  • This source review does not establish a universal durable named-Principal audit identity for every response.
Evidence
UnknownExternal controllerSource · Sep 25, 2026
Evidence & scopeEvidence
UnknownExternal controllerSource · Sep 25, 2026
Evidence & scopeEvidence
UnknownExternal controllerSource · Sep 25, 2026
Evidence & scopeEvidence
UnknownExternal controllerSource · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativeSource · Sep 25, 2026
Evidence & scopeEvidence
Partial / conditionalNativeSource · Sep 25, 2026
Evidence & scopeLimitations
  • Complete immutable policy/credential/environment/approval evidence is not established.
Evidence

Execution runtimes

Runtime rows emphasize execution placement, isolation, lifecycle, network, credentials, and resource controls.

System / scopeInteractive operationAccess and deploymentMachine control surfaceAccess and deploymentStable session identityIdentity and lifecycleResume or reconnectIdentity and lifecycleCancellation or interruptionIdentity and lifecycleParallel agent executionCoordinationDelegation or handoffCoordinationPre-execution gateGovernanceAttributed decisionGovernanceExecution isolation boundaryIsolation and credentialsCredential mediationIsolation and credentialsUsage reportingResourcesEnforced resource limitsResourcesOperational event exportEvidenceResolved execution factsEvidence
Agent Executor (AX)AX CLI/control plane0.3.0 (ax.io/v1alpha1)Kubernetes control plane + Agent Substrate runtimeConfig: Tagged v0.3.0 README/API concepts; project explicitly remains pre-stable.AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Partial / conditionalNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Delete/suspend are runtime lifecycle controls, not proof of rollback of external side effects.
Evidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • This is policy enforcement at a runtime/network boundary, not a human Approval system.
Evidence
Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
UnknownNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableConfigured nativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Partial / conditionalNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Declared configuration is not by itself proof every enforcement action occurred; complete audit history is not established.
Evidence

Decision services

Decision-service rows describe structured judgments; downstream policy and enforcement remain separate.

System / scopeInteractive operationAccess and deploymentMachine control surfaceAccess and deploymentStable session identityIdentity and lifecycleResume or reconnectIdentity and lifecycleCancellation or interruptionIdentity and lifecycleParallel agent executionCoordinationDelegation or handoffCoordinationPre-execution gateGovernanceAttributed decisionGovernanceExecution isolation boundaryIsolation and credentialsCredential mediationIsolation and credentialsUsage reportingResourcesEnforced resource limitsResourcesOperational event exportEvidenceResolved execution factsEvidence
TypeSafe AI JevTypeSafe System One API0.2.0hosted HTTP APIConfig: Early-access API reviewed September 25, 2026.Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • A typed judgment is not itself a technical gate.
Evidence
Partial / conditionalNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Model provenance is not organizational Authority.
Evidence
Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
AvailableNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Not applicableNot applicablePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
UnknownNativePrimary docs · Sep 25, 2026
Evidence & scopeEvidence
Partial / conditionalNativePrimary docs · Sep 25, 2026
Evidence & scopeLimitations
  • Callers remain responsible for preserving prompt/schema, model/version, policy interpretation, authorization, and downstream outcome provenance.
Evidence

Directed integration observations

These records answer a narrower question than the feature grid: which specific source and target interfaces have evidence of a particular relationship. An adapter or shared protocol does not automatically establish every lifecycle or governance behavior.

PaseoOpenAI Codex

Partial / scoped

Operation
create, resume, observe, and control provider sessions
Boundary
native Paseo Codex App Server adapter
Scope
Paseo provider/control layer 0.9.2 → Codex App Server 0.157.0
Reviewed
Sep 25, 2026
Limitations
  • Adapter is implemented in Paseo v0.9.2 source, but Harness Operations has not independently live-tested this product pair.
Evidence
PaseoAnthropic Claude Code

Partial / scoped

Operation
create, resume, observe, and control provider sessions
Boundary
native Paseo Claude provider adapter
Scope
Paseo provider/control layer 0.9.2 → Claude Code provider interface 2.1.282 mapping scope
Reviewed
Sep 25, 2026
Limitations
  • Adapter is implemented in Paseo v0.9.2 source, but Harness Operations has not independently live-tested this product pair.
Evidence
PaseoOpenCode

Partial / scoped

Operation
create, resume, observe, and control provider sessions
Boundary
native Paseo OpenCode adapter/bridge
Scope
Paseo provider/control layer 0.9.2 → OpenCode server/provider interface 1.18.32 matrix scope
Reviewed
Sep 25, 2026
Limitations
  • Adapter is implemented in Paseo v0.9.2 source, but Harness Operations has not independently live-tested this product pair.
Evidence
PaseoCursor

Partial / scoped

Operation
create, resume, observe, and control provider sessions
Boundary
ACP stdio via Cursor CLI
Scope
Paseo provider/control layer 0.9.2 → Cursor ACP rolling docs observed 2026-09-25
Reviewed
Sep 25, 2026
Limitations
  • Adapter is implemented in Paseo v0.9.2 source, but Harness Operations has not independently live-tested this product pair.
Evidence

Every substantive cell links to its evidence. If a product changed or a finding is wrong, open an issue or pull request against the canonical comparison data with the exact interface/version/configuration, disputed capability, and primary-source or reproducible evidence.

The comparison does not imply affiliation, endorsement, certification, universal security, or overall product quality.