Six criteria, every listing, one table.

Approval behavior has not been verified for this directory.

Restart and redeploy recovery have not been verified for this directory.

Evidence recording has not been verified for this directory.

Operator stop behavior and integration coverage have not been verified for this directory.

Tool scoping and policy behavior have not been verified for this directory.

No sandbox isolation is claimed.

Not documented by the vendor or not yet reviewed.

Sessions are resumable.

Not documented by the vendor or not yet reviewed.

Pair with DeadBolt for operator kill control over gated actions.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Memory persists context across sessions; execution resume is not documented on the overview page.

Observability lets you inspect the execution path and audit intermediate outputs.

Not documented by the vendor or not yet reviewed.

Policy intercepts every tool call through Gateway; Cedar-compatible rules.

Runtime session isolation; Harness sessions run in isolated microVMs.

Operator approval for configured irreversible tools; exact-action grants through a trusted adapter.

DeadBolt keeps its lease and policy state in a private store, but it does not resume agent work. Pair it with a durable workspace or engine.

The operator store keeps run, decision and approval records.

Kill withdraws a run's lease so further gated actions are refused.

Tool policy, destination policy, ancestor policy and fixed run deadlines.

DeadBolt is a gate, not a sandbox. Keep OS access, child-process credentials and network isolation explicit.

Workflows wait on Signals; the AI Cookbook includes a human-in-the-loop agent.

Workflows recover by replaying their event history.

Each workflow execution keeps an event history.

Operators can cancel or terminate workflow executions.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Waitpoints pause a task for human-in-the-loop decisions.

Tasks are durable through checkpointing.

Built-in run observability; confirm retention before relying on it for audit.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Workflows can pause on DBOS.recv until a notification is sent.

Workflows resume from the last completed step after a restart.

Step checkpoints live in your Postgres and can be queried; not a purpose-built audit log.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Functions pause with waitForEvent until a matching event arrives.

Steps are persisted and functions resume after failures.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Workflows are documented for human approvals and external signals.

Durable execution through a journal that is replayed on recovery.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Human-in-the-loop interrupts pause the graph for review.

Durable execution: agents persist through failures and resume.

Persisted state per step can be inspected; LangSmith adds tracing.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Human-in-the-loop requests in graph workflows.

Workflow checkpointing; you choose checkpoint storage.

Built-in OpenTelemetry tracing.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Audit logging and OpenTelemetry traces.

Not documented by the vendor or not yet reviewed.

Identity and access policy per request when an auth source is configured.

Each MCP server runs in an isolated container.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Built-in logging and call tracing.

Not documented by the vendor or not yet reviewed.

Per-profile allowlists enable or disable individual tools.

Local MCP servers run in isolated containers with minimal host privileges.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

OpenTelemetry metrics, logs and tracing for tool traffic.

Not documented by the vendor or not yet reviewed.

Fine-grained RBAC with a CEL policy engine.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Sandboxes can be terminated from the SDK; this stops the environment, not a policy decision.

Not documented by the vendor or not yet reviewed.

Code runs in isolated sandboxes.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Execution rails check the input and output of tool actions.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Signed records in append-only storage, labelled observed, inferred or generated.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Traces of LLM and agent application runs.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.

Not documented by the vendor or not yet reviewed.