{
  "name": "Durable Agent Directory",
  "publisher": "NextEleven",
  "about": "Compares published agent infrastructure tools on approval gates, restart recovery, evidence, operator stop controls, policy controls and sandbox isolation. NextEleven listings are our own products and are disclosed as such.",
  "source": "Generated at build time from src/data/listings.ts; drafts are excluded.",
  "agentGuide": "https://agents.nexteleven.dev/llms.txt",
  "criteria": [
    {
      "key": "approvalGates",
      "label": "Approval gates",
      "question": "Can a person or policy hold an action until it is approved?",
      "definition": "Sensitive or irreversible actions can wait for an explicit human or policy decision before they run, and the wait survives longer than a single request.",
      "supportValues": {
        "native": "Built in",
        "pattern": "Documented pattern",
        "none": "Not claimed"
      }
    },
    {
      "key": "restartRecovery",
      "label": "Restart recovery",
      "question": "Does work resume after a crash or redeploy without repeating finished steps?",
      "definition": "Progress is persisted outside the process. After a crash, restart or redeploy, work continues from the last completed step instead of starting over or silently dropping.",
      "supportValues": {
        "native": "Built in",
        "pattern": "Documented pattern",
        "none": "Not claimed"
      }
    },
    {
      "key": "evidenceTrail",
      "label": "Evidence trail",
      "question": "Can you inspect what ran, with what inputs, and who approved it?",
      "definition": "Actions, inputs, outputs and decisions are recorded in a form an operator or auditor can review after the fact.",
      "supportValues": {
        "native": "Built in",
        "pattern": "Documented pattern",
        "none": "Not claimed"
      }
    },
    {
      "key": "killSwitch",
      "label": "Kill switch",
      "question": "Can an operator withdraw permission or stop further actions?",
      "definition": "An operator can revoke, cancel or terminate an agent run so that further actions do not start. Note whether an action already running is interrupted.",
      "supportValues": {
        "native": "Built in",
        "pattern": "Documented pattern",
        "none": "Not claimed"
      }
    },
    {
      "key": "policyControls",
      "label": "Policy controls",
      "question": "Do declared rules decide which tools and actions are allowed?",
      "definition": "Tool access is scoped by declared rules (allowlists, RBAC, CEL, Cedar or similar) that are enforced outside the model, not by prompt instructions.",
      "supportValues": {
        "native": "Built in",
        "pattern": "Documented pattern",
        "none": "Not claimed"
      }
    },
    {
      "key": "isolation",
      "label": "Sandbox isolation",
      "question": "Does code or tool execution run inside an isolated boundary?",
      "definition": "Execution happens inside a container, microVM or similar boundary that limits what a compromised or mistaken action can reach.",
      "supportValues": {
        "native": "Built in",
        "pattern": "Documented pattern",
        "none": "Not claimed"
      }
    }
  ],
  "count": 18,
  "listings": [
    {
      "slug": "mothership",
      "name": "Mothership",
      "vendor": "NextEleven",
      "owner": "nexteleven",
      "placement": "flagship",
      "tagline": "Proprietary agent infrastructure · technical pilot by inquiry.",
      "description": "Mothership is NextEleven’s proprietary agent infrastructure. Explore the product site and request a technical pilot conversation. Hosted seats, pricing and live access require confirmation; the public pilot page is an information and inquiry path.",
      "category": "workspace",
      "status": "early-access",
      "verification": "pending",
      "lastReviewed": "2026-10-30",
      "page": "https://agents.nexteleven.dev/tools/mothership",
      "website": "https://nexteleven.tech/product",
      "repo": null,
      "docs": null,
      "license": "Proprietary",
      "openSource": false,
      "selfHosted": false,
      "hosted": false,
      "access": {
        "kind": "Paid product",
        "cost": "Pilot inquiry · pricing on request",
        "note": "The product site starts a technical conversation. Hosted seats, pricing and live access require confirmation; this link does not create an account."
      },
      "criteria": {
        "approvalGates": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Approval behavior has not been verified for this directory."
        },
        "restartRecovery": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Restart and redeploy recovery have not been verified for this directory."
        },
        "evidenceTrail": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Evidence recording has not been verified for this directory."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Operator stop behavior and integration coverage have not been verified for this directory."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Tool scoping and policy behavior have not been verified for this directory."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "No sandbox isolation is claimed."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "Product and commercial status",
          "url": "https://nexteleven.tech/product"
        },
        {
          "label": "Technical pilot information",
          "url": "https://nexteleven.tech/pilot"
        }
      ],
      "boundaries": [
        "Under evaluation. Availability and capabilities must be confirmed before a pilot.",
        "The pilot information page does not create an account or connect to a live pilot. Hosted seat pricing and availability need confirmation.",
        "Directory marks will change only when supporting documentation or test evidence is linked."
      ],
      "tags": [
        "pilot",
        "workspace",
        "proprietary"
      ]
    },
    {
      "slug": "deadbolt",
      "name": "DeadBolt",
      "vendor": "NextEleven",
      "owner": "nexteleven",
      "placement": "standard",
      "tagline": "A local execution gate: policy and operator controls decide whether each agent action runs.",
      "description": "DeadBolt sits in the code that actually runs an action. Before dispatch it checks a lease, policy and any required approval; an operator can kill a run so further actions are refused. Embed it in Rust, call its local sidecar from Python, Node or any HTTP client, or wrap a trusted stdio MCP server with its proxy. Free under Apache-2.0.",
      "category": "execution-gate",
      "status": "live",
      "verification": "evidence",
      "lastReviewed": "2026-11-14",
      "page": "https://agents.nexteleven.dev/tools/deadbolt",
      "website": "https://nexteleven.dev/deadbolt",
      "repo": "https://github.com/seanebones-lang/deadbolt",
      "docs": "https://github.com/seanebones-lang/deadbolt/blob/main/docs/QUICKSTART.md",
      "license": "Apache-2.0",
      "openSource": true,
      "selfHosted": true,
      "hosted": false,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source tool",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Operator approval for configured irreversible tools; exact-action grants through a trusted adapter."
        },
        "restartRecovery": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "DeadBolt keeps its lease and policy state in a private store, but it does not resume agent work. Pair it with a durable workspace or engine."
        },
        "evidenceTrail": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "The operator store keeps run, decision and approval records."
        },
        "killSwitch": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Kill withdraws a run's lease so further gated actions are refused."
        },
        "policyControls": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Tool policy, destination policy, ancestor policy and fixed run deadlines."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "DeadBolt is a gate, not a sandbox. Keep OS access, child-process credentials and network isolation explicit."
        }
      },
      "evidence": [
        {
          "label": "Evaluation notes, October 2026",
          "url": "https://github.com/seanebones-lang/deadbolt/blob/main/docs/EVALUATION-NOTES-2026-10.md"
        },
        {
          "label": "CI runs",
          "url": "https://github.com/seanebones-lang/deadbolt/actions/workflows/ci.yml"
        },
        {
          "label": "v2.0.2 release with checksums",
          "url": "https://github.com/seanebones-lang/deadbolt/releases/tag/v2.0.2"
        },
        {
          "label": "Python client on PyPI (n11-deadbolt-client)",
          "url": "https://pypi.org/project/n11-deadbolt-client/"
        },
        {
          "label": "Homebrew cask (n11-deadbolt)",
          "url": "https://github.com/seanebones-lang/homebrew-tap"
        }
      ],
      "sources": [
        {
          "label": "README",
          "url": "https://github.com/seanebones-lang/deadbolt#readme"
        },
        {
          "label": "Integration guide",
          "url": "https://github.com/seanebones-lang/deadbolt/blob/main/docs/INTEGRATION.md"
        }
      ],
      "boundaries": [
        "Enforcement covers actions routed through an integrated executor. It does not cancel an action that is already running.",
        "Blank bundle configuration exposes read-only setup tools and provides no active protection.",
        "Test results are execution receipts, not certification."
      ],
      "tags": [
        "kill switch",
        "mcp proxy",
        "rust",
        "python",
        "sidecar",
        "openai agents sdk",
        "fastmcp"
      ]
    },
    {
      "slug": "harness",
      "name": "Harness",
      "vendor": "NextEleven",
      "owner": "nexteleven",
      "placement": "standard",
      "tagline": "A Rust work assistant with exact model routing, resumable sessions, bounded workers and MCP.",
      "description": "Harness reads and edits repositories, runs tools and keeps resumable sessions, with a terminal interface and a local web interface. You choose the exact provider:model route and the fallback order; credentials never reorder providers. MIT licensed and built for dependable personal use.",
      "category": "workspace",
      "status": "beta",
      "verification": "evidence",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/harness",
      "website": "https://github.com/seanebones-lang/harness",
      "repo": "https://github.com/seanebones-lang/harness",
      "docs": "https://github.com/seanebones-lang/harness/blob/main/docs/QUICKSTART.md",
      "license": "MIT",
      "openSource": true,
      "selfHosted": true,
      "hosted": false,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source tool",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "restartRecovery": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Sessions are resumable."
        },
        "evidenceTrail": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Pair with DeadBolt for operator kill control over gated actions."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [
        {
          "label": "Personal-use acceptance record",
          "url": "https://github.com/seanebones-lang/harness/blob/main/docs/PERSONAL_USE.md"
        },
        {
          "label": "CI runs",
          "url": "https://github.com/seanebones-lang/harness/actions/workflows/ci.yml"
        }
      ],
      "sources": [
        {
          "label": "README",
          "url": "https://github.com/seanebones-lang/harness#readme"
        }
      ],
      "boundaries": [
        "Version 1.4.0-beta.2: a prerelease for developer evaluation and personal use.",
        "A successful build does not establish every optional integration or operating system."
      ],
      "tags": [
        "rust",
        "cli",
        "mcp",
        "local-first",
        "model routing"
      ]
    },
    {
      "slug": "witness",
      "name": "Witness",
      "vendor": "NextEleven",
      "owner": "nexteleven",
      "placement": "standard",
      "tagline": "A provenance prototype that keeps the path from evidence to claims, with signed append-only records.",
      "description": "Witness separates records into observed, inferred and generated material, so a reviewer can see how a claim came to exist and when its interpretation changed. Written in Rust with signed records and append-only storage.",
      "category": "evidence",
      "status": "prototype",
      "verification": "evidence",
      "lastReviewed": "2026-11-14",
      "page": "https://agents.nexteleven.dev/tools/witness",
      "website": "https://github.com/seanebones-lang/witness",
      "repo": "https://github.com/seanebones-lang/witness",
      "docs": null,
      "license": "MPL-2.0",
      "openSource": true,
      "selfHosted": true,
      "hosted": false,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source tool",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "restartRecovery": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "evidenceTrail": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Signed records in append-only storage, labelled observed, inferred or generated."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [
        {
          "label": "Proof A — infrastructure and reproducibility record (frozen)",
          "url": "https://github.com/seanebones-lang/witness/blob/main/PROOF_A.md"
        }
      ],
      "sources": [
        {
          "label": "README",
          "url": "https://github.com/seanebones-lang/witness#readme"
        },
        {
          "label": "Known limitations",
          "url": "https://github.com/seanebones-lang/witness/blob/main/KNOWN_LIMITATIONS.md"
        }
      ],
      "boundaries": [
        "Prototype. Not ready to be the sole record for high-consequence decisions."
      ],
      "tags": [
        "provenance",
        "rust",
        "signed records",
        "append-only"
      ]
    },
    {
      "slug": "amazon-bedrock-agentcore",
      "name": "Amazon Bedrock AgentCore",
      "vendor": "Amazon Web Services",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Managed AWS services to run, govern and observe agents built with any framework.",
      "description": "AgentCore is a set of modular managed services: Runtime with session isolation, Gateway for MCP tools, Identity, Memory, Code Interpreter, Browser, Observability, Evaluations, Registry and Policy. Policy intercepts every tool call through Gateway and is authored in natural language or a Cedar-compatible policy language.",
      "category": "workspace",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/amazon-bedrock-agentcore",
      "website": "https://aws.amazon.com/bedrock/agentcore/",
      "repo": null,
      "docs": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/what-is-bedrock-agentcore.html",
      "license": "Proprietary managed service (consumption pricing)",
      "openSource": false,
      "selfHosted": false,
      "hosted": true,
      "access": {
        "kind": "Product / platform",
        "cost": "Check vendor pricing and terms",
        "note": "No price is asserted here. Check the vendor’s current license, hosted pricing and usage terms."
      },
      "criteria": {
        "approvalGates": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "restartRecovery": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Memory persists context across sessions; execution resume is not documented on the overview page."
        },
        "evidenceTrail": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Observability lets you inspect the execution path and audit intermediate outputs."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Policy intercepts every tool call through Gateway; Cedar-compatible rules."
        },
        "isolation": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Runtime session isolation; Harness sessions run in isolated microVMs."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "Developer guide",
          "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/what-is-bedrock-agentcore.html"
        }
      ],
      "boundaries": [
        "AWS only. AgentCore may use and store content to improve the service for your account."
      ],
      "tags": [
        "aws",
        "managed",
        "cedar",
        "mcp",
        "a2a",
        "microvm"
      ]
    },
    {
      "slug": "temporal",
      "name": "Temporal",
      "vendor": "Temporal Technologies",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Durable execution platform: workflows replay from history and survive failures.",
      "description": "Temporal runs application logic as workflows and handles intermittent failures and retries. Each workflow keeps an event history it replays to recover. Its AI Cookbook documents durable agent loops and a human-in-the-loop agent that waits on Signals for approval.",
      "category": "durable-execution",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/temporal",
      "website": "https://temporal.io",
      "repo": "https://github.com/temporalio/temporal",
      "docs": "https://docs.temporal.io/ai-cookbook",
      "license": "MIT",
      "openSource": true,
      "selfHosted": true,
      "hosted": true,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source · check hosted pricing",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "pattern",
          "supportLabel": "Documented pattern",
          "note": "Workflows wait on Signals; the AI Cookbook includes a human-in-the-loop agent."
        },
        "restartRecovery": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Workflows recover by replaying their event history."
        },
        "evidenceTrail": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Each workflow execution keeps an event history."
        },
        "killSwitch": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Operators can cancel or terminate workflow executions."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/temporalio/temporal"
        },
        {
          "label": "AI Cookbook",
          "url": "https://docs.temporal.io/ai-cookbook"
        },
        {
          "label": "Temporal Cloud",
          "url": "https://docs.temporal.io/cloud"
        }
      ],
      "boundaries": [
        "Workflow code must be deterministic; side-effecting tool calls belong in activities and should be idempotent."
      ],
      "tags": [
        "workflows",
        "go",
        "java",
        "typescript",
        "python",
        "signals"
      ]
    },
    {
      "slug": "toolhive",
      "name": "ToolHive",
      "vendor": "Stacklok",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Run and manage MCP servers in isolated containers, with access policy and audit logs.",
      "description": "ToolHive runs every MCP server in an isolated container and, with an authentication source configured, enforces identity and access policy per request. It emits audit logs and OpenTelemetry traces, and includes a Kubernetes operator for servers and registries.",
      "category": "mcp-gateway",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/toolhive",
      "website": "https://stacklok.com",
      "repo": "https://github.com/stacklok/toolhive",
      "docs": null,
      "license": "Apache-2.0",
      "openSource": true,
      "selfHosted": true,
      "hosted": false,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source tool",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "restartRecovery": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "evidenceTrail": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Audit logging and OpenTelemetry traces."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Identity and access policy per request when an auth source is configured."
        },
        "isolation": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Each MCP server runs in an isolated container."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/stacklok/toolhive"
        }
      ],
      "boundaries": [
        "Per-request policy requires an authentication source to be configured."
      ],
      "tags": [
        "mcp",
        "containers",
        "kubernetes operator",
        "registry"
      ]
    },
    {
      "slug": "docker-mcp-gateway",
      "name": "Docker MCP Gateway",
      "vendor": "Docker",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "The Docker CLI plugin behind MCP Toolkit: containerized MCP servers with tool allowlists.",
      "description": "Docker MCP Gateway powers the MCP Toolkit in Docker Desktop and also runs standalone. Local MCP servers run in isolated containers, credentials go through Docker Desktop secrets management, profiles allowlist individual tools, and built-in logging traces each call.",
      "category": "mcp-gateway",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/docker-mcp-gateway",
      "website": "https://docs.docker.com/ai/mcp-catalog-and-toolkit/",
      "repo": "https://github.com/docker/mcp-gateway",
      "docs": null,
      "license": "MIT",
      "openSource": true,
      "selfHosted": true,
      "hosted": false,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source tool",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "restartRecovery": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "evidenceTrail": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Built-in logging and call tracing."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "pattern",
          "supportLabel": "Documented pattern",
          "note": "Per-profile allowlists enable or disable individual tools."
        },
        "isolation": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Local MCP servers run in isolated containers with minimal host privileges."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/docker/mcp-gateway"
        }
      ],
      "boundaries": [
        "Some Docker governance features are edition-specific; check what your plan includes."
      ],
      "tags": [
        "mcp",
        "docker",
        "containers",
        "secrets"
      ]
    },
    {
      "slug": "langgraph",
      "name": "LangGraph",
      "vendor": "LangChain",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Low-level orchestration for stateful agents, with durable execution and human-in-the-loop.",
      "description": "LangGraph builds agents as graphs with persisted state, so they can survive failures and resume where they left off. Human-in-the-loop interrupts let a person inspect and modify state mid-run. LangSmith Deployment hosts long-running, stateful agents.",
      "category": "framework",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/langgraph",
      "website": "https://www.langchain.com/langgraph",
      "repo": "https://github.com/langchain-ai/langgraph",
      "docs": null,
      "license": "MIT",
      "openSource": true,
      "selfHosted": true,
      "hosted": true,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source · check hosted pricing",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Human-in-the-loop interrupts pause the graph for review."
        },
        "restartRecovery": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Durable execution: agents persist through failures and resume."
        },
        "evidenceTrail": {
          "support": "pattern",
          "supportLabel": "Documented pattern",
          "note": "Persisted state per step can be inspected; LangSmith adds tracing."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/langchain-ai/langgraph"
        }
      ],
      "boundaries": [
        "Durability depends on the checkpointer backend you configure."
      ],
      "tags": [
        "python",
        "typescript",
        "checkpoints",
        "interrupts",
        "langsmith"
      ]
    },
    {
      "slug": "microsoft-agent-framework",
      "name": "Microsoft Agent Framework",
      "vendor": "Microsoft",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Build and orchestrate agents and multi-agent workflows in Python and .NET.",
      "description": "Microsoft Agent Framework provides graph-based workflows with checkpointing, streaming, human-in-the-loop and time-travel, plus built-in OpenTelemetry tracing. Migration guides cover Semantic Kernel and AutoGen.",
      "category": "framework",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/microsoft-agent-framework",
      "website": "https://github.com/microsoft/agent-framework",
      "repo": "https://github.com/microsoft/agent-framework",
      "docs": null,
      "license": "MIT",
      "openSource": true,
      "selfHosted": true,
      "hosted": true,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source · check hosted pricing",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Human-in-the-loop requests in graph workflows."
        },
        "restartRecovery": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Workflow checkpointing; you choose checkpoint storage."
        },
        "evidenceTrail": {
          "support": "pattern",
          "supportLabel": "Documented pattern",
          "note": "Built-in OpenTelemetry tracing."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/microsoft/agent-framework"
        }
      ],
      "boundaries": [
        "Some packages (AF Labs) are marked experimental."
      ],
      "tags": [
        "python",
        ".net",
        "workflows",
        "opentelemetry",
        "foundry"
      ]
    },
    {
      "slug": "trigger-dev",
      "name": "Trigger.dev",
      "vendor": "Trigger.dev",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Open-source platform for long-running AI tasks in TypeScript, with checkpointing and waitpoints.",
      "description": "Trigger.dev runs long-running tasks with retries, queues and observability. Tasks are durable through checkpointing, and Waitpoints add human-in-the-loop judgment at critical decision points. Self-host with Docker or Kubernetes, or use the cloud service.",
      "category": "durable-execution",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/trigger-dev",
      "website": "https://trigger.dev",
      "repo": "https://github.com/triggerdotdev/trigger.dev",
      "docs": null,
      "license": "Apache-2.0",
      "openSource": true,
      "selfHosted": true,
      "hosted": true,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source · check hosted pricing",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Waitpoints pause a task for human-in-the-loop decisions."
        },
        "restartRecovery": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Tasks are durable through checkpointing."
        },
        "evidenceTrail": {
          "support": "pattern",
          "supportLabel": "Documented pattern",
          "note": "Built-in run observability; confirm retention before relying on it for audit."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/triggerdotdev/trigger.dev"
        }
      ],
      "boundaries": [],
      "tags": [
        "typescript",
        "queues",
        "waitpoints",
        "helm"
      ]
    },
    {
      "slug": "agentgateway",
      "name": "agentgateway",
      "vendor": "Linux Foundation",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Open-source proxy for agent and tool traffic over MCP and A2A, with CEL policy.",
      "description": "agentgateway federates MCP tools and A2A agents behind one proxy and adds security, observability and governance: JWT, API-key and OAuth authentication, fine-grained RBAC with a CEL policy engine, and OpenTelemetry metrics, logs and traces. Runs standalone or on Kubernetes.",
      "category": "mcp-gateway",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/agentgateway",
      "website": "https://agentgateway.dev",
      "repo": "https://github.com/agentgateway/agentgateway",
      "docs": null,
      "license": "Apache-2.0",
      "openSource": true,
      "selfHosted": true,
      "hosted": false,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source tool",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "restartRecovery": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "evidenceTrail": {
          "support": "pattern",
          "supportLabel": "Documented pattern",
          "note": "OpenTelemetry metrics, logs and tracing for tool traffic."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Fine-grained RBAC with a CEL policy engine."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/agentgateway/agentgateway"
        }
      ],
      "boundaries": [],
      "tags": [
        "mcp",
        "a2a",
        "cel",
        "rbac",
        "kubernetes",
        "rust"
      ]
    },
    {
      "slug": "dbos",
      "name": "DBOS",
      "vendor": "DBOS",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Durable workflows and queues as a library, backed by the Postgres you already run.",
      "description": "DBOS adds durable workflows to your application as a library (Python, TypeScript, Go, Rust and Java), with no separate orchestration server. Workflows resume from the last completed step after a restart and can pause until a notification arrives — useful for approvals. DBOS Conductor is a control plane you can self-host or connect to.",
      "category": "durable-execution",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/dbos",
      "website": "https://www.dbos.dev",
      "repo": "https://github.com/dbos-inc/dbos-transact-py",
      "docs": null,
      "license": "MIT",
      "openSource": true,
      "selfHosted": true,
      "hosted": true,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source · check hosted pricing",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "pattern",
          "supportLabel": "Documented pattern",
          "note": "Workflows can pause on DBOS.recv until a notification is sent."
        },
        "restartRecovery": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Workflows resume from the last completed step after a restart."
        },
        "evidenceTrail": {
          "support": "pattern",
          "supportLabel": "Documented pattern",
          "note": "Step checkpoints live in your Postgres and can be queried; not a purpose-built audit log."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub (Python)",
          "url": "https://github.com/dbos-inc/dbos-transact-py"
        }
      ],
      "boundaries": [
        "Requires Postgres."
      ],
      "tags": [
        "postgres",
        "python",
        "typescript",
        "go",
        "java",
        "queues",
        "conductor"
      ]
    },
    {
      "slug": "e2b",
      "name": "E2B",
      "vendor": "E2B",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Open-source infrastructure for running AI-generated code in isolated cloud sandboxes.",
      "description": "E2B gives agents secure, isolated sandboxes for running code. Use the hosted service with an API key, or self-host the infrastructure with Terraform on AWS, GCP, Azure or a Linux machine.",
      "category": "sandbox",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/e2b",
      "website": "https://e2b.dev",
      "repo": "https://github.com/e2b-dev/E2B",
      "docs": null,
      "license": "Apache-2.0",
      "openSource": true,
      "selfHosted": true,
      "hosted": true,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source · check hosted pricing",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "restartRecovery": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "evidenceTrail": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "killSwitch": {
          "support": "pattern",
          "supportLabel": "Documented pattern",
          "note": "Sandboxes can be terminated from the SDK; this stops the environment, not a policy decision."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "isolation": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Code runs in isolated sandboxes."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/e2b-dev/E2B"
        }
      ],
      "boundaries": [],
      "tags": [
        "sandbox",
        "code execution",
        "python",
        "typescript",
        "terraform"
      ]
    },
    {
      "slug": "inngest",
      "name": "Inngest",
      "vendor": "Inngest",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Stateful step functions and AI workflows on serverless, servers or the edge.",
      "description": "Inngest runs durable step functions: each step is persisted, and functions can pause with waitForEvent until a matching event arrives, which is a common way to wait for an approval. Use Inngest Cloud or self-host the server.",
      "category": "durable-execution",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/inngest",
      "website": "https://www.inngest.com",
      "repo": "https://github.com/inngest/inngest",
      "docs": null,
      "license": "SSPL server (delayed Apache-2.0 publication); Apache-2.0 SDKs",
      "openSource": false,
      "selfHosted": true,
      "hosted": true,
      "access": {
        "kind": "Product / platform",
        "cost": "Check vendor pricing and terms",
        "note": "No price is asserted here. Check the vendor’s current license, hosted pricing and usage terms."
      },
      "criteria": {
        "approvalGates": {
          "support": "pattern",
          "supportLabel": "Documented pattern",
          "note": "Functions pause with waitForEvent until a matching event arrives."
        },
        "restartRecovery": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Steps are persisted and functions resume after failures."
        },
        "evidenceTrail": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/inngest/inngest"
        }
      ],
      "boundaries": [
        "Server license is SSPL; check it against your distribution plans."
      ],
      "tags": [
        "typescript",
        "python",
        "go",
        "serverless",
        "events"
      ]
    },
    {
      "slug": "langfuse",
      "name": "Langfuse",
      "vendor": "Langfuse (part of ClickHouse)",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Open-source LLM engineering platform: tracing, evaluation and debugging, self-hosted or cloud.",
      "description": "Langfuse records traces of LLM and agent applications so you can monitor, evaluate and debug them. Self-host with Docker Compose, a VM or Kubernetes (Helm, with Terraform templates for AWS, Azure and GCP), or use Langfuse Cloud.",
      "category": "evidence",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/langfuse",
      "website": "https://langfuse.com",
      "repo": "https://github.com/langfuse/langfuse",
      "docs": null,
      "license": "MIT (except ee folders)",
      "openSource": true,
      "selfHosted": true,
      "hosted": true,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source · check hosted pricing",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "restartRecovery": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "evidenceTrail": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Traces of LLM and agent application runs."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/langfuse/langfuse"
        }
      ],
      "boundaries": [
        "Traces show what your instrumentation sends; coverage depends on how you instrument."
      ],
      "tags": [
        "tracing",
        "evals",
        "self-hosted",
        "helm",
        "clickhouse"
      ]
    },
    {
      "slug": "nemo-guardrails",
      "name": "NeMo Guardrails",
      "vendor": "NVIDIA",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Open-source toolkit for programmable guardrails on LLM inputs, outputs and tool calls.",
      "description": "NeMo Guardrails adds controllable rules to LLM applications, including execution rails on the input and output of actions (tools) the model calls. Use it as a Python library or run its HTTP guardrails server.",
      "category": "guardrails",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/nemo-guardrails",
      "website": "https://github.com/NVIDIA/NeMo-Guardrails",
      "repo": "https://github.com/NVIDIA/NeMo-Guardrails",
      "docs": null,
      "license": "Apache-2.0",
      "openSource": true,
      "selfHosted": true,
      "hosted": false,
      "access": {
        "kind": "Agent tool / platform",
        "cost": "Free source tool",
        "note": "Source is available under the stated open-source license. Hosting, model/API usage and optional vendor services can have separate costs."
      },
      "criteria": {
        "approvalGates": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "restartRecovery": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "evidenceTrail": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Execution rails check the input and output of tool actions."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/NVIDIA/NeMo-Guardrails"
        }
      ],
      "boundaries": [
        "Rails are model-adjacent checks; pair with an enforcement point at the executor for irreversible actions."
      ],
      "tags": [
        "python",
        "guardrails",
        "colang",
        "server"
      ]
    },
    {
      "slug": "restate",
      "name": "Restate",
      "vendor": "Restate",
      "owner": "third-party",
      "placement": "standard",
      "tagline": "Lightweight durable execution with a journal-and-replay model, self-hosted or in Restate Cloud.",
      "description": "Restate is a platform for building applications that tolerate infrastructure faults, with durable AI agents as a listed use case. Its workflows coordinate long-running processes, human approvals, webhooks and other signals.",
      "category": "durable-execution",
      "status": "live",
      "verification": "listed",
      "lastReviewed": "2026-10-29",
      "page": "https://agents.nexteleven.dev/tools/restate",
      "website": "https://restate.dev",
      "repo": "https://github.com/restatedev/restate",
      "docs": "https://docs.restate.dev/",
      "license": "BSL 1.1 (converts to Apache-2.0 four years after each release)",
      "openSource": false,
      "selfHosted": true,
      "hosted": true,
      "access": {
        "kind": "Product / platform",
        "cost": "Check vendor pricing and terms",
        "note": "No price is asserted here. Check the vendor’s current license, hosted pricing and usage terms."
      },
      "criteria": {
        "approvalGates": {
          "support": "pattern",
          "supportLabel": "Documented pattern",
          "note": "Workflows are documented for human approvals and external signals."
        },
        "restartRecovery": {
          "support": "native",
          "supportLabel": "Built in",
          "note": "Durable execution through a journal that is replayed on recovery."
        },
        "evidenceTrail": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "killSwitch": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "policyControls": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        },
        "isolation": {
          "support": "none",
          "supportLabel": "Not claimed",
          "note": "Not documented by the vendor or not yet reviewed."
        }
      },
      "evidence": [],
      "sources": [
        {
          "label": "GitHub",
          "url": "https://github.com/restatedev/restate"
        },
        {
          "label": "Docs",
          "url": "https://docs.restate.dev/"
        }
      ],
      "boundaries": [
        "Source-available under BSL 1.1 rather than an OSI open-source license."
      ],
      "tags": [
        "workflows",
        "typescript",
        "rust",
        "durable promises"
      ]
    }
  ]
}