| 1. One policy that allows, asks or denies each action | Yes (opt-in) | Partial: per-tool approval and guardrails | Partial: per-tool approval (langchain middleware) | Partial: a guard you write (Harness package) | Yes: rules, modes, hooks | Partial: hooks you write |
| 2. A person’s approval pauses the run; it resumes later, in another process | Yes (durable store) | Yes: RunState | Yes: interrupt() + checkpointer | Yes: deferred tools | Yes: defer hook (one tool call per turn) | Yes: Flows @human_feedback |
| 3. Dollar budget enforced before a model call | Yes: holds the call’s price first; pauses for a person | Not documented (tokens and turns) | No in open source; LangSmith gateway (paid, beta) | Yes: cost_limit ends the run once exceeded | Partial: max_budget_usd stops after the call that crosses it | No: paid Cost Limit only emails |
| 4. Built-in sandboxed command execution | Yes: Docker, E2B, Modal, Daytona, Vercel, your own, local | Yes: local, Docker, 7 hosted | Partial: Docker or Codex policy (langchain); providers via Deep Agents | Partial: Modal, Monty (Harness) | Yes: OS-level, opt-in | Partial: E2B and Daytona tools |
| 5. Sandbox network off by default | Yes, and checked on E2B and Daytona | No: Docker keeps its default network | Partial: yes for the Docker policy; the default runs on the host | Not documented | Partial: sandbox opt-in; new hosts are asked about | No (E2B tool) |
| 6. A run survives a process crash and resumes | Yes (durable store) | Partial: save state yourself, or Temporal and others | Yes: checkpoints | Yes: Temporal, DBOS, Prefect, Restate… | Partial: resumes the conversation | Yes: checkpoint=True |
| 7. Every run recorded locally, no service needed | Yes, on by default | Partial: default exporter sends to OpenAI | Partial: checkpoint history; tracing needs LangSmith | Partial: opt-in | Yes: JSONL transcripts | Partial: opt-in log files |
| 8. OpenTelemetry export | Yes (OTLP, LangSmith, Opik) | Not documented | Yes (via langsmith) | Yes | Yes (traces in beta) | Yes |
| 9. MCP client, local and remote | Yes (+ OAuth) | Yes | Yes (langchain) | Yes | Yes | Yes |
| 10. Sub-agents / delegation | Yes | Yes: handoffs, agents as tools | Yes | Yes | Yes | Yes |
| 11. Scheduled / background runs built in | Yes: cron, interval, durable task store | Not documented | Partial: LangSmith Deployment | Partial: via Prefect and others | Partial: session-scoped scheduling | Not documented |
| 12. HTTP server built in | Yes (OmniServe) | Not documented | Partial: dev server; production is LangSmith Deployment | Partial: dev web UI; adapters for your app | No | Partial: AG-UI package; paid hosted API |
| 13. Model providers | Many (LiteLLM) | Many (OpenAI default; adapters in beta) | Many | Many | Claude only, on several clouds | Many |
| 14. Workflow graphs | No: compose in Python | Partial: Python orchestration | Yes: the core of it | Yes: pydantic-graph | Partial: Workflow tool | Yes: Flows |
| 15. Hosted tracing / evaluation from the same vendor | No | Yes: OpenAI Traces | Yes: LangSmith | Yes: Logfire | Not documented | Yes: AMP |
| 16. Languages | Python | Python; TypeScript (separate) | Python, TypeScript | Python | Python, TypeScript | Python |
| 17. License | MIT | MIT | MIT (library) | MIT | Commercial terms (Python repo MIT) | MIT |