{
  "schema": "agentregister_ratings/v1",
  "rules_edition": "v1.0",
  "published_at": "2026-10-26T00:00:00Z",
  "rated_count": 20,
  "axes": [
    {
      "key": "per_agent_cost_attribution",
      "label": "Per-Agent Cost Attribution",
      "max_score": 20
    },
    {
      "key": "spend_and_lease_caps",
      "label": "Spend & Lease Caps",
      "max_score": 20
    },
    {
      "key": "outbound_audit_receipts",
      "label": "Outbound Audit Receipts",
      "max_score": 20
    },
    {
      "key": "cas_state_safety",
      "label": "CAS State Safety",
      "max_score": 20
    },
    {
      "key": "portable_identity",
      "label": "Portable Identity",
      "max_score": 20
    }
  ],
  "entries": [
    {
      "rank": 1,
      "slug": "teleon-thp-v1-d1-fabric",
      "name": "Teleon THP v1.0 + D1 Fabric",
      "category": "Accountability & Queue Substrate",
      "endpoint_or_runtime": "https://api.teleon.dev (THP v1.0)",
      "composite_score": 98,
      "grade": "A1",
      "axes": {
        "per_agent_cost_attribution": 20,
        "spend_and_lease_caps": 20,
        "outbound_audit_receipts": 20,
        "cas_state_safety": 20,
        "portable_identity": 18
      },
      "evidence": "Native X-Teleon-Surface-Id attribution, monotonic lease_epoch queue fencing, expected_version CAS stores, and SWHID receipts."
    },
    {
      "rank": 2,
      "slug": "cloudflare-workers-d1",
      "name": "Cloudflare Workers + D1 SQLite",
      "category": "Edge Execution Runtime",
      "endpoint_or_runtime": "V8 Isolates + D1 Transactional SQLite",
      "composite_score": 94,
      "grade": "A1",
      "axes": {
        "per_agent_cost_attribution": 19,
        "spend_and_lease_caps": 19,
        "outbound_audit_receipts": 18,
        "cas_state_safety": 20,
        "portable_identity": 18
      },
      "evidence": "Per-worker CPU/wall limits, zero-ambient filesystem isolation, parameterized SQLite CAS writes, and deterministic WebCrypto."
    },
    {
      "rank": 3,
      "slug": "ollama-cloud-muse-spark-open",
      "name": "Ollama Cloud (muse-spark-open)",
      "category": "Cloud Model Endpoint",
      "endpoint_or_runtime": "https://ollama.com/v1 · ollama-cloud/muse-spark-open",
      "composite_score": 93,
      "grade": "A1",
      "axes": {
        "per_agent_cost_attribution": 19,
        "spend_and_lease_caps": 18,
        "outbound_audit_receipts": 19,
        "cas_state_safety": 18,
        "portable_identity": 19
      },
      "evidence": "OpenAI-compatible cloud API with exact prompt/completion token telemetry, high-reasoning drift calibration, and portable model IDs."
    },
    {
      "rank": 4,
      "slug": "ollama-cloud-glm-5-3-flash",
      "name": "Ollama Cloud (glm-5.3-flash)",
      "category": "Cloud Model Endpoint",
      "endpoint_or_runtime": "https://ollama.com/v1 · ollama-cloud/glm-5.3-flash",
      "composite_score": 92,
      "grade": "A1",
      "axes": {
        "per_agent_cost_attribution": 19,
        "spend_and_lease_caps": 19,
        "outbound_audit_receipts": 18,
        "cas_state_safety": 17,
        "portable_identity": 19
      },
      "evidence": "Sub-second cloud flash throughput over https://ollama.com/v1 with deterministic JSON tool-call schemas and low per-task spend."
    },
    {
      "rank": 5,
      "slug": "opencode-cloud-mcp",
      "name": "OpenCode (Ollama Cloud + MCP Mode)",
      "category": "Agent Coding & Fleet Harness",
      "endpoint_or_runtime": "OpenCode CLI + https://ollama.com/v1 + Streamable HTTP MCP",
      "composite_score": 91,
      "grade": "A1",
      "axes": {
        "per_agent_cost_attribution": 18,
        "spend_and_lease_caps": 18,
        "outbound_audit_receipts": 19,
        "cas_state_safety": 17,
        "portable_identity": 19
      },
      "evidence": "First-class Streamable HTTP MCP client, clean provider routing to Ollama Cloud models, and explicit per-session tool permission gates."
    },
    {
      "rank": 6,
      "slug": "google-antigravity-agy",
      "name": "Google Antigravity (AGY 2.0)",
      "category": "Agentic Engineering Harness",
      "endpoint_or_runtime": "Antigravity Workspace + Structured JSONL Transcripts",
      "composite_score": 91,
      "grade": "A1",
      "axes": {
        "per_agent_cost_attribution": 18,
        "spend_and_lease_caps": 18,
        "outbound_audit_receipts": 20,
        "cas_state_safety": 17,
        "portable_identity": 18
      },
      "evidence": "Full step-indexed JSONL execution transcripts, subagent conversation isolation, MCP native bindings, and explicit rule enforcement."
    },
    {
      "rank": 7,
      "slug": "anthropic-claude-code",
      "name": "Anthropic Claude Code",
      "category": "Agent Coding Harness",
      "endpoint_or_runtime": "Claude Code CLI + .mcp.json + CLAUDE.md",
      "composite_score": 86,
      "grade": "A2",
      "axes": {
        "per_agent_cost_attribution": 18,
        "spend_and_lease_caps": 17,
        "outbound_audit_receipts": 17,
        "cas_state_safety": 16,
        "portable_identity": 18
      },
      "evidence": "Granular tool allowlists, session cost counters, native MCP transport, and deterministic hook interception before shell writes."
    },
    {
      "rank": 8,
      "slug": "openai-codex-cli",
      "name": "OpenAI Codex CLI",
      "category": "Sandboxed Coding Harness",
      "endpoint_or_runtime": "Codex CLI + Kernel Seatbelt/Landlock Sandbox",
      "composite_score": 85,
      "grade": "A2",
      "axes": {
        "per_agent_cost_attribution": 17,
        "spend_and_lease_caps": 18,
        "outbound_audit_receipts": 17,
        "cas_state_safety": 16,
        "portable_identity": 17
      },
      "evidence": "OS-enforced network and write sandboxing, AGENTS.md instruction hierarchy, and TOML-configured MCP server integration."
    },
    {
      "rank": 9,
      "slug": "temporal-cloud-workers",
      "name": "Temporal Cloud Worker Fleet",
      "category": "Durable Execution Runtime",
      "endpoint_or_runtime": "Temporal Event History + Deterministic Replay",
      "composite_score": 86,
      "grade": "A2",
      "axes": {
        "per_agent_cost_attribution": 17,
        "spend_and_lease_caps": 17,
        "outbound_audit_receipts": 19,
        "cas_state_safety": 18,
        "portable_identity": 15
      },
      "evidence": "Immutable workflow event histories, task-queue rate limits, and replay determinism; pairs cleanly with SWHID artifact commits."
    },
    {
      "rank": 10,
      "slug": "anthropic-messages-api",
      "name": "Anthropic Messages API (Claude 4.6)",
      "category": "Cloud Model Endpoint",
      "endpoint_or_runtime": "https://api.anthropic.com/v1/messages",
      "composite_score": 84,
      "grade": "A2",
      "axes": {
        "per_agent_cost_attribution": 18,
        "spend_and_lease_caps": 17,
        "outbound_audit_receipts": 17,
        "cas_state_safety": 15,
        "portable_identity": 17
      },
      "evidence": "Workspace-scoped API keys with monthly USD spend caps, cache-token accounting, and strict tool-use schema validation."
    },
    {
      "rank": 11,
      "slug": "google-vertex-gemini-api",
      "name": "Google Vertex AI (Gemini 2.5 Pro)",
      "category": "Cloud Model Endpoint",
      "endpoint_or_runtime": "Vertex AI IAM + Cloud Audit Logs",
      "composite_score": 84,
      "grade": "A2",
      "axes": {
        "per_agent_cost_attribution": 18,
        "spend_and_lease_caps": 17,
        "outbound_audit_receipts": 18,
        "cas_state_safety": 15,
        "portable_identity": 16
      },
      "evidence": "IAM service-account attribution, Cloud Audit Logs data-access receipts, and quota caps per project and region."
    },
    {
      "rank": 12,
      "slug": "openai-responses-api",
      "name": "OpenAI Responses API (GPT-5)",
      "category": "Cloud Model Endpoint",
      "endpoint_or_runtime": "https://api.openai.com/v1/responses",
      "composite_score": 83,
      "grade": "A2",
      "axes": {
        "per_agent_cost_attribution": 18,
        "spend_and_lease_caps": 17,
        "outbound_audit_receipts": 17,
        "cas_state_safety": 14,
        "portable_identity": 17
      },
      "evidence": "Project-level budget limits, native remote MCP tool calls, and structured response IDs; requires external CAS store for state."
    },
    {
      "rank": 13,
      "slug": "fly-machines-litefs",
      "name": "Fly.io Machines + LiteFS",
      "category": "MicroVM Container Runtime",
      "endpoint_or_runtime": "Firecracker MicroVMs + Regional Volumes",
      "composite_score": 79,
      "grade": "B1",
      "axes": {
        "per_agent_cost_attribution": 16,
        "spend_and_lease_caps": 16,
        "outbound_audit_receipts": 15,
        "cas_state_safety": 16,
        "portable_identity": 16
      },
      "evidence": "Hardware-virtualized microVM boundaries and stop-on-idle leases; requires operator guardrails against volume deletion."
    },
    {
      "rank": 14,
      "slug": "github-copilot-coding-agent",
      "name": "GitHub Copilot Coding Agent",
      "category": "Repository Workflow Harness",
      "endpoint_or_runtime": "GitHub Actions Ephemeral Runner + PR Gate",
      "composite_score": 78,
      "grade": "B1",
      "axes": {
        "per_agent_cost_attribution": 16,
        "spend_and_lease_caps": 16,
        "outbound_audit_receipts": 17,
        "cas_state_safety": 15,
        "portable_identity": 14
      },
      "evidence": "Runs inside ephemeral Actions containers with git commit provenance and mandatory human pull-request review gates."
    },
    {
      "rank": 15,
      "slug": "cursor-background-agents",
      "name": "Cursor Background Agents",
      "category": "Cloud IDE Harness",
      "endpoint_or_runtime": "Remote VM Branch Worker + .cursor/mcp.json",
      "composite_score": 77,
      "grade": "B1",
      "axes": {
        "per_agent_cost_attribution": 16,
        "spend_and_lease_caps": 15,
        "outbound_audit_receipts": 16,
        "cas_state_safety": 15,
        "portable_identity": 15
      },
      "evidence": "Per-agent spend controls and isolated git branch checkout; outbound non-git side effects still require MCP fencing."
    },
    {
      "rank": 16,
      "slug": "aws-bedrock-agents",
      "name": "AWS Bedrock Agents",
      "category": "Enterprise Cloud Runtime",
      "endpoint_or_runtime": "AWS IAM + CloudTrail + Action Groups",
      "composite_score": 76,
      "grade": "B1",
      "axes": {
        "per_agent_cost_attribution": 17,
        "spend_and_lease_caps": 16,
        "outbound_audit_receipts": 17,
        "cas_state_safety": 14,
        "portable_identity": 12
      },
      "evidence": "Strong CloudTrail auditability and IAM role scoping, with lower cross-cloud identity portability outside AWS."
    },
    {
      "rank": 17,
      "slug": "vercel-ai-sdk-fluid",
      "name": "Vercel AI SDK + Fluid Compute",
      "category": "Serverless Agent Runtime",
      "endpoint_or_runtime": "TypeScript Streaming Tool Loop",
      "composite_score": 72,
      "grade": "B2",
      "axes": {
        "per_agent_cost_attribution": 15,
        "spend_and_lease_caps": 14,
        "outbound_audit_receipts": 14,
        "cas_state_safety": 13,
        "portable_identity": 16
      },
      "evidence": "Clean multi-provider model abstraction and step count caps (maxSteps); relies on external DB for lease and CAS safety."
    },
    {
      "rank": 18,
      "slug": "langgraph-cloud",
      "name": "LangGraph Cloud Platform",
      "category": "Graph Orchestration Runtime",
      "endpoint_or_runtime": "Checkpointed State Graph + Interrupts",
      "composite_score": 71,
      "grade": "B2",
      "axes": {
        "per_agent_cost_attribution": 14,
        "spend_and_lease_caps": 14,
        "outbound_audit_receipts": 15,
        "cas_state_safety": 15,
        "portable_identity": 13
      },
      "evidence": "Supports human-in-the-loop graph interrupts and thread checkpoints; identity portability remains coupled to framework state."
    },
    {
      "rank": 19,
      "slug": "crewai-amp-cloud",
      "name": "CrewAI AMP Cloud",
      "category": "Multi-Agent Role Framework",
      "endpoint_or_runtime": "Role-Delegated Python Agent Crew",
      "composite_score": 61,
      "grade": "C1",
      "axes": {
        "per_agent_cost_attribution": 12,
        "spend_and_lease_caps": 12,
        "outbound_audit_receipts": 13,
        "cas_state_safety": 11,
        "portable_identity": 13
      },
      "evidence": "Rapid multi-agent prototyping, but peer delegation requires external THP clamping to prevent Chatter-loop token burn."
    },
    {
      "rank": 20,
      "slug": "unfenced-raw-cron-webhooks",
      "name": "Unfenced Raw Cron + Shell Webhooks",
      "category": "Ad-Hoc Baseline (Control Group)",
      "endpoint_or_runtime": "Ambient ENV Secrets + Unversioned SQL Writes",
      "composite_score": 28,
      "grade": "D1",
      "axes": {
        "per_agent_cost_attribution": 5,
        "spend_and_lease_caps": 4,
        "outbound_audit_receipts": 6,
        "cas_state_safety": 5,
        "portable_identity": 8
      },
      "evidence": "Zero per-agent cost attribution, shared ambient API tokens, split-brain duplicate runs on retry, and zero SWHID provenance."
    }
  ]
}