KDCube vs. the Alternatives #
KDCube is the only self-hosted agentic runtime with built-in multi-tenant policy enforcement, per-tenant economics, and dual-protocol streaming — no cloud lock-in required.
| Feature / Capability | KDCube self-hosted | Build yourself glue open-source | LangGraph graph exec | CrewAI multi-agent | AutoGen / AG2 MS multi-agent | AgentScope distributed | Dify LLM app platform | Flowise low-code flows |
|---|---|---|---|---|---|---|---|---|
| 🔒 Governance & Security | ||||||||
| Pre-execution policy gate | Partial↗ | DIY · OPA + middleware | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Per-tenant budget caps & rate limits | ✅↗ | DIY | ✗ | ✗ | ✗ | ✗ | Partial↗ | ✗ |
| Tenant boundary isolation | ✅↗ | DIY · Postgres RLS + JWT | Partial↗ | ✗ | ✗ | ✗ | Partial↗ | ✗ |
| Subprocess / sandbox isolation | ✅↗ | DIY · gVisor / Firecracker | ✗ | ✗ | Partial↗ | Partial↗ | ✗ | ✗ |
| Audit trail & decision logging | ✅↗ | DIY | Partial↗ | ✗ | ✗ | Partial↗ | Partial↗ | Partial↗ |
| Per-tenant tool/model restrictions | ✅↗ | DIY · OPA policy bundles | ✗ | ✗ | ✗ | ✗ | Partial↗ | ✗ |
| Hard budget caps with atomic enforcement | ✅↗ | DIY · Redis Lua scripts | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Immutable per-turn audit trail | ✅↗ | DIY · WORM S3 + Postgres | Partial↗ | ✗ | ✗ | Partial↗ | Partial↗ | Partial↗ |
| ⚙️ Capabilities | ||||||||
| Native scheduled jobs (@cron) in agent bundles | ✅↗ | DIY · APScheduler + Celery | ✗ | ✗ | ✗ | ✗ | Partial | ✗ |
| Built-in knowledge base / RAG | ✅↗ | DIY · pgvector + retrievers | ✗ | Partial↗ | Partial↗ | Partial↗ | ✅↗ | ✅↗ |
| Multi-model routing (OpenAI + Anthropic + Gemini) | ✅↗ | DIY · LiteLLM | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ |
| Framework-agnostic agent runtime | ✅↗ | DIY · ABC + adapter layer | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| MCP tool integration | ✅↗ | DIY · MCP Python SDK | Partial↗ | Partial↗ | Partial↗ | ❓ | Partial↗ | Partial↗ |
| Citation / provenance tracking | ✅↗ | DIY · Custom metadata layer | ✗ | ✗ | ✗ | ✗ | Partial↗ | ✗ |
| Structured feedback & quality signals | ✅↗ | DIY | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Hot-loadable bundle plugins (no restart required) | ✅↗ | DIY · importlib.reload + watchdog | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Sandbox code execution (self-hosted subprocess) | ✅↗ | DIY · e2b.dev / Modal | ✗ | ✗ | Partial↗ | Partial↗ | ✗ | ✗ |
| 📡 Streaming & Integration | ||||||||
| Real-time streaming (SSE + WebSocket) | ✅↗ | DIY · FastAPI SSE + Redis | Partial↗ | Partial↗ | Partial↗ | Partial↗ | ✅↗ | Partial↗ |
| Multi-protocol clients (REST + SSE + WS) | ✅↗ | DIY · FastAPI + Socket.IO | ✗ | ✗ | ✗ | ✗ | Partial↗ | Partial↗ |
| Channeled multi-stream output (thinking / answer / followup) | ✅↗ | DIY · Custom channel muxer | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Prompt caching (3-checkpoint: prev-turn / pre-tail / tail) | ✅↗ | DIY · Anthropic/Gemini cache + LRU | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| 🏗️ Deployment & Cost | ||||||||
| Kubernetes-native Helm deployment | ✅↗ | DIY · custom Helm charts | ✗ | ✗ | ✗ | ✗ | Partial↗ | Partial↗ |
| Self-hosted / on-premises | ✅↗ | ✓ | Partial↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ |
| Open-source / auditable | ✅↗ | ✓ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ |
| Token / cost accounting per tenant | ✅↗ | DIY · Langfuse / Helicone | ✗ | ✗ | ✗ | ✗ | Partial↗ | ✗ |
| Per-tenant economics (Plans / Reservations / Lanes) | ✅↗ | DIY · Custom ledger + queue | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| User Feedback API (turn-level quality signals) | ✅↗ | DIY · Custom API | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Agent-aware tracing (turn / tool-call / model-call granularity) | ✅↗ | DIY · Langfuse + OTel | Partial↗ | ✗ | ✗ | Partial↗ | Partial↗ | ✗ |
| Per-tenant BYOK vault (LLM provider keys + usage attribution) | Roadmap | DIY · HashiCorp Vault | ✗ | ✗ | ✗ | ✗ | Partial↗ | ✗ |
| Bundle hot-reload (deploy / rollback without container rebuild) | ✅↗ | DIY · importlib + watchdog | ✗ | ✗ | ✗ | ✗ | Partial↗ | Partial↗ |
| 🗺️ KDCube.cloud Roadmap | ||||||||
| Generally Available cloud service | Roadmap | DIY · your own SaaS stack | ✅↗ | ✅↗ | ✗ | ✗ | ✅↗ | ✅↗ |
| Hosted control plane with region selection | Roadmap | DIY · Terraform modules | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Managed Postgres (pgvector) + Redis per tenant | ✅↗ | DIY · RDS/ElastiCache + scripts | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Managed edge + WAF with per-tenant rate limits | ✅↗ | DIY · Cloudflare / AWS WAF | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Agent bundle marketplace with signed provenance | Roadmap | DIY · Sigstore + registry | ✗ | ✗ | ✗ | ✗ | Partial↗ | Partial↗ |
| Cost attribution portal with per-tenant breakdown | ✅↗ | DIY · Metabase + Postgres | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Preview environments per PR | Roadmap | DIY · GitHub Actions + ephemeral env | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| GPU-backed inference lane | Roadmap | DIY · Modal / RunPod / Fly GPU | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Active-active multi-region with residency pinning | Roadmap | DIY · Global LB + Terraform | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Policy DSL for declarative rules | Roadmap | DIY · Rego + OPA | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Deterministic pre-execution enforcement | Roadmap | DIY · OPA + middleware | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Workflow invariants — required-step enforcement | Roadmap | DIY · Temporal / custom FSM | ✗ | ✗ | Partial↗ | ✗ | Partial↗ | Partial↗ |
| Cross-agent approval gates | Roadmap | DIY · Temporal + Slack bot | Partial↗ | Partial↗ | Partial↗ | ✗ | Partial↗ | ✗ |
| Feature / Capability | KDCube self-hosted | OpenAI Asst. cloud runtime | AWS Bedrock cloud runtime | Vertex AI GCP runtime | Azure AI Studio Microsoft | HuggingFace Endpoints | Cohere cloud API | Mistral AI cloud API |
|---|---|---|---|---|---|---|---|---|
| 🔒 Governance & Security | ||||||||
| Pre-execution policy gate | Partial↗ | ✗ | Partial | Partial↗ | ✗ | ✗ | ✗ | ✗ |
| Per-tenant budget caps & rate limits | ✅ | Partial | ✗ | ✗ | Partial↗ | ✗ | ✗ | ✗ |
| Tenant boundary isolation | ✅ | ✗ | Partial | Partial↗ | Partial↗ | ✗ | ✗ | ✗ |
| Subprocess / sandbox isolation | ✅ | Partial | Partial | Partial↗ | ✗ | ✗ | ✗ | ✗ |
| Audit trail & decision logging | ✅ | Partial | ✅ | ✅↗ | Partial↗ | ✗ | ✗ | ✗ |
| Per-tenant tool/model restrictions | ✅ | ✗ | Partial | Partial↗ | Partial↗ | ✗ | ✗ | ✗ |
| Hard budget caps with atomic enforcement | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Immutable per-turn audit trail | ✅ | ✗ | Partial | Partial↗ | Partial↗ | ✗ | ✗ | ✗ |
| ⚙️ Capabilities | ||||||||
| Native scheduled jobs (@cron) in agent bundles | ✅↗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Built-in knowledge base / RAG | ✅ | ✅ | ✅ | ✅↗ | ✅↗ | Partial | ✅↗ | Partial↗ |
| Multi-model routing (OpenAI + Anthropic + Gemini + OpenRouter) | ✅ | ✗ | Partial | Partial↗ | Partial↗ | ✅ | ✗↗ | ✗ |
| MCP tool integration | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Citation / provenance tracking | ✅ | Partial | Partial | Partial↗ | Partial↗ | ✗ | Partial↗ | ✗ |
| Structured feedback & quality signals | ✅ | Partial | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Hot-loadable bundle plugins (no restart required) | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Sandbox code execution (self-hosted subprocess) | ✅ | Partial | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| 📡 Streaming & Integration | ||||||||
| Real-time streaming (SSE + WebSocket) | ✅ | ✅ | Partial | Partial↗ | Partial↗ | Partial | Partial↗ | Partial↗ |
| Multi-protocol clients (REST + SSE + WS) | ✅ | Partial | ✗ | ✗ | Partial↗ | Partial | Partial↗ | Partial↗ |
| Channeled multi-stream output (thinking / answer / followup) | ✅ | Partial | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Prompt caching (3-checkpoint: prev-turn / pre-tail / tail) | ✅ | ✗ | ✗ | Partial | ✗ | ✗ | ✗ | ✗ |
| 🏗️ Deployment & Cost | ||||||||
| Kubernetes-native Helm deployment | ✅↗ | ✗ | ✅↗ | ✅↗ | ✅↗ | Partial↗ | ✗ | ✗ |
| Self-hosted / on-premises | ✅ | ✗ | ✗ | ✗ | ✗ | Partial | ✗ | Partial↗ |
| Open-source / auditable | ✅ | ✗ | ✗ | ✗ | ✗ | ✅ | ✗ | Partial↗ |
| Token / cost accounting per tenant | ✅ | Partial | Partial | Partial↗ | Partial↗ | ✗ | ✗ | ✗ |
| Per-tenant economics (Plans / Reservations / Lanes) | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| User Feedback API (turn-level quality signals) | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| 🗺️ KDCube.cloud Roadmap | ||||||||
| Generally Available cloud service | Roadmap | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ |
| Hosted control plane with region selection | Roadmap | Partial↗ | ✅↗ | ✅↗ | ✅↗ | Partial↗ | Partial↗ | Partial↗ |
| Managed Postgres (pgvector) + Redis per tenant | ✅↗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Managed edge + WAF with per-tenant rate limits | ✅↗ | Partial↗ | ✅↗ | ✅↗ | ✅↗ | Partial↗ | Partial↗ | Partial↗ |
| Agent bundle marketplace with signed provenance | Roadmap | Partial↗ | Partial↗ | Partial↗ | Partial↗ | ✅↗ | ✗ | ✗ |
| Cost attribution portal with per-tenant breakdown | ✅↗ | Partial↗ | ✅↗ | ✅↗ | ✅↗ | Partial↗ | Partial↗ | Partial↗ |
| Preview environments per PR | Roadmap | ✗ | ✗ | ✗ | ✗ | Partial↗ | ✗ | ✗ |
| GPU-backed inference lane | Roadmap | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ |
| Active-active multi-region with residency pinning | Roadmap | Partial↗ | ✅↗ | ✅↗ | ✅↗ | Partial↗ | Partial↗ | Partial↗ |
| Policy DSL for declarative rules | Roadmap | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Deterministic pre-execution enforcement | Roadmap | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Workflow invariants — required-step enforcement | Roadmap | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Cross-agent approval gates | Roadmap | ✗ | Partial↗ | Partial↗ | ✗ | ✗ | ✗ | ✗ |
| Feature / Capability | KDCube self-hosted | Build yourself glue open-source | Prizmatic workflow orch. | AgentOps observability | Eleven Labs voice AI | Vercel AI SDK frontend AI toolkit |
|---|---|---|---|---|---|---|
| 🔒 Governance & Security | ||||||
| Pre-execution policy gate | Partial↗ | DIY · OPA + middleware | ✗ | ✗ | ✗ | |
| Per-tenant budget caps & rate limits | ✅ | DIY · Redis + Prometheus | Partial | Partial↗ | ✗ | |
| Tenant boundary isolation | ✅ | DIY · Postgres RLS + JWT | ✗ | ✗ | ✗ | |
| Subprocess / sandbox isolation | ✅ | DIY · gVisor / Firecracker | ✗ | ✗ | ✗ | |
| Audit trail & decision logging | ✅ | DIY · OTel + ClickHouse | ✅ | Partial↗ | ✗ | |
| Per-tenant tool/model restrictions | ✅ | DIY · OPA policy bundles | ✗ | ✗ | ✗ | |
| Hard budget caps with atomic enforcement | ✅ | DIY · Redis Lua scripts | ✗ | ✗ | ✗ | |
| Immutable per-turn audit trail | ✅ | DIY · WORM S3 + Postgres | ✅ | Partial↗ | ✗ | |
| ⚙️ Capabilities | ||||||
| Native scheduled jobs (@cron) in agent bundles | ✅↗ | DIY · APScheduler + Celery | Partial | ✗ | ✗ | ✗ |
| Built-in knowledge base / RAG | ✅ | DIY · pgvector + retrievers | ✗ | ✗ | ✗ | |
| Multi-model routing (OpenAI + Anthropic + Gemini) | ✅ | DIY · LiteLLM | ✗ | ✗ | ✅↗ | |
| MCP tool integration | ✅ | DIY · MCP Python SDK | ✗ | ✗ | Partial↗ | |
| Citation / provenance tracking | ✅ | DIY · Custom metadata layer | Partial | ✗ | ✗ | |
| Structured feedback & quality signals | ✅ | DIY · Custom API + Postgres | Partial | ✗ | ✗ | |
| Hot-loadable bundle plugins (no restart required) | ✅ | DIY · importlib.reload + watchdog | ✗ | ✗ | ✗ | |
| Sandbox code execution (self-hosted subprocess) | ✅ | DIY · e2b.dev / Modal / Docker | ✗ | ✗ | ✗ | |
| 📡 Streaming & Integration | ||||||
| Real-time streaming (SSE + WebSocket) | ✅ | DIY · FastAPI SSE + Redis | ✗ | ✅↗ | ✅↗ | |
| Multi-protocol clients (REST + SSE + WS) | ✅ | DIY · FastAPI + Socket.IO | ✗ | Partial↗ | Partial↗ | |
| Channeled multi-stream output (thinking / answer / followup) | ✅ | DIY · Custom channel muxer | ✗ | Partial↗ | Partial↗ | |
| Prompt caching (3-checkpoint: prev-turn / pre-tail / tail) | ✅ | DIY · Anthropic/Gemini cache + LRU | ✗ | ✗ | ✗ | |
| 🏗️ Deployment & Cost | ||||||
| Kubernetes-native Helm deployment | ✅↗ | DIY · custom Helm charts | ✗ | ✗ | ✗ | ✗ |
| Self-hosted / on-premises | ✅ | DIY · Docker Compose + Terraform | ✗ | ✗ | Partial↗ | |
| Open-source / auditable | ✅ | DIY · Your git repo | Partial | ✗ | ✅↗ | |
| Token / cost accounting per tenant | ✅ | DIY · Langfuse / Helicone | Partial | Partial↗ | ✗ | |
| Per-tenant economics (Plans / Reservations / Lanes) | ✅ | DIY · Custom ledger + queue | ✗ | ✗ | ✗ | |
| User Feedback API (turn-level quality signals) | ✅ | DIY · Custom API | ✗ | ✗ | ✗ | |
| 🗺️ KDCube.cloud Roadmap | ||||||
| Generally Available cloud service | Roadmap | DIY · your own SaaS stack | ✅↗ | ✅↗ | ✅↗ | Partial↗ |
| Hosted control plane with region selection | Roadmap | DIY · Terraform modules | Partial | Partial↗ | ✗ | ✗ |
| Managed Postgres (pgvector) + Redis per tenant | ✅↗ | DIY · RDS/ElastiCache + scripts | ✗ | ✗ | ✗ | ✗ |
| Managed edge + WAF with per-tenant rate limits | ✅↗ | DIY · Cloudflare / AWS WAF | ✗ | ✗ | ✗ | ✗ |
| Agent bundle marketplace with signed provenance | Roadmap | DIY · Sigstore + registry | ✗ | ✗ | ✗ | ✗ |
| Cost attribution portal with per-tenant breakdown | ✅↗ | DIY · Metabase + Postgres | ✗ | Partial↗ | ✗ | ✗ |
| Preview environments per PR | Roadmap | DIY · GitHub Actions + ephemeral env | ✗ | ✗ | ✗ | Partial↗ |
| GPU-backed inference lane | Roadmap | DIY · Modal / RunPod / Fly GPU | ✗ | ✗ | ✗ | ✗ |
| Active-active multi-region with residency pinning | Roadmap | DIY · Global LB + Terraform | ✗ | ✗ | ✗ | Partial↗ |
| Policy DSL for declarative rules | Roadmap | DIY · Rego + OPA | ✗ | ✗ | ✗ | ✗ |
| Deterministic pre-execution enforcement | Roadmap | DIY · OPA + middleware | ✗ | ✗ | ✗ | ✗ |
| Workflow invariants — required-step enforcement | Roadmap | DIY · Temporal / custom FSM | Partial | ✗ | ✗ | ✗ |
| Cross-agent approval gates | Roadmap | DIY · Temporal + Slack bot | ✗ | ✗ | ✗ | ✗ |
| Feature / Capability | KDCube runtime + cloud | Railway git-push PaaS | Render Heroku-style PaaS | Fly.io edge microVMs | Vercel frontend + functions | Modal serverless Python / GPU | Replicate model inference |
|---|---|---|---|---|---|---|---|
| Kubernetes-native Helm deployment | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ |
| 🔒 Multi-Tenant Governance | |||||||
| Pre-execution policy gate (admission gate today; declarative DSL on roadmap) | Partial↗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Per-tenant budget enforcement (hosting-layer, atomic) | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Tenant isolation (gateway + storage + economics) | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Immutable per-turn audit trail | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Subprocess sandbox for code execution | ✅ | ✗ | ✗ | Partial↗ | ✗ | Partial↗ | ✗ |
| SOC 2 Type II inheritance (platform compliance rolls down to you) | Roadmap | ✗ | ✅↗ | ✅↗ | ✅↗ | Partial↗ | Partial↗ |
| ⚙️ Agent Runtime Primitives | |||||||
| Native scheduled jobs (@cron) in agent bundles | ✅↗ | Partial | Partial | ✗ | ✗ | Partial | ✗ |
| Agent-aware tracing (turn / tool-call / model-call) | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Timeline-first memory (turn state + source pools) | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Prompt cache shaping (3-checkpoint: prev-turn / pre-tail / tail) | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Built-in vector store / RAG primitives | ✅ | Partial↗ | Partial↗ | ✗ | Partial↗ | ✗ | ✗ |
| Per-tenant BYOK vault (LLM keys + attribution) | Roadmap | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| 📡 Streaming & Long-Lived Sessions | |||||||
| Channeled multi-stream output (thinking / answer / followup) | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Long-lived SSE + Socket.IO (no function timeout wall) | ✅ | ✅↗ | ✅↗ | ✅↗ | ✗ | Partial↗ | Partial↗ |
| Cold start for agent sessions | ✅ warm | Partial↗ | Partial↗ | ✅↗ | ✗ | ✅ fast↗ | Partial↗ |
| 🏗️ Deployment Model | |||||||
| Bundle hot-reload (agent deploy without container rebuild) | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Git-push / container deploy | ✅ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | Partial↗ |
| Managed Postgres (pgvector) + Redis | Roadmap | ✅↗ | ✅↗ | ✅↗ | Partial↗ | ✗ | ✗ |
| Multi-region data residency (EU / US pinning per tenant) | Roadmap | Partial↗ | Partial↗ | ✅↗ | ✅↗ | Partial↗ | ✗ |
| GPU availability | Roadmap | ✗ | ✗ | ✅↗ | ✗ | ✅↗ | ✅↗ |
| Self-hosted / on-premises option | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Open-source / auditable runtime | ✅ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| 🗺️ KDCube.cloud Roadmap | |||||||
| Generally Available cloud service | Roadmap | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ | ✅↗ |
| Hosted control plane with region selection | Roadmap | ✅↗ | ✅↗ | ✅↗ | ✅↗ | Partial↗ | Partial↗ |
| Managed Postgres (pgvector) + Redis per tenant | ✅↗ | ✅↗ | ✅↗ | Partial↗ | ✅↗ | ✗ | ✗ |
| Managed edge + WAF with per-tenant rate limits | ✅↗ | ✗ | Partial↗ | Partial↗ | ✅↗ | ✗ | ✗ |
| Agent bundle marketplace with signed provenance | Roadmap | ✗ | ✗ | ✗ | Partial↗ | ✗ | Partial↗ |
| Cost attribution portal with per-tenant breakdown | ✅↗ | Partial↗ | Partial↗ | Partial↗ | ✅↗ | ✅↗ | Partial↗ |
| Preview environments per PR | Roadmap | ✅↗ | ✅↗ | Partial↗ | ✅↗ | ✗ | ✗ |
| GPU-backed inference lane | Roadmap | Partial↗ | Partial↗ | ✅↗ | ✗ | ✅↗ | ✅↗ |
| Active-active multi-region with residency pinning | Roadmap | Partial↗ | Partial↗ | ✅↗ | ✅↗ | Partial↗ | Partial↗ |
| Policy DSL for declarative rules | Roadmap | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Deterministic pre-execution enforcement | Roadmap | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Workflow invariants — required-step enforcement | Roadmap | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Cross-agent approval gates | Roadmap | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
✅ = native built-in · Partial = partially available or specialized-only · ✗ = not natively available · ❓ = unclear · Roadmap = planned for KDCube.cloud · April 2026