THE BUYER'S FIELD GUIDE

AI Agent Building & Orchestration Platforms

Frameworks and platforms for developing, executing and operating agents and agentic workflows. Listed here only with an explicit statement of which governance features (approvals, audit logs, permission scoping, versioning, isolation) are actually documented.

17 related offerings · 11 primary listings · 6 overlapping listings

Product research snapshot September 6, 2026 · Editorial guide September 7, 2026 · Published by DutyGraph

When to explore this layer

Explore this layer after a task has a usable specification and someone owns the outcome. Builders turn instructions and tools into executable workflows. Your evaluation should exercise how execution behaves when a tool fails, a person rejects a step, or a run needs to resume.

ILLUSTRATIVE EVALUATION · NOT A CUSTOMER RESULT

Put a real task in the demonstration.

For a fictional service desk, an agent may classify a request and draft a response. In a demonstration, interrupt the workflow after classification and before sending. Resume it, change the draft, then reject the send. Observe whether recovery repeats an external action and whether the approval still applies to the edited content.

Questions to bring to the demonstration

  1. Which tool calls require approval, and is approval bound to the exact proposed action?
  2. What happens after a timeout when the remote system may already have accepted the request?
  3. Can workflow, model and prompt versions be reconstructed for an earlier run?
  4. How are credentials isolated between customers, employees and separate agent runs?

Evidence to request

  • A recorded failure-and-resume demonstration
  • Versioned workflow configuration
  • Tool-call and approval logs from the same execution

Record what was demonstrated, what was only described, and what remains unknown. Preserve the product version, environment and date beside each observation.

Use the editable Markdown worksheet →

Where this layer stops

An orchestration feature is not evidence that every connected system enforces the intended policy. Verify the limits of each tool and connector. A builder also cannot establish that the business needed the proposed workflow in the first place.

Connect it to the work

Use a reviewed work unit as the implementation brief: a defined input, expected result, permitted tools, human checkpoint and stop condition. DutyGraph's discovery examples help frame that brief; a directory listing is not a working connector.

Read our perspective on the demand side of agents →

17 offerings to investigate

Alphabetical, not ranked. Membership includes primary and secondary research categories. These products have different scopes; inspect the evidence profile before comparing capabilities.

Primary category

Amazon Bedrock AgentCore

AWS's set of composable services for running agents built with any framework, covering serverless execution with isolated sessions, persistent memory, a gateway that turns APIs into MCP tools, identity and credential management, and built-in observability. Documented governance is strongest on identity and authorization rather than approvals.

commercial · Research snapshot 2026-09-06

Ask for a demonstration
Show me an AgentCore Gateway exposing two Lambda tools where the agent's inbound and outbound authorization is verified per request through AgentCore Identity.

Read sources and limitations →

Also covers this layer

Arcade

Actions runtime that brokers agent tool calls to SaaS systems, handling OAuth and user token storage and applying per-action authorization so an agent acts within both the user's and its own scope. Pre- and post-tool-call hooks allow blocking or redaction, though the hosted tool catalogue is vendor-maintained.

hybrid · Research snapshot 2026-09-06

Ask for a demonstration
Show me an agent calling a Gmail tool through Arcade where the user consents via OAuth, a pre-tool-call hook blocks a send action, and the audit log records the decision.

Read sources and limitations →

Also covers this layer

Boomi Agent Control Tower

Registry and monitoring console within Boomi Agentstudio where organisations register, tag, monitor and manage AI agents across providers - agents built in Boomi and third-party environments such as Amazon Bedrock - via configured provider connections. Agents appear because a provider account is connected, so unconnected environments remain invisible.

commercial · Research snapshot 2026-09-06

Ask for a demonstration
Show me registering an Amazon Bedrock provider account and then disabling one of its agents directly from Agent Control Tower, including the trust level and tags applied.

Read sources and limitations →

Primary category

Camunda Agentic Orchestration

German process-orchestration vendor's capability for embedding AI agents into BPMN processes, exposing BPMN activities inside ad-hoc sub-processes as LLM-selectable tools while human tasks and deterministic rules stay in the same model. Fine-grained authorization exists at cluster level; audit logging for agent decisions is not documented.

hybrid · Research snapshot 2026-09-06

Ask for a demonstration
Demonstrate a BPMN process where an AI agent selects tools inside an ad-hoc sub-process but a human task must complete before the payment activity runs.

Read sources and limitations →

Primary category

CrewAI

Open-source Python framework for orchestrating role-based agent crews, paired with CrewAI AMP, a hosted platform that deploys crews, exposes them via REST, streams events and shows execution traces. Human review is a framework-level pattern; platform documentation reviewed showed no approval console or audit-log feature.

hybrid · Research snapshot 2026-09-06

Ask for a demonstration
Demonstrate a crew deployed on CrewAI AMP where a task requires human review before the next agent runs, and show the execution trace for that run.

Read sources and limitations →

Also covers this layer

Daytona

Sandbox infrastructure for executing AI-generated code, offering per-sandbox isolation with a dedicated kernel, filesystem and network stack plus API keys, limits, network limits and audit logs. Buyers should note the public repository states core development moved to a private codebase and the repo is unmaintained.

hybrid · Research snapshot 2026-09-06

Ask for a demonstration
Show me a Daytona sandbox with network limits and audit logging enforced while an agent executes generated code, and clarify which components remain open source today.

Read sources and limitations →

Primary category

Dify

Open-source platform for building agents, agentic workflows, chatbots and RAG pipelines that can draw on private data and ship as web apps or APIs, with LLMOps monitoring and third-party tracing integrations. Documentation reviewed showed no approval workflow, role-based access control or audit-log capability.

hybrid · Research snapshot 2026-09-06

Ask for a demonstration
Show me a Dify agentic workflow published as an API, and explain exactly what record exists of each model and tool call it made.

Read sources and limitations →

Also covers this layer

E2B

Apache-2.0 sandbox infrastructure that gives agents isolated cloud environments to execute model-generated code, process files and run tools, controlled from Python or JavaScript SDKs. Sandboxes bound where agent code runs, but E2B is an execution boundary rather than a policy decision point for tool authorization.

hybrid · Research snapshot 2026-09-06

Ask for a demonstration
Show me an agent running untrusted generated code in an E2B sandbox with filesystem and network limits, then show the same workload on a self-hosted E2B cluster.

Read sources and limitations →

Primary category

Gemini Enterprise Agent Platform

Google Cloud's renamed Vertex AI agent stack, combining a managed agent runtime with sessions, a memory bank, example store and evaluation service, and support for ADK, LangGraph, LlamaIndex and A2A agents. Governance evidence centres on registration through the Gemini Enterprise app and built-in tracing rather than approval workflows.

commercial · Research snapshot 2026-09-06

Ask for a demonstration
Demonstrate deploying an ADK agent to the managed runtime, registering it in Gemini Enterprise, and inspecting its traces in Cloud Trace.

Read sources and limitations →

Also covers this layer

Google Cloud Agent Registry

Centralized catalog in Gemini Enterprise Agent Platform for registering and governing AI agents, MCP servers, skills and endpoints. Agents can be registered automatically from supported runtimes or manually for custom deployments, and consumers can search the catalog and authenticate to registered tools. It governs registered assets; unregistered agents are out of scope.

commercial · Research snapshot 2026-09-06

Ask for a demonstration
Show me an ADK agent auto-registered from its runtime, then demonstrate searching the registry and binding it to an authenticated endpoint.

Read sources and limitations →

Primary category

LangSmith Deployment (LangGraph)

LangChain's runtime for running agents in production alongside the open-source LangGraph library. It provides durable execution, threads and runs, and middleware that pauses tool calls for human approval, edit or rejection. Governance beyond approvals and tracing is developer-configured rather than an administrative control surface.

hybrid · Research snapshot 2026-09-06

Ask for a demonstration
Show me an agent deployed on LangSmith Deployment pausing on a database-write tool call, and a reviewer editing the arguments before it resumes.

Read sources and limitations →

Primary category

Microsoft Foundry Agent Service

Managed Microsoft platform for building, deploying and scaling agents, offering prompt agents configured in a portal, hosted container agents from frameworks such as Agent Framework and LangGraph, and direct Responses API use. Each hosted agent receives a dedicated Microsoft Entra identity plus managed endpoint, scaling and observability.

commercial · Research snapshot 2026-09-06

Ask for a demonstration
Show me a hosted agent deployed from a container that receives its own Entra identity, and the end-to-end trace of one of its runs.

Read sources and limitations →

Primary category

n8n

German workflow automation tool, source-available and self-hostable, whose AI Agent node connects a chat model to tools so the agent chooses which to call. Governance is workspace-level rather than agent-level: role-based access control across instance and project scopes, with no documented per-action approval or agent audit trail.

hybrid · Research snapshot 2026-09-06

Ask for a demonstration
Show me an AI Agent workflow in a project where a Member role can execute but not edit it, and explain what record exists of each tool the agent called.

Read sources and limitations →

Primary category

Orkes Conductor

Commercial platform built on the Conductor durable orchestration engine. Conductor Agents are authored in code or imported from frameworks, compiled into versioned workflow definitions, and composed with branching, schedules, human approval and cancellation, with each LLM call and tool invocation visible in the UI and API.

hybrid · Research snapshot 2026-09-06

Ask for a demonstration
Show me a Conductor Agent deployed at a pinned version, invoked from a production workflow, with each LLM call and tool invocation visible in the execution view.

Read sources and limitations →

Primary category

Temporal

Durable execution platform used to run stateful agent loops that call models and tools, wait on human decisions for days, and resume exactly where they stopped after failures. It supplies reliability primitives and full execution history rather than AI-specific policy, review consoles or data controls.

hybrid · Research snapshot 2026-09-06

Ask for a demonstration
Demonstrate an agent workflow that pauses for multi-day human approval via a Signal, survives a worker crash, and replays its full execution history.

Read sources and limitations →

Primary category

UiPath Maestro

UiPath's cloud orchestration layer that coordinates AI agents, RPA robots and people in BPMN, Flow or case-management models, with DMN decision tables. Governance is process-centric: role-based access, versioning and auditing of process and decision changes, rather than per-tool-call approval policy for agents.

commercial · Research snapshot 2026-09-06

Ask for a demonstration
Demonstrate a Maestro BPMN process where an agent step hands an exception to a person, and show the versioned, audited history of the decision table change.

Read sources and limitations →

Also covers this layer

Verint Agent Factory

Orchestration environment in Verint's CX platform for building and running a mixed workforce of human and AI agents: prebuilt and custom AI agents are connected to customer-experience workflows with explicit routing to humans when judgment is needed, plus centralized prompt and model governance. Scope is contact-centre work, not general enterprise task delegation.

commercial · Research snapshot 2026-09-06

Ask for a demonstration
Demonstrate a CX workflow where an AI agent hands off to a human agent, and show how the handoff condition and the governing prompt policy are configured.

Read sources and limitations →

About this guide

The evaluation questions and fictional scenario are DutyGraph's editorial guidance. Product listings use the supplied source-linked research snapshot. We have not independently tested these offerings. Listing is not an endorsement, certification or working integration.

Read the directory methodology · Suggest a correction