Amazon Nova 2 Sonic vs Rime Prism

Amazon Nova 2 Sonic 95

Hosted reading. AWS Health Dashboard with per-service, per-Region history (20). The dashboard history file (newest event 30 October 2026) lists no Bedrock event in the 90 days from 8 August, and the 3 September us-west-2 event names STS, Connect and IAM Identity Center, not Bedrock. The public dashboard records broad events only, so 25 of 30, as amazon-nova-embeddings was read. Quotas published, 20 concurrent requests per Region, not adjustable (15). The stream API lists ThrottlingException (429), ServiceUnavailableException (503), ModelTimeoutException (408) and ModelStreamErrorException (424), Bedrock's troubleshooting guide advises backoff with jitter, and the 8-minute connection limit comes with a session-continuation sample (15). Bedrock's SLA of 99.9 per cent a month per Region for model APIs, as read for amazon-nova-embeddings on 1 November (10). Generally available since 2 December 2025 (10). 20 + 25 + 15 + 15 + 10 + 10 = 95.

Rime Prism 55

status.rime.ai redirects to an incident.io page at rimestat.us with Text-to-speech API and Platform API components, and still no Prism component on 4 November 2026. A vendor status page with no component for the product takes 15 in this run (15, was 10). Its feed lists two incidents, Text-to-speech partial degradations on 3 and 5 September, and nothing since Prism launched on 28 October, a short record of seven days (15, was 5). The errors page publishes per-session numbers (55 seconds a turn, 60 seconds of queued speech, 120 seconds or 512 tokens a reply, 5 minutes idle, 1 MiB a message), but no concurrency limit per account or key, and a full server answers 503. Partly met, so the earlier 8 is kept (8). Overload is documented as capacity_exceeded, unavailable, a 503 refusal ("Retry after a backoff") and close code 1001, the page says which reply failures can succeed when sent again, and the tools guide says never to rerun a call with an unknown outcome. Safe-retry guidance without idempotency keys gives 12 in this run (12, was 13, not a checklist value). SLAs are an Enterprise item and none is published (0). The changelog calls Prism available, but all four SDKs are 0.1.0 alpha releases, the Pipecat path uses a pinned preview, and the pricing page says half duplex at launch. Partly met, so the earlier 5 is kept (5). 15+15+8+12+0+5 = 55.

Amazon Nova 2 Sonic 10

No x402, MPP or L402 (0). The Nova and Bedrock pricing pages carry a speech-to-speech table drawn by script, so the per-token prices weren't read and this line scores absent, which is our reader's limit and not the vendor's (0). New accounts get up to $200 in Free Tier credits, and the Free Tier FAQ says most new customers need no payment method, read as half on the other AWS listings (10). A person signs up for an AWS account in a browser (0). Total 10.

Rime Prism 40

No x402, MPP or L402 (0). $0.080 a minute on Flex and $0.064 on Scale, published without a login, unchanged on 4 November (20). $50 of usage a month on the Free plan, Prism included, "No card required" (20). A person signs up in a browser to get a key (0). 0+20+20+0 = 40.

Amazon Nova 2 Sonic 50

Read as a model. The newest dated change is the May 2026 refresh, completed on 28 May, 162 days before this check (10). No Sonic release note or document history entry in the 90 days from 8 August. The pre-alpha Python SDK shipped 0.9.0, 0.10.0, 0.11.0 and 0.12.0 in the window, counted half (10 of 20). Release notes, document history, re:Post and AWS Support (10 of 15). The JavaScript Bedrock runtime client is current at 3.1163.0, while the Python route is pre-alpha (10 of 15). The SDKs ship on AWS's release train; CI not read (10). Total 50.

Rime Prism 75

Read as a closed API on the tool lines. Prism launched on 28 October 2026, and SDK releases that change the Python realtime client (Prism's) followed to 1 November (30). Since 6 August the changelog has one Prism entry (28 October), and the SDK repository tagged six releases that change Prism's realtime code, on 26 October (two), 27, 30 October (two) and 1 November, each across the Python, Node.js, Go and Rust packages. Counting SDK tags at half, that is four, so three or more (20, was 10). A public changelog with RSS, docs and community support on Free and email on paid plans, and a support address. Responsiveness can't yet be judged a week after launch (8 of 15). Current official SDKs in four languages, the newest on 3 November, all 0.1.0 alpha with a warning that a release can change the API. Partly met, so the earlier 12 is kept (12 of 15). The SDK repository is MIT, and its checks workflow on main runs pytest, npm test, ruff and mypy with locked dependencies, results unread (github.com answers 403). Partly met, so the earlier 5 is kept (5 of 10). Rime retired Arcana from its cloud API 17 days after announcing it (29 July to 15 August 2026). 30+20+8+12+5 = 75.

Amazon Nova 2 Sonic 77

SigV4 with IAM roles and temporary credentials scoped per model ARN, as the Sonic quickstart signs (30). Tools run in the client, so side effects are the developer's to approve, and IAM can restrict which models a role invokes, with no approval step in the API (12 of 20). The model listens to callers and acts on tool results, and no prompt-injection guidance was found in the Sonic guide (5 of 15). CloudTrail logs Bedrock API calls, read as amazon-nova-embeddings was (12 of 15). VDP on HackerOne, Bedrock in SOC scope and a valid security.txt on aws.amazon.com, with no paid bounty, as on the other AWS listings (18 of 20). Total 77.

Rime Prism 56

Graded as a hosted API. One Rime API key per request, sent as a Bearer header on the upgrade. Prism reads no query parameters and the docs say not to put the key in the URL. No scopes, no read-only keys and no ephemeral tokens for client devices were found, the same key also covers text-to-speech and speech-to-text, and rotation isn't described beyond creating tokens in the dashboard (20 of 30). tool_choice is auto only, so a backend can't force a call, but it can remove a tool mid-call with session.update. The prompting guide says Prism can call a tool before the caller confirms and to keep confirmation rules in tool code. The launch pages say every reply is text before speech so guardrails can check it, but the docs describe no step that holds a reply for checks (10 of 20). Prism takes untrusted caller audio and tool results. The docs say to confirm outcomes from the agent's own records, not the reply text, with no explicit prompt-injection guidance (6 of 15). Request, session and correlation IDs for support and token usage on each response.done. No per-call log or audit trail in the dashboard was found (6 of 15). SOC 2 Type II since May 2025, HIPAA compliance since February 2024 with an audit in March 2026, and a vulnerability disclosure policy linked from the security page. The security page still names a formal vulnerability disclosure programme on 4 November. security.txt answered 404 and no bug bounty was found (14 of 20). 20+10+6+6+14 = 56.

Amazon Nova 2 Sonic 64

Scored as an API. Responses carry transcripts of both sides and usage events, chat history is capped at 200 KB and can be injected once per session (15 of 25). Output controls are voice, turn-taking sensitivity and text or audio input (12 of 20). Typed exceptions with HTTP codes, while errors inside the event stream are less documented (15 of 20). Asynchronous tool calls let the model keep talking, and AWS samples show how to resume after the 8-minute limit, with nothing on repeating tool side effects after a reconnect (12 of 20). A session needs a sequence of start events before audio. The JavaScript SDK is current, but the Python SDK the quickstart uses is pre-alpha and needs Python 3.12 (10 of 15). Total 64.

Rime Prism 73

Scored as a model API. A 65,536-token context, with truncation set to leave out the oldest turns by default, a configurable retention_ratio, a prism_truncation report on each reply, prism.conversation.get to read the stored history and conversation.item.delete to trim it (20 of 25). Replies are capped at 120 seconds or 512 tokens and can't be set lower. max_response_output_tokens, temperature and text-only replies are refused. Up to 16 labels per reply for routing. No lists to page. Partly met, so the earlier 8 is kept (8 of 20). Errors carry code, scope, owner, param and a correlation_id, and the docs tell clients to branch on code and scope, never on message (20). Client events are matched by event_id, a repeated identical tool result is acknowledged, and Prism records late results. Prism doesn't deduplicate requests, a dropped connection doesn't resume, and the client replays history into a new session. Partly met, so the earlier 12 is kept (12 of 20). Short instructions are enough to start, the voice defaults to astra and interruption is on. Official SDKs in Python, Node.js, Go and Rust, all alpha, plus LiveKit and Pipecat quickstarts. Partly met while the SDKs are alpha, so the earlier 13 is kept (13 of 15). 20+8+20+12+13 = 73.

Amazon Nova 2 Sonic 79

Closed model under the AWS Service Terms, with Apache-2.0 SDKs and samples (15). Bedrock stores no inputs or outputs by default and model providers can't see them, Sonic isn't on the abuse-detection page's list of models whose traffic is stored, and section 50.3 doesn't list Bedrock among services whose content improves AWS services, as read for amazon-nova-embeddings on 1 November (22 of 30). Bedrock's lifecycle policy for models launched before 7 September 2026 promises 12 months and a Legacy period of at least 6 months, but the March and May refreshes changed the model in place under the same ID (15 of 20). Regions are listed, with sub-processors not read (12 of 20). Total 64.

Rime Prism 72

Closed service with clear terms from Rime Labs, Inc., and the SDK is MIT (15 of 30). The terms changed on 29 October 2026. Section 6.3(b) now grants Rime a perpetual licence to train and improve its models on Free Plan customer data (excluding voice recordings, audio with a natural person's voice and third parties' personal data), while the privacy policy (effective 22 August 2025) says "We do not use customer data to train AI models unless explicitly requested and agreed upon" and the security page says "We never use customer text or audio to train our models". The privacy and security pages still describe text in and audio out, and none covers Prism's caller audio, while the new terms define Call Content and say not to send Caller audio on a Free Plan. The DPA at rime.ai/dpa couldn't be reached from our network on 28 October. The contradiction between the terms and the security page is charged once, as the misleading-claim deduction, so the line holds (15 of 30). The new terms promise at least 30 days' notice before retiring a Model Version used on a paid plan. Arcana's cloud retirement came with 17 days' notice before that policy (15 of 20, was 10). A sub-processor list with locations, all in the United States, and the Prism endpoint stated as US East (us-east-2), per the 28 October check (18 of 20). 15+15+15+18 = 63.