Big Arrow vs withHuman

Big Arrow 75

Read with the local-software lines, since the owner runs the binary. First commit 8 October 2026. Installs from the author's Homebrew tap, which builds v0.5.1 from the tagged source and since 0.5.1 needs only the Command Line Tools, not Xcode, or as an ad hoc signed universal binary on GitHub Releases, with macOS 14 stated (20). CI runs SwiftLint in strict mode, a release build and swift test with the window-server tests switched on. The last 25 runs on main had passed by 15 October 2026, per the 15 October check, not re-read on 1 November because GitHub's pages answered 403 (25). Per the 15 October check, two open issues, a request for Windows and Linux and a note of thanks, and no open bug, with the one outside bug report fixed with a regression test in v0.4.3 the day it arrived. The issue list wasn't re-read on 1 November. The 0.5.1 changelog closes out #70 (the ports) and #71 (the Homebrew formula) (20). Keep a Changelog and semantic version tags, but flags removed or replaced in 0.2.0, 0.3.0 and 0.5.1 (--raise, --shadow, --duration on cards) are listed under Changed, not marked as breaking (10). Version 0.5.1, not 1.0 and not declared stable (0).

withHuman 16

Graded as a hosted service. No status page is linked from the site, the docs or the support page, and status.withhuman.ai did not connect (0), so there is no incident history to read (5). No request rate limits are published. 429 is documented only for the plan's limit on pending requests or active agents, with no numbers in the docs (0). Idempotency-Key is required on four write commands with documented replay and conflict behaviour, and the long-poll guide says to call again after a dropped connection, but no Retry-After or backoff guidance was found for 429 (11 of 15). The terms give no uptime guarantee outside an enterprise agreement (0). The terms say the service is in early access and the API document is version 0.1.0 (0).

Big Arrow 60

No payment protocol (0). Read with the self-hosted rule. Free under MIT with nothing to buy (20). No card or account (20). Installs with one Homebrew command and needs no signup (20).

withHuman 30

No machine payment protocol (0). Public plan prices, Free at $0 for up to 5 members and Scale at $20 per user a month, with no per-request price and unpublished monthly allowances for gateway calls and phone messages (10). The Free plan and trial need no subscription per the billing docs. We did not sign up to confirm that no card is asked for (20). A person signs up in a browser and approves each agent's enrolment. Provisioner tokens then issue instance credentials by API (0).

Big Arrow 70

v0.5.1 on 26 October 2026 (30). Fifteen tagged releases between 8 and 26 October 2026 (20). The Hacker News thread was triaged into ten tickets, closed the same day, and two outside pull requests were declined with reasons in the triage note. Two outside issues opened on 12 and 13 October had no maintainer reply by 15 October, per the 15 October check. On 26 October 0.5.1 linked the ports made by people from #70 and dropped the Xcode requirement after an outside pull request to the tap (#71), but the issue pages couldn't be re-read on 1 November (12 of 25). Not an MCP server and no SDK, and the skill is not in a registry (0). One dependency, current Swift 6 tooling, CI on every push to main. No Dependabot configuration found (8).

withHuman 49

The CLI's latest build files were last modified on 8 October 2026, and the sitemap dates docs changes to 6 October (30). No versioned release notes or changelog were found. The sitemap shows docs edits on eight dates between 22 September and 6 October, which we count in part (5 of 20). Closed service with email support said to reply within one working day and a Discord for the protocol. The linked GitHub repositories returned 404 (6 of 15). No official SDK found. The CLI is the only client (5 of 15). CLI builds for four platforms ship with SHA256SUMS, and no public CI was found (3 of 10).

Big Arrow 63

MIT in LICENSE and in the Homebrew formula, with the bundled Feather icons' MIT licence in THIRD_PARTY_NOTICES.md (30). No privacy policy. The README says there is no daemon, account or telemetry and that card secrets never reach disk, and the source we read has no network code, which agrees. Sign text, which can hold a value to paste, sits in a per-user temporary file while the arrow is shown, which the README does not mention (15). No deprecation policy. Removed and renamed flags are named in the dated changelog (4). No telemetry to disclose, and the README says so. Nothing is sent, so there is nothing to opt out of (16).

withHuman 56

Closed hosted service with short, clear terms. The site calls the core open source, but the repository it links to returned 404 on 8 October 2026, so no licence could be read (15 of 30). The privacy policy and terms agree on no model training, server logs kept 30 days and records kept for the life of the organisation. The purge after deletion is only 'a short grace period', no DPA was found, and the AI Judge docs name OpenAI model keys while the processor list names no model provider (18 of 30). The terms promise notice of removals and 14 days' email notice of material changes to the terms, with no dated deprecation policy (5 of 20). Eight processors are named with purposes and hosting is stated as Azure UK South, less the missing model provider (14 of 20).

Big Arrow 67

No credential model to grade, since the tool holds no secret of its own and makes no network call, so read with the framework lines as for other local agent tools. 30 for what leaves the machine by default, 20 for least privilege and approvals, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No network code, telemetry or account found in the source, and the only dependency is swift-argument-parser. A card's link row opens in the browser only when the person clicks it (30). It never clicks, types or captures, drawing needs no permission, and Accessibility is needed only for label targeting. Boxes and rings are outlines, the sign keeps clear of its target, and a click on the sign removes it. Since 0.5.0 a card can put a decision to the person with buttons and return it to the agent, and secrets go on a card from pass:, keychain:, op:, env: or file:, never the command line, show masked, copy as concealed and leave the clipboard after 30 s, per the README and source. Raising the target app is on by default with --no-raise to opt out (18). The skill tells the agent to put on the sign what an approval, payment or deletion does. Element labels read from other apps return as text the agent reads, with no guidance on treating them as untrusted (9). Live arrows are recorded in $TMPDIR/bigarrow/<pid>.json, sign text included, while shown, and a card's reply is written there with mode 0600 and no secret values until wait reads it. --json reports how each ended. No persistent log (6). No SECURITY.md, security.txt, bug bounty or advisories. The main branch is protected against force pushes and deletion, and the release binary is signed ad hoc and not notarised (4).

withHuman 73

Purpose-limited credentials. An agent credential can only create and read its own requests, a provisioner token only manages instances, personal keys can be narrowed and expire after 90 days by default, and the MCP server uses OAuth with PKCE, dynamic client registration and 35 scopes. Choosing specific actions is limited to the hosted paid plans (28 of 30). Agents and organisation keys can never decide a request, sensitive grants need a recent sign-in, and the docs say the required-MFA settings don't yet work with the built-in sign-in methods (16 of 20). Reviewers see agent reasoning as a claim separate from the arguments, server is documented as an unverified label, and notifications never carry arguments (11 of 15). Append-only audit log with search by API, and every key's changes recorded under the key, in the hosted edition (13 of 15). The footer says SOC 2 Type II with no report, auditor or trust page. No security.txt (404 on both hosts), disclosure policy or bounty found (5 of 20).