Conductor vs Unstoppable

Conductor 55

Harness reading. Each task gets a workspace, branch, terminal and diff, with pull requests and merges from the app, and an API for integrations; not re-read in detail (55).

Unstoppable 5

These lines measure an interface an agent calls, and Unstoppable has none, so context cost, output controls and retries score nothing. For the person, a usage limit shows choices to wait for the reset or continue on credits (2 of 20). Guest use with no account, a first-run page that imports Claude and Codex projects, and few required settings. No SDK (3 of 15). Total 5.

Conductor 60

Harness reading. Docs for workspaces, review and merge, a Conductor API reference page linked from the docs (not read), and security and permissions pages (60).

Unstoppable 30

Graded on the interface an outside agent can use, which is none. No API, OpenAPI file, MCP server or documented command (0). unstoppable.ai/llms.txt lists the product, help and policy pages in Markdown (10). Twenty-two dated help articles explain for a person what each part does and when to use it, such as Code and Work modes and approval modes (5 of 20). No typed inputs an agent could call (0). Step-by-step examples for people and named error states such as usage limit reached and update failed, with no error responses for an agent (3 of 15). Numbered versions and a public dated changelog, which lists only four releases from 20 to 23 October 2026 (12 of 15). Total 30.

Conductor 0

No new sign-ups since 4 November, free users can't upgrade, and no price is shown. No protocol, no published price, no open free tier, no onboarding (0).

Unstoppable 30

No x402, MPP or L402 (0). The app is published as free, but AI credit prices appear only after sign-in, and no pricing page exists (unstoppable.ai/pricing redirects to the home page). Plan prices of $19, $29 and $49 appear only in an 11 August 2026 blog post (10). Guest use with no account, and 10 free AI credits a day with no card (20). A person has to download and install the app, so no autonomous onboarding (0). Total 30.

Conductor 25

Read as local software that is winding down. Installed from Conductor's own download, which stopped taking new users on 4 November 2026 (10). Closed source, so no public CI or issue tracker (0, 0). A dated changelog, newest 0.93.0 on 4 November (15). Version 0.93 (0). 10 + 0 + 0 + 15 + 0 = 25.

Unstoppable 45

Read as local software, because the product is the desktop app the owner runs, as for the other harnesses. Signed downloads for macOS Apple Silicon, macOS Intel and Windows on the download page, version 1.15.0, plus iOS and Android apps in the stores, with the supported platforms stated. No package registry (20). Closed source with no public CI or test suite (0). No public issue tracker. Bugs go through in-app feedback, email and Discord, none of which shows a record we could read (0). Version numbers and a dated changelog, but only 1.12.0 to 1.15.0 are listed and breaking changes are not marked as such (10). Version 1.15.0 (15). The hosted parts (accounts, AI credits, cloud agents, Remote Control) have no status page. status.unstoppabledomains.com covers the domains business only.

Conductor 45

Closed app. Telemetry and data handling weren't read beyond the transition notice (10 of 30). A security and permissions page (10 of 20). No prompt-injection guidance found (5). No audit log found (5). SOC 2 Type II report at trust.conductor.build (15 of 20). 10 + 10 + 5 + 5 + 15 = 45.

Unstoppable 36

Harness reading of the framework checklist, as for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Activity sharing is Off for every activity type by default and secrets are removed before upload, but the privacy policy also collects usage telemetry (feature use, session activity, token and spend metrics, diagnostics) with no opt-out stated, and updates download automatically by default (15 of 30). Ask and Accept edits modes with allow and deny rules by command, file write, MCP tool and network host, deny winning, and safety rules that block force-pushes and destructive deletes. Every kind of chat starts in Full access, which skips prompts and safety rules, and local agents have no documented sandbox. Cloud worktrees get their own sandbox (8 of 20). The in-app browser stops agents acting on private sign-in pages. No other guidance on untrusted content from web pages, MCP servers or connected tools (3 of 15). Cost and usage panels, a team feed with tool-use metadata, approval rules with their origin, and an Audit Trail experiment in Labs (8 of 15). Two-factor authentication for accounts. No security.txt on unstoppable.ai, the parent's security.txt expired on 22 January 2024, its bug bounty policy link returns 404, and no SOC 2 or ISO 27001 found (2 of 20). Total 36.