Paseo vs Unstoppable

Paseo 70

Harness reading. A self-hosted daemon that agents can use to create worktrees, launch other agents and talk to them, scriptable from the CLI (70).

Unstoppable 5

These lines measure an interface an agent calls, and Unstoppable has none, so context cost, output controls and retries score nothing. For the person, a usage limit shows choices to wait for the reset or continue on credits (2 of 20). Guest use with no account, a first-run page that imports Claude and Codex projects, and few required settings. No SDK (3 of 15). Total 5.

Paseo 65

Harness reading. Public docs, a CLI and plugin examples in the repository (65).

Unstoppable 30

Graded on the interface an outside agent can use, which is none. No API, OpenAPI file, MCP server or documented command (0). unstoppable.ai/llms.txt lists the product, help and policy pages in Markdown (10). Twenty-two dated help articles explain for a person what each part does and when to use it, such as Code and Work modes and approval modes (5 of 20). No typed inputs an agent could call (0). Step-by-step examples for people and named error states such as usage limit reached and update failed, with no error responses for an agent (3 of 15). Numbered versions and a public dated changelog, which lists only four releases from 20 to 23 October 2026 (12 of 15). Total 30.

Paseo 60

Free self-hosted software with nothing to buy, so 0 for a protocol and 20 each for public pricing, a free tier and onboarding with no sign-up, 60.

Unstoppable 30

No x402, MPP or L402 (0). The app is published as free, but AI credit prices appear only after sign-in, and no pricing page exists (unstoppable.ai/pricing redirects to the home page). Plan prices of $19, $29 and $49 appear only in an 11 August 2026 blog post (10). Guest use with no account, and 10 free AI credits a day with no card (20). A person has to download and install the app, so no autonomous onboarding (0). Total 30.

Paseo 58

Harness reading. The README says no telemetry, tracking or forced log-ins (30 of 30). Worktree per agent, on your own machine (10 of 20). No prompt-injection guidance (5). No audit log (5). SECURITY.md (8). 30 + 10 + 5 + 5 + 8 = 58.

Unstoppable 36

Harness reading of the framework checklist, as for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Activity sharing is Off for every activity type by default and secrets are removed before upload, but the privacy policy also collects usage telemetry (feature use, session activity, token and spend metrics, diagnostics) with no opt-out stated, and updates download automatically by default (15 of 30). Ask and Accept edits modes with allow and deny rules by command, file write, MCP tool and network host, deny winning, and safety rules that block force-pushes and destructive deletes. Every kind of chat starts in Full access, which skips prompts and safety rules, and local agents have no documented sandbox. Cloud worktrees get their own sandbox (8 of 20). The in-app browser stops agents acting on private sign-in pages. No other guidance on untrusted content from web pages, MCP servers or connected tools (3 of 15). Cost and usage panels, a team feed with tool-use metadata, approval rules with their origin, and an Audit Trail experiment in Labs (8 of 15). Two-factor authentication for accounts. No security.txt on unstoppable.ai, the parent's security.txt expired on 22 January 2024, its bug bounty policy link returns 404, and no SOC 2 or ISO 27001 found (2 of 20). Total 36.

Paseo 75

v0.15.3 and commits on 7 November 2026 (30). More than three releases in 90 days (20). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). Current builds (15). CI on push (10). 30 + 20 + 0 + 15 + 10 = 75.

Unstoppable 58

Read for a closed product. Version 1.15.0 on 23 October 2026, and iOS 1.1.9 on 27 October (30). Four desktop releases from 20 to 23 October and nine iOS updates since 11 August 2026 (20). A public changelog, a support email, in-app feedback and a Discord server, none tested for replies. Help articles were updated between 19 and 24 October (6 of 15). No SDK and no MCP registry entry (0). Windows updates check signatures per the 1.13.0 notes, with no build pipeline to inspect (2 of 10). Total 58.

Paseo 68

Apache 2.0 for everything but third-party components (30). No telemetry and agents run on your machine (22 of 30). CHANGELOG.md, no deprecation policy (10). States no telemetry (20). 30 + 22 + 10 + 20 = 82.

Unstoppable 56

Closed source under terms of 6 October 2026 that name Unstoppable Domains, Inc. and Delaware law. The terms forbid reverse engineering and building a competing product (15). The privacy policy of 8 October 2026 is written for this product. It states activity sharing levels, Off by default, secret removal and encryption, and configurable transcript retention. It gives no retention periods, names no subprocessors, and says usage telemetry may sync depending on settings, which the site's 'we don't collect your code or conversations' leaves open (16 of 30). No deprecation policy. The terms allow removing parts of the service without notice. The changelog dates one retirement (GPT 5.5 to GPT 6.1 Sol) (3 of 20). No subprocessors or data locations disclosed, and the telemetry the app sends has no documented opt-out (6 of 20). Total 40.