{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": false,
  "whole_disk": false,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": false,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": true,
  "public_ipv4": true,
  "inbound_https": true,
  "custom_domain": true,
  "raw_tcp_inbound": true,
  "egress_allowlist": false,
  "open_internet": null,
  "static_egress_ip": true,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": false,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": false,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "caution",
  "checked": "2026-09-30",
  "company": "Caution",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.ycombinator.com/companies/caution",
   "quote": "Caution Founded: 2025 Batch: Summer 2026 Team Size: 5 Status: Active Location: George Town, Cayman Islands"
  },
  "stage": {
   "value": "pre-seed",
   "source": "https://caution.co/about.html",
   "quote": "Caution is backed by Y Combinator. Learn more.",
   "confidence": "medium",
   "note": "Confirmed only as YC-backed (S26 batch, founded 2025, team of 5). No priced seed/Series A round or investor names beyond YC disclosed in press, company site, or YC profile; treated as pre-seed (YC's standard investment) pending any later announced round."
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "Summer 2026",
    "source": "https://www.ycombinator.com/companies/caution",
    "quote": "Y Combinator Logo Summer 2026 Active Cybersecurity Cloud Computing Infrastructure",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "unknown",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "https://www.ycombinator.com/companies/caution",
   "quote": "Caution Founded: 2025 Batch: Summer 2026 Team Size: 5 Status: Active"
  },
  "investors": [
   "Y Combinator"
  ],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": 5,
   "source": "https://www.ycombinator.com/companies/caution"
  },
  "note": "Very early-stage (founded 2025, YC Summer 2026 batch, 5 employees, launched publicly in beta April 2026). Founders Anton Livaja (CEO), Ksenia Lesko, and Lance Vick (CTO) previously ran Distrust, a security consultancy for hedge funds/custodians handling $600B+ in assets; Caution is a spin-out of that work built on the Stagex Linux distribution. No funding amount, round, or additional investor beyond Y Combinator itself was found in company materials, press, or aggregator searches within the time budget."
 },
 "id": "caution",
 "name": "Caution",
 "url": "https://caution.co/pricing.html",
 "category": "paas",
 "isolation": "vm",
 "modes": [
  {
   "key": "managed",
   "label": "Fully managed enclave",
   "flags": [
    "sales"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": ""
  },
  {
   "key": "byoc",
   "label": "Managed enclave in own AWS",
   "flags": [
    "sales",
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": 30,
   "max_ram_gib": 126,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Caution picks the host instance from the requested CPU/RAM: m5.xlarge (4/16 GB host, enclave up to 2 vCPU/14 GB), m5.2xlarge (8/32, up to 6/30), m5.4xlarge (16/64, up to 14/62), m5.8xlarge (32/128, up to 30/126). The parent instance reserves ~2 vCPU / 2 GB. AWS instance cost is paid in your own account."
  },
  {
   "key": "self-host",
   "label": "AGPL self-host",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": ""
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Current applicable tariff unverified",
   "fee": null,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": ""
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "snapshot": "none",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": false,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": false,
  "ssh": true,
  "public_ipv4": true,
  "inbound_https": true,
  "custom_domain": true,
  "raw_tcp_inbound": true,
  "egress_allowlist": false,
  "static_egress_ip": true,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "gpu_types": [],
  "regions": null,
  "lang_python": false,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "harness_api": false,
  "ingress_rules": true,
  "secret_proxy": false,
  "isolation": "dedicated-vm",
  "image_oci": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "static-datacenter",
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "volume_attach": false,
  "volume_shared": false,
  "own_agent_api": false,
  "max_session_unlimited": true,
  "guest_firewall": false,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "caveats": [
  "Fully managed, managed BYOC AWS, and self-hosted AGPLv3 or commercial license. Public product, contact-sales prices all modes. TDX/SEV/TPM advertised coming in 2026, not established available by crawl.",
  "Null values mean unknown, not free/unlimited. No model-token cost, tax or unverified ancillary charge included.",
  "Native browser/device/task/credit prices with unknown CPU/RAM are deliberately non-priceable. Check regime before interpreting any partial resource estimate.",
  "Refund policy: all fees non-refundable once charged (subscriptions, usage-based charges, professional services); cancellation keeps access to end of billing period with no pro-rating; trials/POC credits have no cash value. Terms reference 'subscription and usage billing' but no public numbers."
 ],
 "sources": [
  "https://www.ycombinator.com/companies/caution",
  "https://caution.co/pricing.html",
  "https://docs.caution.co/reference/deployment-models/",
  "https://caution.co/",
  "https://caution.co/llms.txt"
 ],
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "sales",
  "raise_time_days": null,
  "verification": null,
  "tiers": null,
  "notes": "Both managed and BYOC deployment options route to team contact; no public new-account compute/concurrency quota. BYOC additionally depends on customer AWS quotas.",
  "sources": [
   "https://caution.co/pricing.html",
   "https://www.caution.co/terms.html"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 6,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 3
 },
 "feature_evidence": {
  "harness_api": {
   "value": false,
   "source": "https://docs.caution.co/guides/build-with-an-ai-agent/",
   "quote": "Caution publishes a set of agent skills for Claude Code and Codex. Once installed, your agent knows how to package and debug an app for Caution and StageX without you having to paste in the docs.",
   "note": "Only SKILL.md files for a local coding agent to author caution.hcl; Caution is a verifiable enclave app-hosting platform, not an agent sandbox. No API to run a harness inside an enclave.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://docs.caution.co/reference/deployment-configuration/",
   "quote": "Each port your app exposes needs an ingress rule. The port named in http is reverse-proxied through Caddy with TLS termination on port 443; any other ingress ports are exposed as raw TCP (useful for P2P or binary protocols).",
   "note": "Choose exposed ports per ingress block (cidr_ipv4, port/range, ip_protocol). STEVE e2e mode is fail-closed: 'STEVE rejects ordinary plaintext application requests by default with 403 {\"error\":\"e2e_required\"}'. Caveat: current source security-group template opens user ports to 0.0.0.0/0 regardless of the cidr_ipv4 given.",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://docs.caution.co/concepts/key-services/",
   "quote": "The Caution CLI encrypts these values from a local .env file into .asc files, which are committed with the app and decrypted inside the enclave after the quorum is met.",
   "note": "Secrets (Locksmith, Shamir quorum, attested key delivery) are delivered INTO the enclave and exposed as env vars via env::vault(...); protected from the host, not from the workload. No credential-injecting egress proxy.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "dedicated-vm",
   "source": "https://docs.caution.co/reference/debug-enclave/running/",
   "quote": "SSH access is to the host EC2 instance, not the enclave itself. The enclave runs in an isolated VM.",
   "note": "AWS Nitro Enclaves: a hardware-isolated VM carved out of vCPU/RAM from the parent EC2 (Nitro) host, with its own kernel/memory, no persistent storage, and only vsock connectivity.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": true,
   "source": "https://docs.caution.co/reference/byoc/",
   "quote": "Caution builds from the repository root with docker build -f <containerfile> . ; it does not run a custom build command or pass extra Docker build arguments.",
   "note": "You bring a Containerfile/Docker image; Caution builds it into the enclave image (EIF).",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://docs.caution.co/reference/fully-managed/",
   "quote": "enclave \"main\" { unit \"default\" { command = \"/app/server\" } }",
   "note": "not offered: outside the product's scope — the enclave runs one built application process (an EIF derived from your Docker image); no documented way to run Docker/containers inside the running enclave workload itself.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://docs.caution.co/concepts/security-assumptions/",
   "quote": "Caution currently supports deployments on AWS Nitro Enclaves. That means current deployments rely on: AWS Nitro Enclaves for enclave isolation and memory protection",
   "note": "not offered: outside the product's scope — AWS Nitro Enclaves have no /dev/kvm passthrough; the enclave itself is the isolation layer, not a general-purpose VM host.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://caution.co/llms.txt",
   "quote": "Caution makes it simple to deploy workloads to trusted execution environments (TEEs) and lets anyone cryptographically verify exactly what software is running.",
   "note": "not offered: outside the product's scope — a headless confidential-app-hosting platform, not a desktop/VNC product.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://docs.caution.co/reference/deployment-configuration/",
   "quote": "Client integration : Use the native Rust SDK, generated Swift/UniFFI facade, STEVE CLI, or browser SDK and pin the deployment's key-exchange suite",
   "note": "not offered: outside the product's scope — the 'browser SDK' is a client-side JS library end users load in their own browser to talk to STEVE; Caution does not provide/manage a browser inside the sandbox.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://caution.co/llms.txt",
   "quote": "Caution makes it simple to deploy workloads to trusted execution environments (TEEs) and lets anyone cryptographically verify exactly what software is running.",
   "note": "not offered: outside the product's scope — no screenshot/click desktop-driving API exists for this confidential-app-hosting platform.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://caution.co/llms.txt",
   "quote": "Caution helps teams deploy workloads to AWS Nitro Enclaves, verify source-to-enclave integrity with reproducible builds and hardware attestation, and optionally protect application data all the way into the enclave with end-to-end encryption.",
   "note": "not offered: outside the product's scope — no browser-automation/anti-detection feature for a confidential-compute app-hosting platform.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://caution.co/llms.txt",
   "quote": "Caution helps teams deploy workloads to AWS Nitro Enclaves, verify source-to-enclave integrity with reproducible builds and hardware attestation, and optionally protect application data all the way into the enclave with end-to-end encryption.",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "static-datacenter",
   "source": "https://docs.caution.co/reference/fully-managed/",
   "quote": "A stable managed DNS target that follows the app's current Elastic IP",
   "note": "Deployments get an AWS Elastic IP (static datacenter IP) on the parent EC2 instance; the vsock network proxy routes the enclave's outbound traffic through that same host, so egress is a fixed AWS datacenter IP.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": true,
   "source": "https://docs.caution.co/reference/debug-enclave/running/",
   "quote": "To SSH into the EC2 instance running the enclave, add your public key to the ssh_keys list ... ssh ec2-user@<instance-ip>",
   "note": "SSH reaches only the host EC2 instance (not the enclave itself), and is a debug-mode-only feature you're told to disable in production.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://docs.caution.co/concepts/security-assumptions/",
   "quote": "Debug-mode deployments AWS Nitro Enclaves zero out PCR values in debug mode, so production verification is not meaningful while debug mode is enabled.",
   "note": "not offered: no documented snapshot/checkpoint capability; enclaves are stateless application processes rebuilt from source/image on each deploy, with secrets re-derived via Locksmith on boot.",
   "checked": "2026-09-30"
  },
  "snapshot_auto": {
   "value": false,
   "source": "https://docs.caution.co/reference/deployment-models/",
   "quote": "Caution runs on AWS Nitro Enclaves and supports multiple deployment options depending on how much infrastructure ownership and operational control you want.",
   "note": "not offered: no documented auto-snapshot-on-stop feature.",
   "checked": "2026-09-30"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://docs.caution.co/reference/deployment-models/",
   "quote": "Caution runs on AWS Nitro Enclaves and supports multiple deployment options depending on how much infrastructure ownership and operational control you want.",
   "note": "not offered: no documented on-demand snapshot/checkpoint API.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://docs.caution.co/reference/byoc/",
   "quote": "A one-time setup script creates isolated AWS infrastructure and a scoped IAM identity limited to resources tagged for Caution, then Caution manages deployments within that environment.",
   "note": "not offered: no documented machine-clone/fork API; each deployment is built fresh from source via Docker + nitro-cli.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://docs.caution.co/reference/byoc/",
   "quote": "A one-time setup script creates isolated AWS infrastructure and a scoped IAM identity limited to resources tagged for Caution, then Caution manages deployments within that environment.",
   "note": "not offered: no documented running-clone feature.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://docs.caution.co/concepts/security-assumptions/",
   "quote": "The workload runs inside a confidential compute enclave isolated from the host.",
   "note": "not offered: no documented memory-snapshot clone; would also conflict with Nitro Enclave memory isolation guarantees.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://docs.caution.co/reference/byoc/",
   "quote": "Create new instances via the ASG (automatically tagged) ... Start/stop/terminate EC2 instances with the deployment tag",
   "note": "Only full start/stop/terminate of the host EC2 instance via the Auto Scaling Group is documented; no explicit pause-with-reduced-billing feature.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://docs.caution.co/reference/byoc/",
   "quote": "Ec2[\"EC2 parent instance<br/>launched by ASG\"]",
   "note": "not offered: app runs continuously on an ASG-managed EC2 instance; no documented sleep/wake-on-request model.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://docs.caution.co/concepts/key-services/",
   "quote": "Caution's secret management system for enclaves offers services for managing keys that are never exposed outside of enclave memory and are portable.",
   "note": "not offered: no documented persistent-disk feature for the enclave workload; the docs describe secrets delivery (Locksmith) and public env vars, not a mounted persistent filesystem.",
   "checked": "2026-09-30"
  },
  "volume_attach": {
   "value": false,
   "source": "https://docs.caution.co/reference/caution-hcl/",
   "quote": "resources { } # cpu / memory ... cpu = 2 memory_mb = 512",
   "note": "not offered: caution.hcl configuration surface covers cpu/memory/ports/build/debug; no volume/disk attachment block is documented.",
   "checked": "2026-09-30"
  },
  "volume_shared": {
   "value": false,
   "source": "https://docs.caution.co/reference/caution-hcl/",
   "quote": "resources { } # cpu / memory ... cpu = 2 memory_mb = 512",
   "note": "not offered: no documented shared-volume feature.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://docs.caution.co/reference/byoc/",
   "quote": "Ec2[\"EC2 parent instance<br/>launched by ASG\"]",
   "note": "not offered: no documented idle-timeout auto-stop; the ASG keeps the app instance running.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://docs.caution.co/reference/caution-hcl/",
   "quote": "cpu = 2 memory_mb = 512 ... cpu Number of vCPUs. memory_mb Memory allocation in MB.",
   "note": "CPU/RAM are set in caution.hcl and applied via redeploy; no documented API to resize a running machine in place.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://docs.caution.co/guides/build-with-an-ai-agent/",
   "quote": "Caution publishes a set of agent skills for Claude Code and Codex. Once installed, your agent knows how to package and debug an app for Caution and StageX without you having to paste in the docs.",
   "note": "These are SKILL.md files for a developer's local coding agent to help author caution.hcl/Containerfiles; no coding-agent harness is preinstalled inside the enclave/sandbox itself.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://caution.co/llms.txt",
   "quote": "Caution makes it simple to deploy workloads to trusted execution environments (TEEs) and lets anyone cryptographically verify exactly what software is running.",
   "note": "not offered: outside the product's scope — no first-party browser/computer-use/research task agent.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://docs.caution.co/guides/build-with-an-ai-agent/",
   "quote": "Each skill is a SKILL.md — the format originated by Anthropic for Claude Code and now also read natively by Codex.",
   "note": "Only SKILL.md agent-skill files are offered; no MCP server for controlling Caution deployments is documented.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": false,
   "source": "https://docs.caution.co/reference/fully-managed/",
   "quote": "Caution builds from the repository root with docker build -f <containerfile> . . It does not run a custom build command or pass extra Docker build arguments",
   "note": "not offered: no managed language runtime out of the box — every deployment must bring its own Containerfile/image regardless of language.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": false,
   "source": "https://docs.caution.co/reference/fully-managed/",
   "quote": "Caution builds from the repository root with docker build -f <containerfile> . . It does not run a custom build command or pass extra Docker build arguments",
   "note": "not offered: no managed language runtime out of the box — every deployment must bring its own Containerfile/image regardless of language.",
   "checked": "2026-09-30"
  },
  "egress_allowlist": {
   "value": false,
   "source": "https://docs.caution.co/reference/debug-enclave/running/",
   "quote": "# Network proxy (provides enclave internet access) sudo systemctl status vsock-network.service",
   "note": "not offered: the documented vsock network proxy just gives the enclave general internet access; no allow/deny-list or no-internet-mode egress control is documented.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://docs.caution.co/reference/debug-enclave/running/",
   "quote": "# Network proxy (provides enclave internet access) sudo systemctl status vsock-network.service",
   "note": "not offered: no documented HTTP method/path-level egress rules.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": true,
   "source": "https://docs.caution.co/reference/byoc/",
   "quote": "Eip[\"Elastic IP<br/>assigned during deploy\"] ... A stable Caution-managed DNS target that follows the app's current Elastic IP",
   "note": "An AWS Elastic IP is assigned per deployment and is the address the app (and its egress via the same host) is reachable/routed through.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://caution.co/pricing.html",
   "quote": "m5.xlarge (4/16 GB host, enclave up to 2 vCPU/14 GB), m5.2xlarge (8/32, up to 6/30), m5.4xlarge (16/64, up to 14/62), m5.8xlarge (32/128, up to 30/126)",
   "note": "not offered: outside the product's scope — AWS Nitro Enclaves run on general-purpose m5 instances; Nitro Enclaves do not support GPU passthrough.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://docs.caution.co/quickstart/fully-managed/",
   "quote": "CLI Supported today on Linux (x86_64) or macOS (arm64)",
   "note": "not offered: outside the product's scope — AWS Nitro Enclaves and the demo apps are Linux-only; there is no Windows enclave/host option.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://docs.caution.co/quickstart/fully-managed/",
   "quote": "CLI Supported today on Linux (x86_64) or macOS (arm64)",
   "note": "not offered: macOS is only a supported platform for running the local Caution CLI/developer tooling, not a hosting target — deployed enclaves run on AWS Nitro (Linux).",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://caution.co/pricing.html",
   "quote": "m5.xlarge (4/16 GB host, enclave up to 2 vCPU/14 GB), m5.2xlarge (8/32, up to 6/30), m5.4xlarge (16/64, up to 14/62), m5.8xlarge (32/128, up to 30/126)",
   "note": "not offered: the documented BYOC/managed host instance types (m5.*) are x86_64; macOS arm64 is only supported as a CLI development platform, not as an enclave architecture.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://caution.co/security-controls.html",
   "quote": "Does Caution certify compliance? No. The Caution platform provides technical controls and evidence that may support a security or assurance program.",
   "note": "The page maps evidence to SOC 2 TSC criteria but explicitly states Caution does not itself certify/attest compliance.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://caution.co/security-controls.html",
   "quote": "Does Caution certify compliance? No. The Caution platform provides technical controls and evidence that may support a security or assurance program.",
   "note": "No HIPAA-eligibility or BAA is documented; compliance certification is explicitly stated to be the customer's responsibility.",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": false,
   "source": "https://docs.caution.co/quickstart/fully-managed/",
   "quote": "Passkey Browser or platform passkey, password manager passkey, or security key or smart card (YubiKey, NitroKey, or LibremKey)",
   "note": "Account auth is documented as passkey-based (WebAuthn/FIDO2); no SAML/OIDC SSO is mentioned anywhere in the docs or FAQ.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": true,
   "source": "https://docs.caution.co/reference/byoc/",
   "quote": "You control: Your AWS account and billing Network configuration and VPC Where your data resides",
   "note": "Under bring-your-own-compute, the customer's own AWS account/region choice (including EU regions) determines data residency; not established for the fully managed mode, whose region is not documented.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://docs.caution.co/reference/byoc/",
   "quote": "Ec2[\"EC2 parent instance<br/>launched by ASG\"] --> Enclave[\"AWS Nitro Enclave<br/>application runtime\"]",
   "note": "No documented session/runtime time limit; the app runs continuously on an Auto-Scaling-Group-managed EC2 instance until the deployment is stopped/terminated.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://docs.caution.co/reference/caution-hcl/",
   "quote": "enclave \"main\" { unit \"default\" { command = \"/app/server\" } } ... cpu = 2 memory_mb = 512",
   "note": "not offered: outside the product's scope — the enclave runs a single application process/unit defined by caution.hcl (built from a Docker image via docker build), with no documented shell/root access to the enclave's guest OS (SSH per docs.caution.co/reference/debug-enclave/running/ reaches only the parent EC2 host, never the enclave). No iptables/nftables configuration surface for the workload is documented; this is not a general-purpose administrable guest OS.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://docs.caution.co/reference/fully-managed/",
   "quote": "Caution handles: Infrastructure and billing, Standard Docker application builds, Enclave lifecycle management, Network routing and public ingress",
   "note": "granularity: account-only; No REST API, SDK method, or CLI command documented for retrieving billable usage of an enclave or group of enclaves. Billing is handled by Caution's fully managed or BYOC services, accessible via dashboard (dashboard.caution.co) but not via programmatic API. Terms reference 'subscription and usage billing' but no public numbers or usage endpoints exist.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://caution.co/pricing.html",
 "locations_quote": "Caution runs on AWS Nitro Enclaves and supports multiple deployment options depending on how much infrastructure ownership and operational control you want.",
 "locations_checked": "2026-10-01"
}