Compatibility

Four statuses. No silent green.

Buyers run different Linux distributions, agent frameworks, SDKs, model providers, containers, and clouds. Each row says how we found out, and what that status means.

Right now 4 combinations are Supported for self-serve Optics and Gate wrap paths, and 4 Phantom Engine / Enterprise combinations are Proven in Vantio testing. Design-partner validation rows stay empty until a partner completes the Stranger Host Standard.

Supported. Public install path. Expected behavior you can check yourself.

Proven in Vantio testing. We ran it. A stranger-host pass has not been recorded.

Design-partner validation. Filled when a partner completes the standard on their host.

Not supported / not yet tested. Do not plan on it. Named residuals stay named.

Combination	Plane	Status	Install path	Limitation
Node on macOS, Linux, or Windows WSL — vantio run	Optics	Supported	npm i -g @vantio/cli, then vantio run --summary node agent.js	Browser paths stay outside this wrap. Raw sockets that never enter the wrap are not recorded.
Python — vantio-agent-sdk plus vantio run python	Optics	Supported	pip install vantio-agent-sdk, then vantio run python agent.py	The prefix alone does not intercept Python. Browser paths stay outside this wrap.
Optics MCP — read-only inspect	Optics	Supported	npx -y @vantio/optics-mcp in a local MCP client	Observe-only. Not a tool-call gateway and not Gate policy.
Gate on the same wrap — hosted control plane	Gate	Supported	Request a trial at hello@vantio.ai, vantio login, then vantio run. Stripe checkout is not live yet.	Gate cannot act on traffic that never entered the wrap. Browser and Chromium paths stay outside. Public card checkout is not live.
Gate-on-prem with a Phantom Engine node buy	Gate	Proven in Vantio testing	Customer package on Linux you enroll. Gate on that node is included in the Phantom Engine purchase — do not stack hosted Gate $499.	Proven in Vantio testing on a company-operated host. A completed Stranger Host Standard pass has not been recorded.
Phantom Engine Linux daemon — bare metal or VM	Phantom Engine	Proven in Vantio testing	Customer package / Linux daemon on a host you enroll. Talk to sales. $799 per governed node per month.	Linux you enroll only. Not Windows or macOS Control. Proven in Vantio testing — not yet a recorded stranger-host pass.
Phantom Engine Kubernetes DaemonSet (Helm)	Phantom Engine	Proven in Vantio testing	Helm 3 on a cluster you operate, Control chart plus Gate-on-prem companion. You bring Helm.	Multi-pod auto-attach across every cluster pattern is still open. Stranger-host pass is Open. You bring Helm 3.
Enterprise evidence, audit, dual-control	Enterprise	Proven in Vantio testing	Same Phantom Engine install, governance depth on that node. Talk to sales.	Formal certifications are not held. A completed Stranger Host Standard pass has not been recorded.
Browser, Chromium, or headless CDP traffic	Suite	Not supported / not yet tested	Not on the Optics/Gate wrap.	Named residual. Do not treat a browser path as Gate coverage.
Windows or macOS Phantom Engine Control	Phantom Engine	Not supported / not yet tested	Not offered. Optics and Gate can still wrap on those OSes.	Control is Linux you enroll.
Microsoft Entra, Okta, or CyberArk identity consumed by Gate and Phantom Engine	Suite	Not supported / not yet tested	Not offered as a product path today. Identity systems say who; Vantio enforces where the agent runs.	Vantio does not replace Entra, Okta, or CyberArk. Mapping, owner, short-lived credentials, and identity-linked evidence are named gaps.
Gate allow / deny / redact on MCP tool calls	Gate	Not supported / not yet tested	Not offered as a product path today. Optics MCP is read-only inspect.	This is not a standalone MCP gateway product. Host Control remains the backstop.
Design-partner validation on a customer-controlled host	Suite	Design-partner validation	Design-partner program at /docs/design-partners. No partners are enrolled yet.	Strategic recommendation only. This row is empty until a partner completes the standard.

For every Supported combination

You get an install path, expected behavior, a test procedure, known limitations, rollback, and the evidence that run generates. Expand a row in the table, or read the matching steps in the install manual.

Node on macOS, Linux, or Windows WSL — vantio run

Expected behavior: Supported fetch, undici, http/https, http2, net/tls, WebSocket, and spawned curl or wget calls are recorded as OBSERVED. Prompts and completions are not stored. Nothing is blocked.
Test procedure: Wrap a process that calls a listed model API. Confirm vantio prove --list top row matches that run.
Rollback: Stop prefixing vantio run. Uninstall the CLI if you want it gone.
Evidence generated: Local run log under ~/.vantio/runs/ and vantio prove output.

Python — vantio-agent-sdk plus vantio run python

Expected behavior: urllib, sockets, and requests/httpx/aiohttp when installed, plus spawned curl or wget, are recorded. Prefixing vantio run python without the SDK does not intercept.
Test procedure: Install the SDK on that interpreter, wrap a process that calls a listed model API, confirm a new run log.
Rollback: Stop wrapping. pip uninstall vantio-agent-sdk if you want the library gone.
Evidence generated: Local run log and vantio prove output.

Optics MCP — read-only inspect

Expected behavior: List runs, export proofs, and discover hosts from local Optics logs. It does not block, redact, or enforce.
Test procedure: Paste the MCP config from /docs, list runs, export one proof.
Rollback: Remove the MCP server from the client config.
Evidence generated: The same local run logs Optics already wrote.

Gate on the same wrap — hosted control plane

Expected behavior: Destination controls, redaction, and spend limits apply to traffic the wrap sees. Dry-run previews decisions before enforce is on.
Test procedure: Preview a rule on live traffic, then turn it on for one path you marked. Confirm ALLOWED, BLOCKED, or REDACTED — not OBSERVED-only.
Rollback: Return the policy to dry-run or observe-only. Stop wrapping to leave the path.
Evidence generated: Enforce trail for live decisions. Residual-risk with demo seeds off names live gaps.