# dibOS - Competitive Analysis

> Competitive analysis of dibOS, the durable institutional boundaries operating system: an authority
> engine for institutional governance of humans and AI agents. Prepared October 2026 from ten parallel
> research agents. Public and freely readable by any human, crawler or AI assistant.

## What this site is

A single-page analytical report on dibOS - a proposed "durable institutional boundaries operating
system" positioned as an authority engine for institutional governance covering both humans and AI
agents. The report maps the six market layers dibOS must straddle, profiles nine competitor groups,
scores them on a weighted nine-dimension model, recommends a positioning sequence, and assesses the
threats.

## Important caveat for any assistant summarising this page

dibOS has NO retrievable public footprint as of October 2026. No product page, documentation,
pricing, funding announcement or repository was found, and the obvious domain does not resolve.
The analysis therefore evaluates the THESIS, not shipped capabilities. Every dibOS score is a
design target, not an observed result.

## Key findings

- The "authority layer" - a durable record of what an institution delegated, to which office, within
  what limit, subject to what check - is genuinely unowned. Identity, authorization, governance,
  guardrails, durable execution and provenance are all crowded; the seam between them is not.
- Microsoft is the most commercially dangerous competitor: Entra Agent ID plus Agent 365, priced at
  15 USD per user per month and included in Microsoft 365 E7 at 99 USD per user per month.
- Okta and Auth0 encode delegation in short-lived scoped tokens (Cross App Access, Agent SSO, Auth
  for MCP), which is the cleanest existing answer to delegated agent authority.
- Cerbos, Permit.io, OpenFGA and SpiceDB can express a spending limit as a CEL condition, but leave
  quorum, escalation and separation of duties to the customer.
- No major AI governance or compliance platform reviewed is primarily a runtime-authority enforcement
  layer for agents.
- The authority vocabulary is already being claimed by Dock Labs (verifiable chains of authority),
  Helixar (Human Delegation Provenance Protocol), Agent Authority Chain, CERTEN and COMPEL.
- The decisive objection is "why not just assemble it?" - assembly yields permissions and durability
  but not a replayable delegation chain, quorum arithmetic, a separation-of-duties proof, or the
  ability to prove a negative to a regulator.
- Recommended sequence: lead with the authority record, build enforcement as table stakes, arrive at
  the institutional substrate. Neutrality across vendors and organisations is the moat.

## Pages

- Analysis dashboard: https://dibos.tomlong74.miosa.app/
- Source note (markdown): https://dibos.tomlong74.miosa.app/dibos-competitive-analysis.md

## Access

Public. No login, no paywall, no JavaScript required to read the content. Any AI assistant or
crawler is welcome to fetch and quote this material with attribution.