On August 4, AWS open-sourced Kiro Crew under the Apache 2.0 license. Crew turns Kiro from an interactive coding assistant into a persistent agent platform that continues working across sessions, machines and events, provided the underlying host remains available.
The release is significant not because AWS open-sourced another developer tool, but because it reveals where the company believes openness creates value. AWS released the orchestration layer around the agent while keeping the agent runtime itself proprietary.
When I asked Deepak Singh, Vice President for Agentic AI at AWS, during a briefing in late July whether the underlying agent harness would also be open-sourced, his answer was unambiguous.
“We are not open sourcing the harness,” he said, adding that AWS’s strategy is to standardize on open protocols rather than open implementations.
That distinction matters. Enterprises can now inspect how long-running agents are orchestrated, scheduled and governed, but not the code that actually plans, reasons and executes the agent loop.
AWS Opened the Orchestration Layer
Kiro Crew is essentially a persistent workspace built around the Kiro CLI. It adds the operational capabilities required for autonomous agents rather than improving the underlying model.
Scheduling is the first pillar. Beyond recurring jobs, Crew supports heartbeat-based monitoring that waits for external state changes such as pull requests or deployments before resuming execution. Authenticated webhooks can trigger workflows from external systems, while deterministic tasks can execute as ordinary scripts without invoking an LLM.
Memory is the second pillar. Workspace preferences, project context and execution history persist across sessions. Corrections become reusable knowledge, and repeated interaction patterns evolve into editable skills that developers can inspect, modify or remove.
The third capability is multi-agent coordination through the Agent Client Protocol (ACP). Multiple agent conversations execute concurrently within isolated contexts before reporting results back to a parent workflow. Planning, tool invocation and approval decisions remain visible through a live activity view.
Applications form the fourth building block. Instead of treating every task as a chat conversation, Crew introduces standalone applications such as DevFleets for worktree management, Task Runner for long-running execution and Issue Radar for repository triage. AWS also provides an SDK for building additional applications. Its LaunchDarkly integration illustrates the approach, with feature flags flowing into the workspace through MCP, allowing agents to discover flag usage and modify configuration without leaving the development environment.
Security receives equal attention. Crew includes operating-system sandboxing, deny-by-default command execution, sensitive-path protection, credential redaction and signed audit logs. By default, its management dashboard binds only to localhost unless explicitly configured otherwise.
The Runtime Remains Proprietary
The open source boundary is narrower than it first appears.
Crew implements the persistent workspace, scheduling, memory injection, workflow orchestration, approval management and its own runtime policy layer. Underneath it sits the Kiro agent harness that AWS described a day earlier. That harness executes the core agent loop, communicates with foundation models, invokes tools and enforces capability-based permissions through Cedar.
The result is effectively two policy layers stacked together. Only one is open.
The harness is also not a cloud service. AWS rearchitected Kiro earlier this week around a standalone local process communicating over ACP. Crew therefore drives a locally running Kiro harness rather than calling a hosted API. The architectural separation creates a clean protocol boundary while allowing AWS to retain ownership of the underlying implementation.
This reflects a broader industry trend. Open protocols increasingly define interoperability, while proprietary runtimes compete on execution quality.
Open Protocols Do Not Mean Open Implementations
AWS deserves credit for adopting ACP as the internal boundary between Kiro clients and the agent itself. ACP reached version 1.0 in June 2026 and already has support across tools, including JetBrains IDEs, Zed and Xcode.
But AWS also introduced what it calls Kiro-ACP, extending the protocol with more than twenty additional agent methods covering capabilities such as live steering, specifications and richer permission controls.
That creates two levels of compatibility.
Any ACP client can communicate with Kiro. Only Kiro-aware clients understand the extended capabilities that differentiate the product.
This mirrors earlier platform strategies. Standards establish interoperability, while proprietary extensions preserve product differentiation.
Singh argues that specifications serve both humans and agents.
“Specs are as much agent-facing as human-facing.”
Accordingly, the harness continuously consumes project specifications during execution to maintain alignment. Crew automatically reuses existing .kiro configurations, allowing steering files, skills and custom agents to migrate without modification.
From MeshClaw to Internal Scale
Crew originated inside Amazon as an internal project called MeshClaw. According to AWS, three engineers wanted agents that could continue working while developers focused elsewhere, producing meaningful progress before they returned.
The team acknowledges inspiration from OpenClaw’s autonomous workflow while emphasizing that Amazon required substantially stronger governance controls before such capabilities could be deployed internally.
OpenClaw therefore provides useful competitive context rather than a direct comparison. Its permissive design accelerated experimentation but also exposed governance challenges that enterprises struggled to operationalize. Crew’s emphasis on sandboxing, approval workflows, policy enforcement and auditability can be viewed as AWS’s response to those concerns.
AWS also disclosed unusually detailed internal adoption metrics. More than 39,000 Amazon developers reportedly used Crew within six months, while nearly 500 contributors submitted 597 changes to the project. Governance now operates through a published steering committee with design proposals managed through GitHub pull requests.
Those numbers demonstrate meaningful internal validation, although they represent a single enterprise operating within Amazon’s own engineering environment.
Questions Enterprises Should Still Ask
Open sourcing Crew improves transparency around orchestration, but it leaves several operational questions unanswered.
The first concern is audit integrity. AWS describes signed audit logs but has not publicly explained precisely what is signed, where signing keys reside or whether administrators can independently detect deleted or reordered events.
The second concern is policy precedence. Crew introduces its own runtime policies alongside approval settings, while the proprietary harness independently enforces Cedar authorization policies. Enterprises need clarity about which layer ultimately determines execution when policies conflict.
The third concerns operational cost. Crew can execute deterministic jobs without model inference, but any model-backed workflow ultimately runs through the Kiro CLI using Kiro credits. Organizations should understand whether spending controls exist at the job, workspace and organizational levels, particularly for long-running workflows that automatically resume after external events.
Finally, portability deserves careful examination. Although Crew itself is open source and communicates through ACP, it currently targets the Kiro runtime. An open protocol alone does not guarantee that another ACP-compatible runtime can replace Kiro in production without losing functionality.
The Bigger Picture
The strategy reflects a calculated commercial trade-off. By placing the orchestration layer in the public domain, AWS incentivizes broader adoption of the Kiro ecosystem while ensuring that the proprietary reasoning engine and the consumption of Kiro credits remain the primary drivers of monetization.
The company has open-sourced the layer responsible for orchestration, persistence and operational governance while retaining ownership of the reasoning engine underneath. That gives platform teams significantly more visibility into how autonomous workflows are managed than they would receive from a fully proprietary service, without exposing the implementation AWS considers strategically differentiating.
Whether that balance satisfies enterprise buyers will depend on what they need to inspect. Organizations primarily concerned with orchestration, governance and host-side security now have source code they can audit. Those that require visibility into every decision the agent makes will still find a proprietary boundary at the heart of the platform.
That debate is likely to extend well beyond Kiro. As AI agent platforms mature, the competitive question may no longer be whether vendors embrace open source, but where they choose to stop.
