ai-coding-tools-compare
The "should we be using X instead of Copilot?" answer with structure. Most comparisons in the wild are vendor-marketing pageant scoring; this one applies the org's actual procurement / TPRM / compliance rubric.
When to use
- Periodic re-evaluation cadence (currently annual; revisit if regulator activity, vendor change, or material capability gap forces it).
- Vendor selection for a specific use case (e.g., agentic refactoring of legacy COBOL — does Cursor's UX matter more than Copilot's posture there?).
- Leadership question: "I saw a demo of Cursor — should we switch?"
- Annual Copilot TPRM-file review needs a comparative posture summary.
When NOT to use
- Specific Copilot questions →
copilot-faq-answerer.
- Frontier-model comparison (which model is best) →
frontier-model-watch.
- Tool selection for non-coding AI (chatbot platforms, knowledge management) → out of scope.
Enterprise rubric (the comparison axes)
| Axis |
What we check |
| Auth |
SSO via SAML, SCIM provisioning, EMU support, IP allow-list |
| Data residency |
US / EU regions available + enforced at tenant level |
| Training-data policy |
Do customer prompts train models? Default + contractual options |
| Content exclusion |
Org-level + repo-level + path-level patterns |
| IP indemnity |
Scope of indemnity + conditions (e.g., filter requirement) |
| On-prem / single-tenant |
Available for regulated buyers? At what tier? |
| Admin telemetry |
Active users, acceptance rate, cost attribution per user/team |
| Certifications |
FedRAMP Moderate, SOC 2 Type 2, ISO 27001, ISO 42001 |
| Model routing transparency |
Which model is invoked for which surface? Documented? |
| Audit log access |
Admin actions logged? Streamed to SIEM? Retention? |
| Pricing model |
Per-seat / consumption / surcharge for residency? |
| Knowledge-base / RAG capability |
Native? Via integration? Auditable? |
| Agentic features |
Multi-step actions? With what guardrails? |
| Ecosystem coverage |
IDEs supported (VS Code, JetBrains, Vim/Neovim, CLI) |
Workflow (Obsidian-first, mandatory)
- Query the vault first via
vault-querier:
- Full-text search the tools' names across
vault/research/ai-coding-tools/** (prior comparisons), vault/facts/copilot/** (the org's known Copilot baseline), vault/research/vendor/** (per-vendor evaluations), vault/research/frontier-model/** (model-routing facts), and recent vault/digests/** (last 90 days — quarterly-ai-coding-landscape output lands there).
- Backlink check on each tool's entity (e.g.
[[cursor]], [[copilot]]).
- Triage findings:
- If a current comparison already covers the asked tools and axes → return it with source citations (vault path + original source URLs). No new write.
- If partial → identify the gap (which tools / axes are missing or stale). Web research targets only those cells.
- If empty → full comparison.
- A gap means the vault has no note ≤90 days old answering the question.
- Identify tools to compare (default: Copilot + top alternatives; subset for use-case-specific comparison).
- For each tool, fill the rubric — vault facts first; for confirmed gaps, use
source-fetcher (with prompt-injection-guard) on primary sources (vendor docs, official changelog) per axis, extracting claims via claim-extractor.
- Verify load-bearing claims via
verify-claim (3-vote refute) — a vendor's claims about its own product are tier-1; competitive claims and third-party characterizations get the full 3-vote treatment before affecting a score.
- For each axis, score: PASS / PARTIAL / FAIL against the org's bar.
- Identify gaps: where would switching help vs hurt for specific use cases.
- Recommendation with explicit time-bound — "this comparison valid through {date}; re-evaluate at {trigger}."
- Write the comparison note via
digest-writer (which delegates the file write to vault-writer.write_research):
- Path:
vault/research/ai-coding-tools/YYYY-MM-DD-comparison-{slug}.md
- Frontmatter per
research.yml schema: topic: ai-coding-tools, question, sources, findings_count, verified_claims.
- Body: the output structure below, with credibility-tier badges on every source.
- Stage promotable claims to
_inbox/ai-coding-tools-compare/:
- Any verified fact-typed claim (e.g. a vendor's certification or training-data policy) →
_inbox/ai-coding-tools-compare/{timestamp}-{slug}.md with suggested_surface: facts and suggested_path: facts/{vendor-entity}/{predicate}.md.
memory-curator decides on its next sweep.
Output structure
# AI Coding Tools Comparison — {date}
## Tools in scope
[list]
## Rubric scoring (PASS / PARTIAL / FAIL per axis per tool)
[matrix]
## Per-tool summary
### {tool name}
- Strengths vs Copilot
- Gaps vs org rubric
- Where it might fit (specific use case)
## Recommendation
- Headline: stay / switch / use alongside
- Valid through: {date / trigger}
## Sources
{vendor docs + vault facts}
Lands at vault/research/ai-coding-tools/YYYY-MM-DD-comparison-{slug}.md.
Composes with
vault-querier — load Copilot baseline facts.
vendor-security-eval — deeper single-vendor evaluation.
frontier-model-watch — model-side, not tool-side, dimension.
stakeholder-update-writer — exec-tier output naturally pulls from this.
Acceptance test (for step 28 done-criteria)
One live comparison exercise covering Copilot + at least 3 alternatives across all 14 rubric axes. Verdict cited per axis per tool.
1---2name: ai-coding-tools-compare3description: Produce a side-by-side comparison of AI coding tools — GitHub Copilot vs Cursor vs Windsurf vs Cody vs Tabnine vs JetBrains AI vs Amazon Q Developer vs emerging entrants — against the org's enterprise rubric. Rubric axes — auth (SSO/SAML/SCIM), data flow (residency, content exclusion, training-data policy), IP indemnity, on-prem / single-tenant options, admin telemetry, FedRAMP/SOC2/ISO certifications, model routing transparency, audit log access. Use when the user asks to compare AI coding tools (Copilot vs Cursor vs Windsurf vs Cody vs others) against the org's enterprise rubric, or asks "should we switch to X?" — during periodic re-evaluation, vendor selection for a specific use case, or before responding to leadership. For an in-depth single-tool study (not a comparison) use copilot-deep-dive.4---56# ai-coding-tools-compare78The "should we be using X instead of Copilot?" answer with structure. Most comparisons in the wild are vendor-marketing pageant scoring; this one applies the org's actual procurement / TPRM / compliance rubric.910## When to use1112- Periodic re-evaluation cadence (currently annual; revisit if regulator activity, vendor change, or material capability gap forces it).13- Vendor selection for a specific use case (e.g., agentic refactoring of legacy COBOL — does Cursor's UX matter more than Copilot's posture there?).14- Leadership question: "I saw a demo of Cursor — should we switch?"15- Annual Copilot TPRM-file review needs a comparative posture summary.1617## When NOT to use1819- Specific Copilot questions → `copilot-faq-answerer`.20- Frontier-model comparison (which model is best) → `frontier-model-watch`.21- Tool selection for non-coding AI (chatbot platforms, knowledge management) → out of scope.2223## Enterprise rubric (the comparison axes)2425| Axis | What we check |26|------|---------------|27| **Auth** | SSO via SAML, SCIM provisioning, EMU support, IP allow-list |28| **Data residency** | US / EU regions available + enforced at tenant level |29| **Training-data policy** | Do customer prompts train models? Default + contractual options |30| **Content exclusion** | Org-level + repo-level + path-level patterns |31| **IP indemnity** | Scope of indemnity + conditions (e.g., filter requirement) |32| **On-prem / single-tenant** | Available for regulated buyers? At what tier? |33| **Admin telemetry** | Active users, acceptance rate, cost attribution per user/team |34| **Certifications** | FedRAMP Moderate, SOC 2 Type 2, ISO 27001, ISO 42001 |35| **Model routing transparency** | Which model is invoked for which surface? Documented? |36| **Audit log access** | Admin actions logged? Streamed to SIEM? Retention? |37| **Pricing model** | Per-seat / consumption / surcharge for residency? |38| **Knowledge-base / RAG capability** | Native? Via integration? Auditable? |39| **Agentic features** | Multi-step actions? With what guardrails? |40| **Ecosystem coverage** | IDEs supported (VS Code, JetBrains, Vim/Neovim, CLI) |4142## Workflow (Obsidian-first, mandatory)43441. **Query the vault first** via `vault-querier`:45 - Full-text search the tools' names across `vault/research/ai-coding-tools/**` (prior comparisons), `vault/facts/copilot/**` (the org's known Copilot baseline), `vault/research/vendor/**` (per-vendor evaluations), `vault/research/frontier-model/**` (model-routing facts), and recent `vault/digests/**` (last 90 days — `quarterly-ai-coding-landscape` output lands there).46 - Backlink check on each tool's entity (e.g. `[[cursor]]`, `[[copilot]]`).472. **Triage findings**:48 - If a current comparison already covers the asked tools and axes → return it with source citations (vault path + original source URLs). No new write.49 - If partial → identify the **gap** (which tools / axes are missing or stale). Web research targets only those cells.50 - If empty → full comparison.51 - A **gap** means the vault has no note ≤90 days old answering the question.523. **Identify tools to compare** (default: Copilot + top alternatives; subset for use-case-specific comparison).534. **For each tool, fill the rubric** — vault facts first; for confirmed gaps, use `source-fetcher` (with `prompt-injection-guard`) on primary sources (vendor docs, official changelog) per axis, extracting claims via `claim-extractor`.545. **Verify load-bearing claims** via `verify-claim` (3-vote refute) — a vendor's claims about its own product are tier-1; competitive claims and third-party characterizations get the full 3-vote treatment before affecting a score.556. **For each axis, score**: PASS / PARTIAL / FAIL against the org's bar.567. **Identify gaps**: where would switching help vs hurt for specific use cases.578. **Recommendation** with explicit time-bound — "this comparison valid through {date}; re-evaluate at {trigger}."589. **Write the comparison note** via `digest-writer` (which delegates the file write to `vault-writer.write_research`):59 - Path: `vault/research/ai-coding-tools/YYYY-MM-DD-comparison-{slug}.md`60 - Frontmatter per `research.yml` schema: `topic: ai-coding-tools`, `question`, `sources`, `findings_count`, `verified_claims`.61 - Body: the output structure below, with credibility-tier badges on every source.6210. **Stage promotable claims** to `_inbox/ai-coding-tools-compare/`:63 - Any verified fact-typed claim (e.g. a vendor's certification or training-data policy) → `_inbox/ai-coding-tools-compare/{timestamp}-{slug}.md` with `suggested_surface: facts` and `suggested_path: facts/{vendor-entity}/{predicate}.md`.64 - `memory-curator` decides on its next sweep.6566## Output structure6768```markdown69# AI Coding Tools Comparison — {date}7071## Tools in scope72[list]7374## Rubric scoring (PASS / PARTIAL / FAIL per axis per tool)75[matrix]7677## Per-tool summary78### {tool name}79- Strengths vs Copilot80- Gaps vs org rubric81- Where it might fit (specific use case)8283## Recommendation84- Headline: stay / switch / use alongside85- Valid through: {date / trigger}8687## Sources88{vendor docs + vault facts}89```9091Lands at `vault/research/ai-coding-tools/YYYY-MM-DD-comparison-{slug}.md`.9293## Composes with9495- `vault-querier` — load Copilot baseline facts.96- `vendor-security-eval` — deeper single-vendor evaluation.97- `frontier-model-watch` — model-side, not tool-side, dimension.98- `stakeholder-update-writer` — exec-tier output naturally pulls from this.99100## Acceptance test (for step 28 done-criteria)101102One live comparison exercise covering Copilot + at least 3 alternatives across all 14 rubric axes. Verdict cited per axis per tool.