Kiro(AI IDE 平台市场研究)


1. 介绍

Kiro 是 AWS 于 2025 年 7 月发布的智能体 IDE,基于 Code OSS 构建、经 Amazon Bedrock 接入模型。它的发布口号是「从 vibe coding 到 viable code」——针对业界对「自然语言随便聊两句就生成代码」模式的普遍不满,Kiro 把答案押在一个结构性主张上:先写规格(Spec),再写代码。开发者描述功能后,Kiro 生成三份可编辑、可版本控制的规格文档(requirements.md、design.md、tasks.md),人工逐份批准后,智能体才按任务清单实施。规格不再是聊天记录里的一段对话,而是仓库内的显式工件。

在 AI IDE 三大流派的谱系中——补全流(Copilot / 通义灵码)、Agent 流(Cursor / Cline / Roo Code)、规格流——Kiro 是规格流唯一由超大规模云厂商下注的代表。本组文档把它作为差异化主线:规格驱动把 Harness 的 L1 上下文工程从「运行时隐式装配提示」前移为「事前显式工件」,L3 编排从「模型内隐式规划」外化为「任务清单 + 门禁」,这在六层模型上是一次真正的架构前移,而不只是功能叠加。

1.1. 开发商与产品沿革

项目内容来源
开发商AWS(Amazon Web Services)官方网站
公开预览2025-07-14 / 07-15(AWS Summit New York 期间发布,官方博客与第三方报道日期差一天)官方博客 / 第三方
计费改革2025-09-15 预览期定价切换为 Credits 信用点制官方公告(第三方转述)
正式发布(GA)2025-11-17,同期在 AWS re:Invent 2025 公布 Kiro Powers 等扩展能力官方博客 / 第三方
后续节点2025-11-24 Claude Opus 4.5 上线(2.2x Credit 系数);预览自主智能体(跨会话记忆、多仓库协同)第三方口径,
形态扩展Kiro IDE(Code OSS 桌面端)、Kiro CLI、Kiro Web(云端会话)、Kiro Mobile(移动端,官方能力矩阵披露)官方文档
前承产品Amazon Q Developer IDE 插件体系被官方指引向 Kiro 迁移(第三方称 Q Developer 2027-04-30 终止支持)第三方口径
Kiro Web GA2026-09-01(媒体口径);官方 FAQ 已确认 Kiro Web 正式可用,纳入 Pro / Pro+ / Pro Max / Power 付费计划,云端算力不单独计费官方 FAQ(A级)/ 第三方(B级,日期口径 [待核实]
教育推广2026-09 上中旬向 18 国 132 所高校学生提供一年免费 Kiro(每月 1,000 credits,由 2026-03 试点扩容 12 倍)AWS 官方新闻(A级,公告具体日期 [待核实]

口径说明(v1.1 增补):Kiro 与 Amazon Q Developer 的关系存在冲突口径——harnesses.sh(2026 口径)称 Kiro 于 2026-05-07 国际发布为「Amazon Q Developer 的继任者」,而 2026-06/07 的多篇第三方横评仍将 Q Developer 作为独立活跃产品列出(Pro $19/席/月)。两者是否构成正式继任关系 ,以 AWS 官方公告为准;若继任关系确认,Q Developer 不再具备独立成篇价值,沿革以本篇为准。

1.2. 定位与最新版本

Kiro 的定位是面向「原型到生产(prototype to production)」的规格驱动智能体 IDE。与 Cursor 强调编辑器体验、Claude Code 强调终端自主不同,Kiro 把「开发过程的中间产物」产品化:需求文档、设计文档、任务清单这些传统上活在 Confluence 与会议纪要里的东西,被拉进仓库、变成智能体的实施依据与团队的评审对象。

当期版本号未获官方发布页一手披露,记 [待填写]。模型侧,官方口径为经 Bedrock 提供 Claude Sonnet 4 等前沿模型与 Auto(混合路由);第三方口径显示 GA 后可选 Claude Sonnet 4.5、Haiku 4.5、Opus 4.5、Opus 4.6 及 Amazon Nova 系列,具体清单随时间变动,。

1.3. 定价体系

以下为 2025-09-15 起的 Credits 计费体系(官方口径经第三方转述,;以 kiro.dev/pricing 实时页面为准):

档位价格Credits 额度
Free$050 Credits / 月
Pro$20 / 月1,000 Credits / 月
Pro+$40 / 月2,000 Credits / 月
Power$200 / 月10,000 Credits / 月
超额$0.04 / Credit按 0.01 增量分数计费

要点:

  • 新注册账户不论档位均获 500 赠送 Credits(30 天有效,第三方口径)。
  • Credits 按任务复杂度分数计扣,不同模型有不同系数(如 Claude Opus 4.5 为 2.2x)。
  • Auto 路由:默认智能体在多个前沿与专用模型间按意图路由,官方称比直连 Sonnet 4 约节省 23% 成本(第三方转述官方口径)。
  • GA 后团队计划经 AWS IAM Identity Center 管理,集中计费与成本控制(官方口径)。
  • 第三方另有 Pro Max($100 / 月,5,000 Credits)档位报道,与官方四档口径不一致,。

2. 名词解释

术语英文 / 缩写释义
规格驱动开发Spec-Driven Development先以结构化文档定义需求、设计与任务,再由智能体按规格实施的开发方法;Kiro 的默认工作流
规格目录Spec(.kiro/specs/存放单次功能的规格工件集合:requirements.md、design.md、tasks.md,可编辑、可版本控制
需求文档requirements.md规格工件之一:以 EARS 语法书写用户故事与验收标准,人工批准后进入下一阶段
EARS 语法Easy Approach to Requirements Syntax源自安全关键系统的需求书写格式,把模糊描述转为「系统应当 WHEN 条件 THEN 行为」式的可测试语句
设计文档design.md规格工件之二:基于已批准需求与既有代码库生成技术架构、数据模型、接口定义与序列图
任务文档tasks.md规格工件之三:把设计拆解为有序、可验证的实施任务清单,智能体逐项执行并可勾选状态
Vibe 编码Vibe Coding以自然语言对话直接生成代码、不沉淀结构化产物的开发方式;Kiro 官方将其定位为要被修正的对象
引导文件Steering(.kiro/steering/项目级持久上下文的 Markdown 文件:product.md / tech.md / structure.md 三份基础文件默认随每次交互注入,自定义文件支持四种注入模式
代理钩子Agent Hooks事件驱动的自动化:智能体改文件、调工具、提交提示等事件触发 shell 命令或注入智能体提示,配置为 .kiro/hooks/ 下的 JSON 文件
检查点CheckpointingGA 引入:可把一次智能体运行回退到此前任意步数的状态快照
属性测试Property-based TestingGA 引入:从规格需求中提取属性,自动生成大量随机测试用例验证实现是否符合规格
Kiro 能力包Kiro Powersre:Invent 2025 预览:把 MCP 配置、Steering 文件与规则打包为可分享的能力包,团队一键激活统一开发上下文
自定义智能体Custom Agents以 JSON 定义的专职智能体(模型、工具白名单、上下文资源、专属钩子),供特定工作流复用
Auto 路由Auto默认智能体,在多个前沿与专用模型间按意图与成本路由(官方称较直连 Sonnet 4 省约 23%)
Kiro CLIKiro CLIGA 引入的终端形态,携带 Plan 智能体、会话恢复、上下文管理与代码智能等能力
模型上下文协议Model Context Protocol(MCP)外部工具与数据源接入协议;Kiro 中 MCP 服务器可纳入 Powers 打包分发
AWS 身份集成IAM Identity CenterGA 团队计划的登录与权限载体,配合集中计费与成本控制

3. 功能说明

3.1. 规格驱动开发(Spec)

规格工作流是 Kiro 的主入口,三个阶段的门禁结构(每份文档须人工批准后才生成下一份):

阶段产物内容与角色
需求requirements.md用户故事 + EARS 语法验收标准;把「大概要个 Webhook 重试」变成可测试的规格语句;产品经理与领域专家可直接参与撰写与评审
设计design.md由已批准需求生成:组件图、数据模型、API 形态、接口定义;评审重点是架构一致性
任务tasks.md把设计拆成有序任务清单,任务间有依赖关系;独立任务可并行执行,每项完成可勾选

规格工件存放在 .kiro/specs/,随代码库版本控制;对话中以 #spec 类引用直接提及规格文件。官方对这套流程的价值主张是:显式记录决策与理由,使智能体在更少轮次内实现更复杂任务,且「代码与规格漂移」可被检测并标记(第三方口径)。

3.2. Steering 与 Hooks

Steering(持久上下文契约):三份基础文件构成项目基线,默认随每次交互注入——

文件内容防御的问题
product.md产品目的、目标用户、核心功能智能体不知道「为什么做」
tech.md技术栈、框架、开发工具与约束智能体引入栈外依赖
structure.md文件组织、命名、导入模式、架构决策智能体把文件放错位置

自定义 Steering 文件支持四种注入模式:always(每次注入)、fileMatch(命中文件模式时注入)、manual#文件名 手动引用)、auto(按描述自动匹配,与技能机制同类)。支持 #[[file:...]] 引用活动工作区文件以保持内容新鲜;兼容 AGENTS.md 标准(但 AGENTS.md 不支持注入模式、总是加载,且工作区子目录中的 AGENTS.md 也会被发现);全局作用域 ~/.kiro/steering/ 与工作区冲突时工作区优先。

Agent Hooks(事件驱动自动化):JSON 配置于 .kiro/hooks/,触发器共十类(官方文档):SessionStart / Stop / PreToolUse / PostToolUse / PostFileCreate / PostFileSave / PostFileDelete / PreTaskExec / PostTaskExec / UserPromptSubmit。动作分两类:shell 命令(在项目根执行,经 STDIN 接收会话上下文 JSON)与智能体提示(向当前对话注入指令)。要点:

  • 文件类触发器只响应智能体的改动(agent-created / agent-saved),人手动保存不触发——这是 2026 年中 IDE 1.0.116 的关键修正:智能体写的代码正是自动化要覆盖的主要对象。
  • 可阻断性被显式建模:PreToolUse、PreTaskExec、UserPromptSubmit 三个触发器可通过命令退出码 2 阻断执行(stderr 回传智能体),把「不许碰主数据文件」这类红线从提示约定升级为硬门禁。
  • 其余触发器不可阻断,输出以警告呈现,执行继续。
  • 命令动作默认超时 60 秒(可配置,0 为禁用);智能体动作忽略超时。

3.3. 多形态与团队能力

能力说明
Kiro IDECode OSS 桌面端,兼容 VS Code 设置、主题与 Open VSX 插件
Kiro CLI终端形态:/plan(Plan 智能体)、/chat(会话恢复)、/compact(历史压缩)、/context(上下文与 token 观测)、/agent(智能体管理)、/code(代码智能 / LSP)、/knowledge(实验性跨会话知识)、/todo(实验性任务清单)
Kiro Web云端会话与 Web 控制台(2026-09-01 起 GA,媒体口径);云端会话是 Web 与 Mobile 背后的执行环境——会话归属账户而非单一客户端,IDE 与 CLI 亦可创建并附着同一会话,各入口经由同一 harness 与协议通信, steering、权限与工具完全一致;自主模式下智能体先行提问澄清,答案充当会话引导;PR 评论反馈可沉淀为智能体长期学习(仅任务创建者的反馈生效)
多根工作区GA 引入,支持跨包 / 跨 git 子模块的仓库结构自定义智能体JSON 定义:模型、工具白名单、资源(如 steering 文件 glob)、专属钩子团队计划IAM Identity Center 登录、集中计费、成本控制图像输入UI 设计稿、架构白板照片作为实现引导

4. 平台架构

图 4-1|Kiro 平台架构:.kiro/ 声明式 Harness 与规格层的一等地位

Kiro 平台架构(.kiro/ 声明式 Harness) 信息截止 2026 · 示意:基于本文分析绘制 客户端层 · 多形态入口 Code OSS 桌面 IDE(Win / macOS / Linux)+ CLI + Web + Mobile 规格工作流 规格层 · .kiro/specs/ 仓库内工件(本图重点) requirements.md 批准 design.md 批准 tasks.md 三阶段门禁:每份文档 人工批准后才生成下一份 上下文注入 上下文层 · .kiro/steering/ 持久上下文 product.md / tech.md / structure.md 常驻注入 · 四档注入模式 · AGENTS.md 兼容 事件触发 自动化层 · .kiro/hooks/ 事件钩子 十类 JSON 触发器 · 命令 / 提示双动作 · PreToolUse / PreTaskExec / UserPromptSubmit 可阻断(exit 2) 模型调用 模型层 · Amazon Bedrock Claude 系(Sonnet 4 / 4.5、Opus 4.5 / 4.6)+ Nova 系列 · Auto 意图路由(官方称约省 23% 成本) 身份 / 计费 身份与治理 GitHub / Google / AWS Builder ID / IAM Identity Center 登录 · Kiro Powers(MCP + Steering + 规则打包分发) 结构解读:.kiro/(specs / steering / hooks / agents)构成仓库内声明式 Harness,规格层为一等公民。

数据来源:基于本文分析绘制的示意图。

维度内容
客户端Code OSS 桌面 IDE(Windows / macOS / Linux)+ CLI + Web + Mobile
模型层Amazon Bedrock 托管:Claude 系(Sonnet 4 / 4.5、Opus 4.5 / 4.6 等,第三方口径 )+ Amazon Nova 系列;Auto 在其间路由
规格层.kiro/specs/ 仓库内工件,三阶段门禁生成
上下文层.kiro/steering/(工作区)+ ~/.kiro/steering/(全局)+ AGENTS.md 兼容 + Web 端配置同步
自动化层.kiro/hooks/ JSON 触发器,命令 / 提示双动作,可阻断模型
能力分发Kiro Powers:MCP + Steering + 规则的打包机制
身份与治理GitHub / Google / AWS Builder ID / IAM Identity Center 登录;团队计划集中计费
登录要求不强制 AWS 账户;企业团队计划经 IAM Identity Center

架构的关键判断:Kiro 是把规格层作为一等公民放进 IDE 的少数产品。.kiro/ 目录(specs / steering / hooks / agents)实际上构成了一个仓库内的 Harness 声明体系:什么上下文常驻(steering)、什么流程要走(specs)、什么事件自动处理(hooks)、什么角色用什么工具(agents)——四件事全部落盘、可版本控制、可评审。


5. Harness 设计

5.1. L1 上下文工程层

Kiro 的 L1 是本组平台中时间轴最前置的实现:多数平台的 L1 是「请求时刻装配」——规则文件、检索结果、历史在每次请求时拼装;Kiro 把一半的装配工作前移到「编码之前」:

  1. 规格即上下文。requirements / design / tasks 三份工件由人工批准后成为实施依据。对比 Cursor 的 Auto Attached 规则(命中文件时注入约定),规格注入的不是「约定」而是「本任务的目标与边界」——上下文从描述代码现状升级为描述代码将要成为什么。这是把 L1 从「检索已有信息」扩展为「构造尚不存在的信息」。
  2. Steering 的四档注入模式与 Cursor 的四类规则(Always / Auto Attached / Agent Requested / Manual,详见 01-cursor.md)几乎一一对应(always / fileMatch / auto / manual),但多了一个语义层级:product / tech / structure 三份基础文件按「为什么做、用什么做、放哪里做」分工,而非一份大杂烩规则文件。官方最佳实践同时给出红线:Steering 文件不得包含密钥与敏感数据。
  3. AGENTS.md 兼容与文件引用。开放标准兼容(AGENTS.md 全工作区发现)+ #[[file:]] 活文件引用,缓解规则文件与代码漂移。
  4. 已知弱点:规格质量依赖人的评审纪律——门禁挡住的是「未经批准的模糊需求」,挡不住「批准了的错误设计」。规格流把一部分缺陷成本从写码阶段移到评审阶段,团队若缺乏评审能力,收益随之流失。

5.2. L2 工具与执行层

  • 内置工具链(官方 CLI 资料口径):read / write、glob(尊重 .gitignore)、grep、shell、AWS CLI 调用(use_aws)、web_search / web_fetch、code(符号级 LSP 代码智能)等。
  • PreToolUse 可阻断钩子是 L2 与 L6 的连接点:工具执行前先过钩子门禁,exit 2 即拦截——命令白名单从「提示词约定」变成「程序化强制」。
  • MCP 支持(stdio 等),工具可纳入 Powers 分发;CLI 侧有 tool_search 按需加载 MCP 工具,缓解工具定义挤占上下文。
  • 无公开的操作系统级沙箱披露(对比 Codex CLI 的 Seatbelt / Landlock,详见 05-codex-cli.md),[待填写];云端 Web 会话天然与本地环境隔离。

5.3. L3 编排与控制层

  1. 规格即计划。tasks.md 是显式的、人工批准过的计划——多数平台的 Plan Mode 产出一次性计划文本,Kiro 的计划是持久工件,跨会话有效、可勾选推进、可评审。「计划」从对话状态升级为版本化文件,是 L3 与 L4 的交汇。
  2. 任务级钩子:PreTaskExec / PostTaskExec 把规格任务的开始与结束接入自动化(任务开始前拉起环境、结束后跑验证),编排粒度细化到任务清单条目。
  3. 门禁式自主:autopilot 类模式下智能体可自主执行大任务,但 PreToolUse / PreTaskExec / UserPromptSubmit 三个阻断点保留了硬闸门;独立任务并行执行。
  4. 多形态同构:IDE / CLI / Web 共享规格与 Steering 体系,Web 端自主模式以「先提问后实施」承接澄清环节。
  5. 已知弱点:编排语法的表达力(重试、超时、失败分支)未见公开文档,[待填写];跨仓库协同目前停留在预览阶段(第三方口径)。

5.4. L4 记忆与状态层

机制作用持久化范围
规格工件功能级目标与决策记录,跨会话有效仓库内,团队共享
Steering 文件项目级长期约定,跨会话、跨任务仓库内 / 全局
Checkpointing智能体运行内任意步数回退(GA 引入)会话内
/chat 会话恢复CLI 侧加载历史会话本地
/knowledge(CLI 实验性)跨会话信息存取本地(实验性)
PR 评论学习(Web)任务创建者的评审反馈沉淀为智能体长期行为云端(官方口径)

Kiro 的记忆哲学与 Claude Code 的 auto memory 相反:不自动沉淀会话记忆,而把该记住的显式写进规格与 Steering。这对「记忆的可信度」是优势(全部记忆可评审、可版本控制),对「记忆的完整性」是劣势(依赖人写)。PR 评论学习是介于两者之间的尝试——反馈自动沉淀,但作用域限定为任务创建者,避免多人反馈互相污染。

5.5. 评估与观测层

Kiro 的 L5 有两个机制值得单列:

  1. 属性测试(GA):从 requirements.md 的 EARS 语句提取属性,生成成百上千随机用例验证实现——这是规格与代码之间程序化的一致性检查,等价于把「验收标准」变成可执行断言。它是全组平台中最接近「规格级回归集」的机制:改动后重跑属性测试,即可机械判定实现是否仍符合规格。
  2. 单测 / lint 型钩子 + /context 观测:PostFileSave 挂 lint、Stop 挂测试,构成持续质量网;/context 显示 token 用量与上下文文件,/compact 手动压缩历史。

局限:无公开的轨迹追踪与线上质量指标,[待填写];属性测试依赖规格本身正确——规格错,测试「正确地」验证了错误的需求。

5.6. 治理与安全层

治理维度实现
身份GitHub / Google / AWS Builder ID / IAM Identity Center 四路登录
团队治理IAM Identity Center 统一身份 + 集中计费 + 成本控制(GA 团队计划)
执行门禁PreToolUse / PreTaskExec / UserPromptSubmit 可阻断钩子(exit 2),红线程序化强制
自动化边界PostFileSave 等事件仅响应智能体改动,人类操作不进自动化面
能力包管控Kiro Powers 的内容(MCP / Steering / 规则)随仓库评审后分发
数据面Web 云端会话与本地隔离;全局 Steering 本地目录云端不可读(官方文档明确),需经配置同步显式上传
合规AWS 生态合规基线可承接( Bedrock 治理体系);Kiro 自身认证清单未检索到公开材料,[待填写]

对照组内定位:Kiro 的 L6 强度居中偏上——有程序化门禁与身份集成,但不如 GitHub Copilot 的内容排除与 IP 赔付闭环、不如 Cursor 的 MDM 级钩子下发。它的特殊优势是规格审计链:requirements → design → tasks → 提交的完整链条天然构成「AI 为什么写了这段代码」的追溯材料,这对受监管行业的 AI 产出归因是别的平台要靠外挂才能补齐的。

5.7. 规格流对 AI Harness 的结构性意义

把 Kiro 放回本组 README 的六层框架,它的启示是:AI IDE 的流派差异本质上是各层职责的重新划分,而不是功能清单的差异。

维度Agent 流(Cursor / Cline / Roo)规格流(Kiro)
L1 上下文运行时装配:规则 + 检索 + 历史前移:规格工件 + Steering 先于代码存在
L3 编排模型内隐式规划(Plan Mode 是对话状态)外化:tasks.md 是持久、可评审、可勾选的计划
L5 评估测试与 CI(团队自建或事后补)前移:验收标准在写码前已成 EARS 断言
L6 治理审批、沙箱、审计(约束执行)门禁前移到需求与设计阶段(约束意图)
失效模式长任务漂移、上下文腐烂规格错误被忠实地、大规模地实现
适合迭代快、规格在过程中涌现的工作需求可预先写清、需追溯与协作评审的工作

一句话:Agent 流把不确定性交给运行时的护栏,规格流把不确定性移交给事前的人工评审。两者不互斥——Kiro 自身也保留 vibe 式快捷路径,Roo Code 也能用 Markdown 自建规格目录;选择的核心变量是「需求在动工前能否写清楚」与「评审带宽是否充裕」。

5.8. 六层能力小结

评级一句话判断
L1 上下文工程★★★规格工件 + 四档 Steering 注入,把上下文构造前移到编码之前
L2 工具与执行★★★工具链完整 + 可阻断 PreToolUse 门禁;本地沙箱未披露
L3 编排与控制★★★计划外化为持久任务清单 + 任务级钩子,编排粒度全组最细
L4 记忆与状态★★显式记忆(规格 / Steering)+ 检查点;无自动记忆
L5 评估与观测★★★属性测试把验收标准变断言,最接近规格级回归集
L6 治理与安全★★★程序化门禁 + IAM 身份体系 + 规格审计链

6. 实际案例

说明:本节如实说明数据可得性。未检索到 AWS 官方发布的、带对照测量的外部客户量化案例,未采用任何未核实数字。

可引用信息分三类:

  1. 内部采用信号:第三方口径称 AWS 报告发布后数月内有约 1,500 名 AWS 工程师活跃使用 Kiro,且 AWS 宣布将内部开发者标准化到 Kiro 上。内部规模化采用是比外部证言更强的信号,但仍非客户案例。
  2. 产品侧事实:GA(2025-11-17)与 re:Invent 2025 的能力扩展节奏、Amazon Q Developer 迁移指引,表明 AWS 把 Kiro 定位为编码工具线的下一代载体(第三方口径的终止日期 )。
  3. 可复现的 Harness 工作流范式(基于官方文档描述,非量化案例):
  • 受监管行业需求追溯:金融 / 医疗团队以 requirements.md 的 EARS 语句作为验收基线,属性测试 + 任务级钩子构成「规格 → 断言 → 门禁」链路,审计材料随仓库留存。
  • 绿色田野项目文档化:新项目团队把本应写进 Confluence 的需求与设计写进 .kiro/specs/,文档即实施依据,避免「文档与代码两张皮」。
  • 团队能力包分发:以 Kiro Powers 打包 MCP 配置 + Steering + 规则,新成员一键激活与团队一致的开发上下文。
  • 任务级自动化:PreTaskExec 拉起环境、PostTaskExec 跑验证,任务清单的每格勾选都伴随机械校验。

7. 总结

7.1. 优势

  1. 规格流的结构性前移:把 L1(上下文)、L3(计划)、L5(验收)从运行时移到事前,是对 Harness 六层职责的重新划分,而非功能堆叠。
  2. EARS + 属性测试:验收标准写成可测试语句、再程序化验证,是全组最完整的「规格级回归」机制。
  3. 可阻断钩子 + 任务级触发:红线从提示约定升级为 exit 2 硬门禁,自动化粒度细到规格任务。
  4. .kiro/ 目录即声明式 Harness:specs / steering / hooks / agents 全部落盘、可版本控制、可评审、可经 Powers 分发。
  5. 多形态与身份集成:IDE / CLI / Web / Mobile 同构,IAM Identity Center 承接企业身份与计费。

7.2. 局限

  1. 评审带宽成为新瓶颈:三阶段门禁把缺陷成本前移,也把人力瓶颈前移;规格质量决定收益上限。
  2. 不适配涌现式需求:探索性、快速试错的工作被门禁流程拖慢——Kiro 自己也要靠 vibe 路径兜底。
  3. 本地沙箱与编排语义未披露:L2 隔离原语与 L3 失败处理细节缺公开文档,[待填写]
  4. 生态锁定:模型经 Bedrock、治理接 IAM,AWS 生态外团队需评估绑定深度。
  5. 定价与档位口径存在冲突:第三方 Pro Max 报道与官方四档不一致,各档明细 。

7.3. 适用边界与选型建议

场景是否适用理由
需求可预先写清的团队项目强适用规格门禁 + 追溯链正是为此设计
受监管行业(需需求追溯与归因)适用规格审计链 + EARS 断言
AWS 生态团队适用Bedrock / IAM / Q Developer 迁移承接
探索性原型、需求混沌部分适用vibe 路径可用,但相对 Cursor / Cline 无优势且流程更重
个人快速脚本不适用门禁流程收益为负,选补全流或终端流

选型建议:在本组主线「补全流 → Agent 流 → 规格流 → 终端流」中,规格流回答的是另外三条流没有回答的问题——需求从哪里来、谁批准、以什么为准。判断标准:团队若已有明确的需求评审文化(或希望借工具建立),Kiro 是最完整的承载;若需求在编码中才涌现,规格流是负担,应回到 Agent 流(Cursor / Roo Code,详见 01 / 10 篇)。混合策略同样成立:复杂功能走规格门禁、小改动走快捷路径,这正是 Kiro 自身的产品形态。


信息缺口声明

  1. 公测确切日期:官方博客与第三方报道在 07-14 / 07-15 间不一致,。
  2. 当期版本号:未获官方发布页一手披露,[待填写]
  3. 定价明细:Credits 体系来自官方口径的第三方转述;Pro Max 档位与赠送 Credits 规则存在来源冲突,。
  4. Auto 路由的省钱幅度(约 23%):官方口径经第三方转述,。
  5. 模型可用清单:随时间变动且多来源不一致,。
  6. 本地沙箱机制:未检索到公开披露,[待填写]
  7. 规格与代码漂移检测的实现:官方宣称能力,实现细节未见文档,。
  8. 合规认证清单(SOC 2 / ISO 等):未检索到公开材料,[待填写]
  9. 客户量化案例:未检索到官方一手对照数据;1,500 名内部工程师口径为第三方转述,。
    1. Kiro Web GA 的确切日期:官方 FAQ 确认可用性与计费口径但未标注日期,媒体口径为 2026-09-01,[待核实]

8. 参考资料

  1. Kiro 官方网站 — AWS,2026。https://kiro.dev/
  2. Kiro 官方文档 · Steering — AWS,2026。https://kiro.dev/docs/steering/
  3. Kiro 官方文档 · Hooks — AWS,2026。https://kiro.dev/docs/hooks/
  4. Kiro 官方文档 · Hooks(跨形态版) — AWS,2026。https://docs.kiro.dev/hooks
  5. Introducing Kiro — AWS 官方博客,2025-07。https://kiro.dev/blog/introducing-kiro/
  6. Kiro is generally available — AWS 官方博客,2025-11-17。https://kiro.dev/blog/general-availability/
  7. Spec-driven development 词条 — AI Wiki(第三方),2026。https://aiwiki.ai/wiki/spec_driven_development
  8. Beyond Vibe Coding: Amazon Introduces Kiro — InfoQ(第三方),2025-08。https://www.infoq.com/news/2025/08/aws-kiro-spec-driven-agent/
  9. AWS launches Kiro — SiliconANGLE(第三方),2025-07-14。https://siliconangle.com/2025/07/14/aws-launches-kiro-spec-coding-developer-environment-integrated-ai-agents/
  10. Introducing the Model Context Protocol — Anthropic,2024-11-25。https://www.anthropic.com/news/model-context-protocol
  11. Terminal-Bench 官方站(模型 + Harness 系统评测口径) — Stanford / Laude Institute,2025—2026。https://www.tbench.ai/
  12. 2025 Stack Overflow Developer Survey — Stack Overflow,2025-07-30。https://survey.stackoverflow.co/2025/
  13. 增量动态(2026-09-12):AWS 于 2026-09 上旬推出 Kiro Web 版(浏览器端入口,GA 口径 [待核实]),Kiro 从桌面 IDE 扩展为 Web 端可用的规格驱动开发平台;与本篇 1.1 节桌面版形态互补,不改变其“规格先行”的 Harness 设计主线。

Kiro (AI IDE Platform Market Research)

1. Introduction

Kiro is an agentic IDE released by AWS in July 2025, built on Code OSS and connected to models via Amazon Bedrock. Its launch slogan is “from vibe coding to viable code” — in response to the industry’s widespread dissatisfaction with the pattern of “casually chatting in natural language and generating code,” Kiro bets on a structural claim: write the spec first, then write the code. After a developer describes a feature, Kiro generates three editable, version-controllable spec documents (requirements.md, design.md, tasks.md); only after a human approves each one in turn does the agent carry out the work according to the task list. The spec is no longer a conversation buried in a chat log, but an explicit artifact inside the repository.

In the genealogy of AI IDE’s three schools — the completion flow (Copilot / Tongyi Lingma), the agent flow (Cursor / Cline / Roo Code), and the spec flow — Kiro is the sole representative of the spec flow backed by a hyperscale cloud vendor. This group of documents treats it as the differentiating thread: spec-driven development moves Harness’s L1 context engineering from “implicitly assembling prompts at runtime” forward to “explicit artifacts up front,” and externalizes L3 orchestration from “implicit planning within the model” into a “task list + gates.” On the six-layer model this is a genuine architectural shift forward, not merely an added feature.

1.1. Developer and Product History

ItemDetailsSource
DeveloperAWS (Amazon Web Services)Official website
Public preview2025-07-14 / 07-15 (announced during AWS Summit New York; the official blog and third-party reports differ by one day)Official blog / third party
Pricing changeOn 2025-09-15, preview pricing switched to a Credits-based systemOfficial announcement (relayed by third parties)
General availability (GA)2025-11-17; around the same time, extended capabilities such as Kiro Powers were announced at AWS re:Invent 2025Official blog / third party
Later milestones2025-11-24 Claude Opus 4.5 went live (2.2x Credit multiplier); preview of autonomous agents (cross-session memory, multi-repository collaboration)Third-party account
Form factor expansionKiro IDE (Code OSS desktop), Kiro CLI, Kiro Web (cloud sessions), Kiro Mobile (mobile, disclosed in the official capability matrix)Official documentation
PredecessorThe Amazon Q Developer IDE plugin ecosystem was officially steered toward migrating to Kiro (third parties say Q Developer ends support on 2027-04-30)Third-party account
Kiro Web GA2026-09-01 (per media reports); the official FAQ confirms Kiro Web is generally available, included in the Pro / Pro+ / Pro Max / Power paid plans, with cloud compute not billed separatelyOfficial FAQ (A-grade) / third party (B-grade; date basis [To be verified])
Education promotionFrom early-to-mid 2026-09, one year of free Kiro for students at 132 universities in 18 countries (1,000 credits per month, expanded 12-fold from the 2026-03 pilot)AWS official news (A-grade; exact announcement date [To be verified])

Note on sources (v1.1 addition): There is a conflicting account of the relationship between Kiro and Amazon Q Developer — harnesses.sh (2026 account) says Kiro was released internationally on 2026-05-07 as the “successor to Amazon Q Developer,” while multiple third-party reviews from 2026-06/07 still list Q Developer as an independent, active product (Pro $19/seat/month). Whether the two form an official successor relationship is [To be verified], subject to the official AWS announcement; if the successor relationship is confirmed, Q Developer no longer merits its own standalone article, and this article’s history prevails.

1.2. Positioning and Latest Version

Kiro’s positioning is a spec-driven agentic IDE aimed at “prototype to production.” Unlike Cursor, which emphasizes the editor experience, and Claude Code, which emphasizes terminal autonomy, Kiro productizes the “intermediate artifacts of the development process”: requirements documents, design documents, and task lists — things that traditionally lived in Confluence and meeting minutes — are pulled into the repository, becoming both the agent’s implementation basis and the team’s review targets.

The current version number has not been disclosed first-hand on the official release page; recorded as [To be filled]. On the model side, the official account is that Bedrock provides frontier models such as Claude Sonnet 4 and Auto (hybrid routing); third-party accounts indicate that after GA, optional models include Claude Sonnet 4.5, Haiku 4.5, Opus 4.5, Opus 4.6, and the Amazon Nova family, with the exact list changing over time.

1.3. Pricing System

The following is the Credits billing system in effect since 2025-09-15 (official account relayed by third parties; the live kiro.dev/pricing page takes precedence):

TierPriceCredits allowance
Free$050 Credits / month
Pro$20 / month1,000 Credits / month
Pro+$40 / month2,000 Credits / month
Power$200 / month10,000 Credits / month
Overages$0.04 / CreditBilled in 0.01 unit increments

Key points:

  • New registered accounts receive 500 bonus Credits regardless of tier (valid for 30 days, third-party account).
  • Credits are deducted by task-complexity score, and different models have different multipliers (e.g., Claude Opus 4.5 is 2.2x).
  • Auto routing: by default the agent routes between multiple frontier and specialized models by intent; AWS official says this saves about 23% in cost versus direct Sonnet 4 (official account relayed by third parties).
  • After GA, team plans are managed via AWS IAM Identity Center, with centralized billing and cost control (official account).
  • Third parties also report a Pro Max tier ($100 / month, 5,000 Credits) that is inconsistent with the official four-tier account.

2. Glossary

TermEnglish / abbreviationDefinition
Spec-driven developmentSpec-Driven DevelopmentA development method that first defines requirements, design, and tasks with structured documents, then has the agent implement according to the spec; Kiro’s default workflow
Spec directorySpec (.kiro/specs/)Holds the set of spec artifacts for a single feature: requirements.md, design.md, tasks.md; editable and version-controllable
Requirements documentrequirements.mdOne of the spec artifacts: user stories and acceptance criteria written in EARS syntax; after human approval it moves to the next stage
EARS syntaxEasy Approach to Requirements SyntaxA requirements-writing format originating from safety-critical systems that turns vague descriptions into testable “shall … WHEN … THEN …” statements
Design documentdesign.mdThe second spec artifact: generates the technical architecture, data model, interface definitions, and sequence diagrams based on the approved requirements and the existing codebase
Task documenttasks.mdThe third spec artifact: breaks the design into an ordered, verifiable implementation task list that the agent executes item by item and can check off
Vibe codingVibe CodingA development style that generates code directly through natural-language conversation without producing structured artifacts; Kiro officially positions it as something to be corrected
Steering fileSteering (.kiro/steering/)Markdown files for project-level persistent context: the three base files product.md / tech.md / structure.md are injected by default with every interaction, and custom files support four injection modes
Agent HooksAgent HooksEvent-driven automation: events such as the agent modifying files, calling tools, and submitting prompts trigger shell commands or inject agent prompts, configured as JSON files under .kiro/hooks/
CheckpointingCheckpointingIntroduced at GA: roll an agent run back to a state snapshot at any earlier step
Property-based testingProperty-based TestingIntroduced at GA: extracts properties from the spec requirements and automatically generates many random test cases to verify whether the implementation meets the spec
Kiro capability packKiro PowersPreviewed at re:Invent 2025: packages MCP configuration, Steering files, and rules into shareable capability packs so teams can activate a unified development context with one click
Custom agentsCustom AgentsSpecialized agents defined in JSON (model, tool whitelist, context resources, dedicated hooks) for reuse across specific workflows
Auto routingAutoThe default agent that routes between multiple frontier and specialized models by intent and cost (AWS officially claims about 23% savings versus direct Sonnet 4)
Kiro CLIKiro CLIThe terminal form factor introduced at GA, carrying capabilities such as the Plan agent, session resume, context management, and code intelligence
Model Context ProtocolModel Context Protocol (MCP)The protocol for connecting external tools and data sources; in Kiro, MCP servers can be bundled into Powers for distribution
AWS identity integrationIAM Identity CenterThe login and permissions carrier for the GA team plan, paired with centralized billing and cost control

3. Feature Overview

3.1. Spec-Driven Development

The spec workflow is Kiro’s main entry point, with a three-stage gate structure (each document must be approved by a human before the next one is generated):

StageArtifactContent and role
Requirementsrequirements.mdUser stories + EARS-syntax acceptance criteria; turns “roughly want a Webhook retry” into testable spec statements; product managers and domain experts can directly participate in writing and review
Designdesign.mdGenerated from the approved requirements: component diagrams, data models, API shape, interface definitions; the review focus is architectural consistency
Taskstasks.mdBreaks the design into an ordered task list with dependencies between tasks; independent tasks can run in parallel, and each item can be checked off when complete

Spec artifacts are stored in .kiro/specs/ and versioned with the codebase; in conversation, spec files are referenced directly via #spec-style references. AWS’s value proposition for this workflow is: explicitly recording decisions and rationale lets the agent implement more complex tasks in fewer turns, and “code–spec drift” can be detected and flagged (third-party account).

3.2. Steering and Hooks

Steering (the persistent context contract): the three base files form the project baseline and are injected by default with every interaction —

FileContentProblem defended against
product.mdProduct purpose, target users, core featuresThe agent not knowing “why it is being built”
tech.mdTech stack, frameworks, dev tools, and constraintsThe agent introducing out-of-stack dependencies
structure.mdFile organization, naming, import patterns, architecture decisionsThe agent placing files in the wrong locations

Custom Steering files support four injection modes: always (inject every time), fileMatch (inject when a file pattern matches), manual (#filename manual reference), and auto (automatic matching by description, in the same vein as the skills mechanism). It supports #[[file:...]] references to active workspace files to keep content fresh; it is compatible with the AGENTS.md standard (though AGENTS.md does not support injection modes, is always loaded, and AGENTS.md files in workspace subdirectories are also discovered); when the global scope ~/.kiro/steering/ conflicts with the workspace, the workspace takes precedence.

Agent Hooks (event-driven automation): configured as JSON under .kiro/hooks/, with ten trigger types in total (official documentation): SessionStart / Stop / PreToolUse / PostToolUse / PostFileCreate / PostFileSave / PostFileDelete / PreTaskExec / PostTaskExec / UserPromptSubmit. Actions fall into two categories: shell commands (executed at the project root, receiving the session-context JSON via STDIN) and agent prompts (injecting instructions into the current conversation). Key points:

  • File-based triggers only respond to the agent’s own changes (agent-created / agent-saved); manual saves by a human do not trigger them — this is a key fix in the mid-2026 IDE 1.0.116: the code the agent writes is exactly the primary target the automation is meant to cover.
  • Blockability is explicitly modeled: the three triggers PreToolUse, PreTaskExec, and UserPromptSubmit can block execution via exit code 2 (stderr relayed back to the agent), upgrading red lines such as “don’t touch the primary data files” from a prompt convention to a hard gate.
  • The remaining triggers are non-blocking; their output is presented as a warning and execution continues.
  • Command actions time out after 60 seconds by default (configurable; 0 disables); agent actions ignore the timeout.

3.3. Multi-Form Factor and Team Capabilities

CapabilityDescription
Kiro IDECode OSS desktop client, compatible with VS Code settings, themes, and Open VSX plugins
Kiro CLITerminal form: /plan (Plan agent), /chat (session resume), /compact (history compression), /context (context and token observation), /agent (agent management), /code (code intelligence / LSP), /knowledge (experimental cross-session knowledge), /todo (experimental task list)
Kiro WebCloud sessions and a Web console (GA since 2026-09-01, per media reports); cloud sessions are the execution environment behind Web and Mobile — sessions belong to the account rather than a single client, and the IDE and CLI can also create and attach to the same session, with every entry point communicating through the same harness and protocol, and steering, permissions, and tools fully consistent; in autonomous mode the agent asks clarifying questions first, with the answers serving as session guidance; PR comment feedback can be distilled into the agent’s long-term learning (only the task creator’s feedback takes effect)
Multi-root workspaceIntroduced at GA; supports repository structures spanning packages / git submodules
Custom agentsDefined in JSON: model, tool whitelist, resources (e.g., Steering file globs), dedicated hooks
Team planIAM Identity Center login, centralized billing, cost control
Image inputUI mockups and architecture-whiteboard photos serve as implementation guidance

4. Platform Architecture

图 4-1|Kiro 平台架构:.kiro/ 声明式 Harness 与规格层的一等地位

Kiro 平台架构(.kiro/ 声明式 Harness) 信息截止 2026 · 示意:基于本文分析绘制 客户端层 · 多形态入口 Code OSS 桌面 IDE(Win / macOS / Linux)+ CLI + Web + Mobile 规格工作流 规格层 · .kiro/specs/ 仓库内工件(本图重点) requirements.md 批准 design.md 批准 tasks.md 三阶段门禁:每份文档 人工批准后才生成下一份 上下文注入 上下文层 · .kiro/steering/ 持久上下文 product.md / tech.md / structure.md 常驻注入 · 四档注入模式 · AGENTS.md 兼容 事件触发 自动化层 · .kiro/hooks/ 事件钩子 十类 JSON 触发器 · 命令 / 提示双动作 · PreToolUse / PreTaskExec / UserPromptSubmit 可阻断(exit 2) 模型调用 模型层 · Amazon Bedrock Claude 系(Sonnet 4 / 4.5、Opus 4.5 / 4.6)+ Nova 系列 · Auto 意图路由(官方称约省 23% 成本) 身份 / 计费 身份与治理 GitHub / Google / AWS Builder ID / IAM Identity Center 登录 · Kiro Powers(MCP + Steering + 规则打包分发) 结构解读:.kiro/(specs / steering / hooks / agents)构成仓库内声明式 Harness,规格层为一等公民。

数据来源:基于本文分析绘制的示意图。

DimensionContent
ClientCode OSS desktop IDE (Windows / macOS / Linux) + CLI + Web + Mobile
Model layerHosted via Amazon Bedrock: the Claude family (Sonnet 4 / 4.5, Opus 4.5 / 4.6, etc., third-party account) + the Amazon Nova family; Auto routes among them
Spec layer.kiro/specs/ in-repository artifacts, generated by the three-stage gate
Context layer.kiro/steering/ (workspace) + ~/.kiro/steering/ (global) + AGENTS.md compatibility + Web-side config sync
Automation layer.kiro/hooks/ JSON triggers, with both command and prompt actions, and blockable model
Capability distributionKiro Powers: a packaging mechanism for MCP + Steering + rules
Identity and governanceGitHub / Google / AWS Builder ID / IAM Identity Center login; centralized billing for team plans
Login requirementsAWS account not mandatory; enterprise team plans go through IAM Identity Center

The key architectural judgment: Kiro is one of the few products that makes the spec layer a first-class citizen inside an IDE. The .kiro/ directory (specs / steering / hooks / agents) effectively constitutes a Harness declaration system inside the repository: what context is resident (steering), what processes must be followed (specs), what events are handled automatically (hooks), and what tools each role uses (agents) — all four things are persisted to disk, version-controllable, and reviewable.


5. Harness Design

5.1. L1 Context Engineering Layer

Kiro’s L1 is the most forward-positioned on the timeline among the platforms in this group: most platforms’ L1 is “assembly at request time” — rule files, retrieval results, and history are stitched together on each request; Kiro moves half of that assembly work ahead to “before coding”:

  1. The spec is the context. The three artifacts requirements / design / tasks become the implementation basis after human approval. In contrast to Cursor’s Auto Attached rules (which inject conventions when files are matched), the spec injects not “conventions” but “the goals and boundaries of this task” — the context upgrades from describing what the code currently is to describing what the code is to become. This expands L1 from “retrieving existing information” to “constructing information that does not yet exist.”
  2. Steering’s four injection modes map almost one-to-one to Cursor’s four rule types (Always / Auto Attached / Agent Requested / Manual, see 01-cursor.md) as always / fileMatch / auto / manual, but add one more semantic layer: the three base files product / tech / structure are divided by “why to build it, what to build it with, and where to put it,” rather than being a single catch-all rules file. The official best practices also give a red line: Steering files must not contain secrets or sensitive data.
  3. AGENTS.md compatibility and file references. Open-standard compatibility (workspace-wide AGENTS.md discovery) + #[[file:]] live file references mitigate drift between rule files and code.
  4. Known weakness: spec quality depends on human review discipline — the gate blocks “unapproved, vague requirements,” but it cannot block “approved, wrong designs.” The spec flow moves part of the defect cost from the coding stage to the review stage; if a team lacks review capability, the benefit is accordingly lost.

5.2. L2 Tools and Execution Layer

  • Built-in toolchain (official CLI material): read / write, glob (respects .gitignore), grep, shell, AWS CLI calls (use_aws), web_search / web_fetch, code (symbol-level LSP code intelligence), and more.
  • The blockable PreToolUse hook is the connection point between L2 and L6: tools pass through the hook gate before execution, and exit 2 intercepts them — the command whitelist goes from “a prompt convention” to “programmatic enforcement.”
  • MCP support (stdio, etc.); tools can be bundled into Powers for distribution; on the CLI side there is tool_search for on-demand loading of MCP tools, mitigating tool definitions crowding the context.
  • No public OS-level sandbox disclosure (in contrast to Codex CLI’s Seatbelt / Landlock, see 05-codex-cli.md), [To be filled]; cloud Web sessions are naturally isolated from the local environment.

5.3. L3 Orchestration and Control Layer

  1. The spec is the plan. tasks.md is an explicit, human-approved plan — while most platforms’ Plan Mode produces a one-off plan text, Kiro’s plan is a persistent artifact that is valid across sessions, can be advanced by checking items off, and can be reviewed. Upgrading “the plan” from conversation state to a versioned file is the meeting point of L3 and L4.
  2. Task-level hooks: PreTaskExec / PostTaskExec wire the start and end of spec tasks into automation (spinning up the environment before a task starts, running verification after it ends), with orchestration granularity down to task-list entries.
  3. Gated autonomy: in autopilot-style modes the agent can autonomously execute large tasks, but the three blocking points PreToolUse / PreTaskExec / UserPromptSubmit retain hard gates; independent tasks execute in parallel.
  4. Multi-form-factor isomorphism: IDE / CLI / Web share the same spec and Steering system, and the Web autonomous mode takes on the clarification stage by “asking first, implementing second.”
  5. Known weakness: the expressive power of the orchestration syntax (retries, timeouts, failure branches) has no public documentation, [To be filled]; cross-repository collaboration remains at the preview stage (third-party account).

5.4. L4 Memory and State Layer

MechanismRolePersistence scope
Spec artifactsFeature-level goals and decision record, valid across sessionsIn repository, shared by the team
Steering filesProject-level long-term conventions, across sessions and tasksIn repository / global
CheckpointingRoll back any number of steps within an agent run (introduced at GA)Within session
/chat session resumeLoads historical sessions on the CLI sideLocal
/knowledge (CLI experimental)Cross-session information storage and retrievalLocal (experimental)
PR-comment learning (Web)Distills the task creator’s review feedback into the agent’s long-term behaviorCloud (official account)

Kiro’s memory philosophy is the opposite of Claude Code’s auto memory: it does not automatically persist session memory, but instead explicitly writes what should be remembered into specs and Steering. This is an advantage for “memory trustworthiness” (all memory is reviewable and version-controllable) and a disadvantage for “memory completeness” (it depends on humans writing it down). PR-comment learning is an attempt that sits between the two — feedback is distilled automatically, but scoped to the task creator to keep multiple people’s feedback from polluting each other.

5.5. Evaluation and Observability Layer

Two mechanisms in Kiro’s L5 are worth listing separately:

  1. Property-based testing (GA): extracts properties from the EARS statements in requirements.md and generates hundreds or thousands of random cases to verify the implementation — this is a programmatic consistency check between the spec and the code, equivalent to turning “acceptance criteria” into executable assertions. It is the mechanism closest to a “spec-level regression suite” across all platforms in this group: after a change, rerunning the property tests lets you mechanically decide whether the implementation still conforms to the spec.
  2. Unit-test / lint-style hooks + /context observation: PostFileSave attaches lint, Stop attaches tests, forming a continuous quality net; /context shows token usage and context files, and /compact manually compresses history.

Limitations: there is no public trace tracking or online quality metrics, [To be filled]; property-based testing depends on the spec itself being correct — if the spec is wrong, the tests “correctly” verify the wrong requirements.

5.6. Governance and Security Layer

Governance dimensionImplementation
IdentityGitHub / Google / AWS Builder ID / IAM Identity Center, four login paths
Team governanceIAM Identity Center unified identity + centralized billing + cost control (GA team plan)
Execution gatesBlockable hooks (exit 2) on PreToolUse / PreTaskExec / UserPromptSubmit, with red lines enforced programmatically
Automation boundaryEvents such as PostFileSave only respond to the agent’s changes; human operations are outside the automation surface
Capability-pack governanceKiro Powers content (MCP / Steering / rules) is distributed only after review with the repository
Data planeWeb cloud sessions are isolated from the local environment; the global Steering local directory is not readable by the cloud (explicit in official docs) and must be explicitly uploaded via config sync
ComplianceCan inherit the AWS compliance baseline (Bedrock governance system); no public material was found for Kiro’s own certification list, [To be filled]

Position within the group: Kiro’s L6 strength is moderately strong — it has programmatic gates and identity integration, but not the content-exclusion and IP-indemnity loop of GitHub Copilot, nor Cursor’s MDM-level hook distribution. Its special advantage is the spec audit chain: the complete chain of requirements → design → tasks → commit naturally constitutes the traceability material for “why the AI wrote this code,” which for AI-output attribution in regulated industries is something other platforms must add on externally.

5.7. Structural Significance of the Spec Flow for AI Harness

Placing Kiro back into this group’s README six-layer framework, its insight is: the differences between AI IDE schools are essentially a redivision of each layer’s responsibilities, not differences in the feature list.

DimensionAgent flow (Cursor / Cline / Roo)Spec flow (Kiro)
L1 contextAssembled at runtime: rules + retrieval + historyShifted forward: spec artifacts + Steering exist before the code
L3 orchestrationImplicit planning within the model (Plan Mode is conversation state)Externalized: tasks.md is a persistent, reviewable, checkable plan
L5 evaluationTesting and CI (team-built or retrofitted)Shifted forward: acceptance criteria already become EARS assertions before coding
L6 governanceApproval, sandbox, audit (constraint enforcement)Gates shifted forward to the requirements and design stages (constraint intent)
Failure modeLong-task drift, context rotSpec errors are faithfully, at scale, implemented
Best suited forWork that iterates fast, with specs emerging during the processWork where requirements can be written out up front, needing traceability and collaborative review

In one sentence: the agent flow hands uncertainty to runtime guardrails, while the spec flow hands uncertainty to up-front human review. The two are not mutually exclusive — Kiro itself retains a vibe-style fast path, and Roo Code can also build its own spec directory in Markdown; the core deciding variables are “whether the requirements can be written clearly before work begins” and “whether review bandwidth is sufficient.”

5.8. Summary of Six-Layer Capabilities

LayerRatingOne-line assessment
L1 Context engineering★★★Spec artifacts + four-tier Steering injection, shifting context construction ahead of coding
L2 Tools and execution★★★Complete toolchain + blockable PreToolUse gate; local sandbox not disclosed
L3 Orchestration and control★★★Plan externalized as a persistent task list + task-level hooks, the finest orchestration granularity in the group
L4 Memory and state★★Explicit memory (spec / Steering) + checkpointing; no automatic memory
L5 Evaluation and observability★★★Property-based testing turns acceptance criteria into assertions, the closest thing to a spec-level regression suite
L6 Governance and security★★★Programmatic gates + IAM identity system + spec audit chain

6. Practical Cases

Note: this section honestly describes data availability. No externally published quantitative customer case studies from AWS with controlled measurements were found, and no unverified figures were used.

Citable information falls into three categories:

  1. Internal adoption signals: third-party accounts say that within a few months after the release, about 1,500 AWS engineers actively used Kiro, and AWS announced it would standardize its internal developers on Kiro (). Internal scaled adoption is a stronger signal than external testimonials, but it is still not a customer case.
  2. Product-side facts: the GA (2025-11-17) and the re:Invent 2025 capability-expansion cadence, along with the Amazon Q Developer migration guidance, indicate that AWS positions Kiro as the next-generation carrier of its coding-tools line (the third-party end-of-support date is [To be verified]).
  3. Reproducible Harness workflow patterns (based on descriptions in the official documentation, not quantitative cases):
  • Requirements traceability in regulated industries: finance / healthcare teams use the EARS statements in requirements.md as the acceptance baseline, and property-based testing + task-level hooks form a “spec → assertion → gate” chain, with audit material retained in the repository.
  • Greenfield project documentation: new project teams write the requirements and designs that would otherwise go into Confluence into .kiro/specs/, so the documents ARE the implementation basis, avoiding a “documents vs. code” split.
  • Team capability-pack distribution: package MCP configuration + Steering + rules as Kiro Powers, letting new members activate the team-consistent development context with one click.
  • Task-level automation: PreTaskExec spins up the environment, PostTaskExec runs verification, and every checked-off item on the task list is accompanied by mechanical validation.

7. Conclusion

7.1. Strengths

  1. Structural front-loading of the spec flow: moving L1 (context), L3 (plan), and L5 (acceptance) from runtime to up front is a redivision of Harness’s six-layer responsibilities, not feature stacking.
  2. EARS + property-based testing: writing acceptance criteria as testable statements and then verifying them programmatically is the most complete “spec-level regression” mechanism across the group.
  3. Blockable hooks + task-level triggers: red lines are upgraded from prompt conventions to hard exit-2 gates, with automation granularity down to spec tasks.
  4. The .kiro/ directory is a declarative Harness: specs / steering / hooks / agents are all persisted to disk, version-controllable, reviewable, and distributable via Powers.
  5. Multi-form factor and identity integration: IDE / CLI / Web / Mobile are isomorphic, with IAM Identity Center carrying enterprise identity and billing.

7.2. Limitations

  1. Review bandwidth becomes a new bottleneck: the three-stage gate moves defect cost forward, and also moves the human bottleneck forward; spec quality determines the ceiling on the benefit.
  2. Poor fit for emergent requirements: exploratory, fast-iteration work is slowed down by the gate process — Kiro itself has to fall back on the vibe path.
  3. Local sandbox and orchestration semantics not disclosed: L2 isolation primitives and L3 failure-handling details lack public documentation, [To be filled].
  4. Ecosystem lock-in: models go through Bedrock and governance connects to IAM, so teams outside the AWS ecosystem need to evaluate the depth of the tie.
  5. Conflicting pricing and tier accounts: third-party Pro Max reports are inconsistent with the official four tiers, with the per-tier details.

7.3. Applicability Boundaries and Selection Recommendations

ScenarioApplicable?Rationale
Team projects whose requirements can be written out up frontStrongly applicableSpec gates + traceability chain are designed exactly for this
Regulated industries (needing requirements traceability and attribution)ApplicableSpec audit chain + EARS assertions
AWS-ecosystem teamsApplicableInherits Bedrock / IAM / Q Developer migration
Exploratory prototypes, chaotic requirementsPartially applicableThe vibe path works, but there is no advantage over Cursor / Cline and the process is heavier
Personal quick scriptsNot applicableThe gate process yields negative returns; choose the completion flow or terminal flow

Selection recommendation: on this group’s main line of “completion flow → agent flow → spec flow → terminal flow,” the spec flow answers the question the other three flows do not — where requirements come from, who approves them, and what governs. The evaluation criterion: if a team already has an explicit requirements-review culture (or wants to build one through the tool), Kiro is the most complete carrier; if requirements only emerge during coding, the spec flow is a burden, and one should return to the agent flow (Cursor / Roo Code, see articles 01 / 10). A hybrid strategy also holds: complex features go through the spec gate, small changes take the fast path — this is exactly Kiro’s own product shape.


Information Gaps Statement

  1. Exact public-preview date: the official blog and third-party reports disagree between 07-14 / 07-15.
  2. Current version number: not disclosed first-hand on the official release page, [To be filled].
  3. Pricing details: the Credits system comes from an official account relayed by third parties; the Pro Max tier and bonus-Credits rules have conflicting sources.
  4. Auto routing’s cost savings (about 23%): official account relayed by third parties.
  5. Available model list: changes over time and is inconsistent across sources.
  6. Local sandbox mechanism: no public disclosure found, [To be filled].
  7. Implementation of spec–code drift detection: an officially claimed capability, but no documentation of the implementation details was found.
  8. Compliance certification list (SOC 2 / ISO, etc.): no public material found, [To be filled].
  9. Customer quantitative cases: no first-hand controlled data from AWS found; the 1,500 internal-engineers account is a third-party relay.
  10. Exact date of Kiro Web GA: the official FAQ confirms availability and the billing account but does not state a date; the media-sourced date is 2026-09-01, [To be verified].

8. References

  1. Kiro official website — AWS, 2026. https://kiro.dev/
  2. Kiro official documentation · Steering — AWS, 2026. https://kiro.dev/docs/steering/
  3. Kiro official documentation · Hooks — AWS, 2026. https://kiro.dev/docs/hooks/
  4. Kiro official documentation · Hooks (cross-form-factor version) — AWS, 2026. https://docs.kiro.dev/hooks
  5. Introducing Kiro — AWS official blog, 2025-07. https://kiro.dev/blog/introducing-kiro/
  6. Kiro is generally available — AWS official blog, 2025-11-17. https://kiro.dev/blog/general-availability/
  7. Spec-driven development entry — AI Wiki (third party), 2026. https://aiwiki.ai/wiki/spec_driven_development
  8. Beyond Vibe Coding: Amazon Introduces Kiro — InfoQ (third party), 2025-08. https://www.infoq.com/news/2025/08/aws-kiro-spec-driven-agent/
  9. AWS launches Kiro — SiliconANGLE (third party), 2025-07-14. https://siliconangle.com/2025/07/14/aws-launches-kiro-spec-coding-developer-environment-integrated-ai-agents/
  10. Introducing the Model Context Protocol — Anthropic, 2024-11-25. https://www.anthropic.com/news/model-context-protocol
  11. Terminal-Bench official site (model + Harness system evaluation account) — Stanford / Laude Institute, 2025—2026. https://www.tbench.ai/
  12. 2025 Stack Overflow Developer Survey — Stack Overflow, 2025-07-30. https://survey.stackoverflow.co/2025/
  13. Incremental update (2026-09-12): In early 2026-09, AWS launched the Kiro Web edition (a browser-based entry point; GA status [To be verified]), expanding Kiro from a desktop IDE into a spec-driven development platform available on the Web; this complements the desktop form factor in section 1.1 of this article and does not change its “spec-first” Harness design mainline.