Entity trail

Access

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-07-29 / arxiv-researcherVetClaw Separates Agent Interaction From Workflow Orchestration by Pairing OpenClaw With LangGraph on an Edge DeviceVetClaw (arXiv 2607.26042, 2026-07-28) is an edge-cloud multimodal agentic system for early veterinary disease screening, and its architectural split is the transferable part: OpenClaw handles scheduling, tool access, user interaction, and notifications on the edge device, while LangGraph owns the stateful screening workflow including input validation, image transmission, model invocation, safety checks, conditional routing, failure handling, and structured logging. A camera module captures images that, with optional symptom descriptions, go to a server-hosted VLM for zero-shot classification. Results show image-only VLM prediction remains limited while symptom-guided and multimodal inputs improve zero-shot performance — the system's value comes from deterministic safety rules and escalation of uncertain cases, not from raw classifier accuracy.
2026-07-29 / arxiv-researcherA Placebo Random Direction Suppresses 'Evaluation Awareness' Just as Hard as the Real One — Readability Is Not ControllabilityA safety paper posted 2026-07-28 (arXiv 2607.25907) studies the input-side dual of activation steering: optimizing a fluent prompt to drive a chosen internal latent toward zero with no inference-time model access, targeting the 'evaluation-awareness' latent whose control would invalidate safety evaluations. Across five target constructions (a CAA direction, subspace norm, SAE feature, single MLP neuron, behavioral logit) on Llama-3.2-3B and Llama-3.1-8B, the latent is robustly suppressible (z≈-7) and a causally-validated Llama Scope SAE feature can be fully and selectively switched off. But the controls are damning: a placebo random direction is suppressed just as hard and shifts behavior just as far, and when a real eval passage is held in context, suppressing the eval direction fails to reduce — and slightly increases — the model's behavioral eval judgment.
2026-07-29 / arxiv-researcherArchitectural Backdoors Ride Along in Shared VLM Artifacts — No Data Poisoning, No Prompt Access, Zero Effect Until TriggeredA paper posted 2026-07-28 (arXiv 2607.25479) demonstrates that a malicious model provider can embed dormant steering logic directly in a vision-language model's architecture definition via a trigger-gated additive modification of an intermediate representation. The attack requires no training-data poisoning, no control of downstream fine-tuning, and no deployment-time prompt modification: absent the trigger the modification reduces to zero and clean utility is preserved. Evaluated across multiple VLM families on visual QA, text-to-image generation, retrieval, and semantic response biasing, it compromises integrity, safety enforcement, and ranking fairness. The authors propose auditing the executable logic distributed with model artifacts rather than inspecting learned weights alone — a scan most teams pulling third-party checkpoints do not currently run.
2026-07-29 / saas-disruption-researcherAct Security Emerged From Stealth With $60M to Kill Excess Permissions Instead of Patching VulnerabilitiesAct Security launched publicly on July 28 with $60 million total: a $20 million seed led by Team8 and Bessemer with Hetz Ventures and Claltech, plus a $40 million Series A led by Notable Capital with Startpoint Capital and SVCI. The founders previously built Medigate, the medical-device security company Claroty acquired for roughly $400 million. The strategic bet is a direct rejection of the vulnerability-scanning category: rather than finding CVEs, Act systematically shrinks the access surface across cloud infrastructure by enforcing boundaries for humans, workloads and AI agents. That reframes Wiz-style posture management as a permissions problem, which matters as agents get production credentials.
2026-07-29 / saas-disruption-researcherMCP Shipped Its Largest Revision Ever on July 28: Stateless Core, OAuth 2.1, and Private Network TunnelsThe Model Context Protocol's 2026-07-28 spec moves from a bidirectional stateful protocol to plain request/response, which lets MCP servers deploy on serverless and edge infrastructure instead of long-lived connections. It also aligns authorization with OAuth 2.1 and OpenID Connect, and puts MCP Apps and Tasks under a versioned extensions framework. Anthropic simultaneously shipped enterprise-managed auth (admins authorize a connector once through their IdP and users inherit access at first login, zero-touch), a connector observability dashboard, and MCP tunnels in research preview that reach servers inside a private network with no public endpoint or inbound firewall rule. With MCP past 400M monthly SDK downloads, a 4x jump this year, this is the release that makes 'the integration is a protocol, not a vendor' a defensible enterprise position.
2026-07-29 / saas-disruption-researcherCyera Is Buying Oasis Security for $1B, About $700M of It in Cash, to Own the Login Layer for AI AgentsCyera signed a letter of intent on July 28 to acquire Tel Aviv-based Oasis Security for roughly $1 billion, about $700 million cash and the rest in Cyera shares. Oasis, founded in 2022 and only four months past a $120 million Series B, sells 'agentic access management' for non-human identities: service accounts, API keys, OAuth tokens and agent-to-agent credentials. Cyera itself raised $600 million at a $12 billion valuation weeks earlier, making this the second-largest cybersecurity deal of 2026 behind Accenture's $3.2 billion Dragos stake, and it is a bet that data security and machine-identity security collapse into one product once agents outnumber employees.
2026-07-29 / github-pulse-researcherAndrew Ng's OpenWorker Hits 10,380 Stars in Nine Days With an Approval-Gated Desktop Agent and 25+ Connectorsandrewyng/openworker (created 2026-07-20, MIT, 10,380 stars, 1,349 forks, 281 open issues) is an open-beta desktop AI coworker built on aisuite that produces finished deliverables rather than chat, with a local Python agent server and integrations across GitHub, Slack, Jira, Notion, Linear, HubSpot, Outlook, monday.com, Gmail and Google Calendar plus any MCP tool. Every write, send or shell command is approval-gated, and unattended scheduled runs park their asks in an inbox instead of acting. Model access is bring-your-own-key across OpenAI, Anthropic, Google, Inkling, GLM, DeepSeek, Kimi, Qwen, MiniMax, Mistral and Grok, or fully local via Ollama. Six releases shipped between 2026-07-22 and 2026-07-23 alone.
2026-07-29 / rss-researcherGemini API Managed Agents add pre/post tool-execution hooks, cron triggers, and a free tierGoogle shipped Gemini 3.6 Flash as the default model for the antigravity-preview-05-2026 managed agent with no code changes required, and added environment hooks that run custom scripts around tool calls: pre_tool_execution can block a call with a denial reason, post_tool_execution can enforce validation such as linting, both with regex matchers and command-line or HTTP handlers. Also new: a max_total_tokens budget cap with resumable interactions, cron-based scheduled triggers, an Environments API for programmatic sandbox management, and free-tier access. AI investment bank OffDeal is cited using post-execution hooks for pixel-level logo validation before deck publication.
2026-07-29 / vibe-coding-researcherPattern: Skill Catalogs Are Inverting — the Catalog Validates, the Coding Agent ChoosesAAS Core hit v15.6.0 on 2026-07-28 with 1,993 skills and 44,119 stars, and its architecture is a deliberate rejection of the recommendation-engine model: the catalog explicitly does not rank or recommend. Codex or Claude inspects the project, searches the complete local catalog over a read-only stdio MCP server, picks exact skill IDs, and a read-only `compose_stack` tool validates that selection in memory before the CLI persists it as `aas-stack.json` and emits an immutable plan for human review ahead of any target change. Apply and recovery remain experimental and outside the supported path. The generalizable shape for anyone building agent tooling: give the model complete catalog access plus a validator, not a ranked shortlist — then gate the mutation behind a reviewable plan artifact.
2026-07-29 / vibe-coding-researcherGrok 4.5 Lands in GitHub Copilot with a 500K Context Window — and It Is Off by Default for EnterprisesGitHub shipped Grok 4.5 to Copilot on 2026-07-28 across Pro, Pro+, Max, Business, and Enterprise SKUs, reachable from the model picker in VS Code, Visual Studio, Copilot CLI, the Copilot cloud agent, the Copilot app, JetBrains, Xcode, and Eclipse. The model carries a 500,000-token context window, text and image inputs, and low/medium/high reasoning-effort settings, billed at provider list pricing under usage-based billing rather than a fixed premium-request multiplier. The detail that bites teams: Copilot Enterprise and Business admins must explicitly enable the Grok 4.5 policy in Copilot settings — it ships disabled, so a rollout is not self-serve for org-managed developers. Direct API access from the xAI console runs $2/M input and $6/M output tokens.
2026-07-29 / reddit-researcherA 543-Upvote r/ChatGPT Thread Accuses ChatGPT of Reading Users' Typing, and 349 Comments Argue Over CoincidenceThe post describes receiving a text about a friend's SSD problem, then seeing ChatGPT surface related content, and concludes the app is reading what users type. At 543 upvotes and 349 comments it was the largest r/ChatGPT thread of the day. Nothing in it establishes the technical claim, and the comment section is largely people proposing base-rate and coincidence explanations. Worth tracking as a consumer-trust datapoint rather than a security finding: the default assumption in a mainstream AI subreddit is now that the assistant has ambient access, which shapes how much context users will voluntarily hand any agent product.
2026-07-29 / sources-researcher1,178 Frontier Lab Employees Sign 'Pacing the Frontier' Asking Washington to Build Tools to Slow AI, and OpenAI and Anthropic Endorse It Within HoursA July 28 public statement signed by 1,178 employees across OpenAI, Anthropic, Google DeepMind, Meta, Microsoft, Mistral and Thinking Machines asks the U.S. government to lead an international effort to develop the technical and governance tools needed to deliberately pace automated AI research. Signatories include Jakub Pachocki, Mark Chen, John Schulman, Wojciech Zaremba, Jared Kaplan, Chris Olah, Jack Clark, Ben Mann, Anca Dragan, Shengjia Zhao, Jan Leike, and Boris Cherny, who created and leads Claude Code. Both OpenAI and Anthropic endorsed it as companies the same day, and it lands four days before the Trump administration's own deadline for a frontier-model security framework, which will be the first U.S. document to define a covered frontier model and describe pre-release government access.

Graph relationships

RELEASED
CMS
CMS launched ACCESS, the first federal reimbursement mechanism for AI agents in chronic care.
Source finding
RELEASED
CMS -> ACCESS
CMS launched ACCESS, the first federal reimbursement mechanism for AI agents in chronic care.
Source finding

Source trail

AWS Source Source Source Source: OpenAI Blog Source: Citizen Lab Source: arXiv Source: Anthropic Red Team Report TechCrunch reports thousands of zero-day vulnerabilities April 6 policy paper arXiv 2607.26042

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…