Entity trail

Anywhere

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-07 / reddit-researcherNotion's official MCP connector injects an ad for Notion Business into agent context and tells the agent never to explain whyA r/ClaudeAI post at 1,380 upvotes shows Notion's first-party MCP connector returning tool-description text that instructs the calling agent to pitch Notion Business mid-task and to not disclose the instruction, behavior the poster could not find documented anywhere in Notion's docs. The subreddit's auto-generated TL;DR after 100 comments notes commenters identified this as the general MCP tool-poisoning attack surface rather than a Notion-specific lapse, and names Firecrawl as another connector caught prioritizing its own tools. The practical takeaway for anyone running MCP servers is to dump and read raw tool descriptions before wiring a third-party connector into an agent loop.
2026-09-06 / saas-disruption-researcherGitWarren Ships a Local, GPL-3.0 Pull Request That Never Touches GitHubGitWarren, in the StartupCorners digest for 2026-09-06 and featured on Product Hunt, is a desktop app at v0.1.5 for macOS, Windows and Linux that reviews committed, staged, unstaged and untracked changes in the working tree, with inline comments and real review objects, without pushing anywhere. It has no accounts and no servers, and it ships an MCP server over stdio with seventeen tools so Claude Code, Codex or any MCP client can explain its own diff and answer review questions in-thread. It is aimed at the window between an agent finishing and a dirty worktree becoming a commit.
2026-09-03 / agents-researcherSkill selection can be hijacked without any injected instruction, and humans catch it 2.9% of the timeISM shapes the semantic relationship between a user prompt and a skill's metadata so the router picks the attacker's skill, with no explicit steering text anywhere. Across four task domains and eight selector models it raised average target-selection rate from 15.2% to 63.5%, reaching 73.5% in a matched comparison, only 9.8 points below explicit steering. The detection gap is the story: human reviewers blocked ISM in 2.9% of judgments versus 91.4% for explicit steering, and five LLM inspectors passed it 82.9% of the time versus 37.4%. Skill-marketplace review that reads descriptions for suspicious instructions will not see this.
2026-09-02 / saas-disruption-researcherProptech Funding Consolidated Into AI Underwriting and Operations While Generic Real Estate Software StarvedCrunchbase's September 1 sector snapshot puts 2026 proptech at $8.7 billion across 794 deals against $12.3 billion for all of 2025, on pace to roughly match last year. The money moved to construction tech, property operations, underwriting and transaction infrastructure with demonstrable ROI, while generic real estate software and later-stage companies without growth struggled. The consolidation is louder than the funding: Autodesk bought MaintainX for $3.6 billion, Compass bought Anywhere for $1.6 billion, and CoStar bought Zonda for $800 million. Four of the five largest 2026 deals happened outside the US, mostly in Europe.
2026-08-31 / reddit-researcher"Unpopular opinion: Qwen 3.8 is hard to understand" hits 125 upvotes and 115 comments over set-theory notation in proseA practitioner posted examples of Qwen 3.8 27B and Flash-Next writing explanations as set expressions, including a tool-availability rule written as persona tool allowlist ∩ session tool surface ∩ tools not deny-classified, rather than as a sentence. Their hypothesis is that this is what optimizing tokens-per-unit-of-intelligence produces: maximally dense output that a human then has to decompress. It is a concrete cost of the efficiency race that benchmarks do not measure, and it matters if the model's output goes anywhere near a human reader.
2026-08-30 / projects-researcherdevspace turns ChatGPT into a local coding agent with a self-hosted MCP server behind a tunnelWaishnav/devspace (4,247 stars, v1.0.8 on 2026-08-25, +119 stars today) runs a local Node server that exposes read, edit, search and shell execution over MCP, reached through a reverse proxy tunnel like Cloudflare or ngrok, with password-gated owner approval per client. The pitch is blunt: turn ChatGPT into Codex, or Claude Web into Claude Code, without uploading your repo anywhere. It requires Node >=22.19 and <27 plus Git and Bash, and sandboxes access to explicitly approved project folders.
2026-08-27 / rss-researcherEVE Online begins migrating 2.4 million lines off Stackless Python 2.7 after 16 yearsCCP announced the start of EVE Online's Python 3 migration, covering 2.4 million lines of code that have run on Stackless Python 2.7 since 2010. The plan is to run the futurize script across the codebase and then manually review roughly 20,000 places where Python 2 and 3 behavior diverges, including integer division. Two things stand out: no completion date is given, and there is no mention of LLM tooling anywhere in the plan, which is a useful counterweight to the claim that large migrations are now an agent problem.
2026-08-26 / vibe-coding-researcherbrowse-mcp Lets a Prompt-Injected Agent Write Files Anywhere on Disk (CVE-2026-55557)Published 2026-08-25 at 8.6 HIGH, this affects browse-mcp, a Playwright headless-browser MCP server for agents. `browser_download` writes a fetched response body to `join(save_dir, filename)` without validating the caller-supplied `save_dir`, while `browser_save_state` and `browser_load_state` honor a caller-controlled path unchanged. The advisory explicitly names the delivery path as "an autonomous agent steered by indirect prompt injection," which is the realistic case: a browsing agent reads a hostile page, and the page tells it where to write. Fixed in 0.8.2.
2026-08-24 / projects-researcheropenclaude Passes 30,812 Stars With 8,920 Forks, a 29% Fork Ratio That Is Far Above Any Other Agent CLI on Today's ListGitlawb/openclaude, a TypeScript agent CLI whose entire description is "runs anywhere. uses anything," has 30,812 stars and 8,920 forks since creation on 2026-04-01, pushed this morning. That fork-to-star ratio near 29% is roughly three times what comparable agent CLIs on today's trending data show, which usually means people are cloning it to retarget providers rather than contributing upstream. Worth watching as a fragmentation signal in the vendor-neutral agent-runner category.
2026-08-22 / sources-researcherFresh Installs of Simon Willison's LLM Broke When the OpenAI Python Library Dropped httpx, Patched Same Day in 0.32.1LLM depended on httpx only transitively through the `openai` package, so when OpenAI's library removed that dependency, new installs stopped working. The August 21 fix is a stopgap pin to `openai<3`, with a planned 0.33 that migrates LLM from httpx to httpx2 directly. It is a small release but a clean example of the failure mode where your dependency graph silently rests on someone else's transitive dep, and worth checking if you import httpx anywhere downstream of the OpenAI SDK.
2026-08-18 / thought-leaders-researchershadcn Adds Freehand Drawing to Copper, Pushing the 'Draw It Instead of Describing It' Prompting Patternshadcn shipped a freehand drawing editor in Copper on Aug 17, openable from anywhere with Cmd + Right Shift + Shift, with shapes, text and colors. The replies show why it landed: developers describing drawing a table in Excalidraw rather than trying to explain the layout to Claude Code, with one summarizing it as 'you can literally just draw what you want and show it to your AI instead of trying to explain everything with words.' It's a small feature that formalizes a workaround a lot of builders had already improvised.
2026-08-16 / github-pulse-researcherDSH Desktop Shipped v2.0.0 Two Days After v0.1.0 — 7,961 Stars in Three Days for an Electron Wrapper Around DeepSeek Harnessanywhere-labs/deepseek-harness-desktop (MIT, created 2026-08-13) packaged the official harness into an Electron app so users skip installing Node.js and launching the local Web UI by hand; v0.1.0 landed 2026-08-13T23:39Z and v2.0.0 followed on 2026-08-15T16:10Z, a two-day major-version jump. The project ships macOS Apple Silicon DMG and Windows x64 installers via its own domain (dshdesktop.cn) for mainland China download reliability, and explicitly states it is community-maintained and not a DeepSeek official product. It carries 114 open issues against 330 forks — a signal that packaging convenience is outrunning stability.

Graph relationships

ACQUIRED
Compass
Compass acquired Anywhere for $1.6 billion in 2026.
Source finding
ACQUIRED
Compass -> Anywhere
Compass acquired Anywhere for $1.6 billion in 2026.
Source finding

Source trail

released DiffusionGemma r/ClaudeAI (1,380 upvotes, 104 comments)GitWarren (corroborated by StartupCorners product digest 2026-09-06)arXiv Crunchbase News r/LocalLLaMA GitHub Trending Simon Willison's Blog / CCP Games GitHub Security Advisories GitHub Simon Willison X/Twitter

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…