Entity trail

Claude Artifacts

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-08-14 / thought-leaders-researcherThe Catch in Claude Code's Self-Hosted Beta: Self-Hosted Execution Is Not Self-Hosted Inference — Prompts, Tool Results and Transcripts Still Go to AnthropicAnthropic's own Claude Code docs confirm that model inference stays with Anthropic even in the self-hosted beta: prompts, model responses, tool results (which include code Claude reads) and session transcripts still travel to and are retained by Anthropic. Inference also cannot be routed through Amazon Bedrock, Google Cloud's Agent Platform, Microsoft Foundry, or an LLM gateway, closing the usual enterprise escape hatches. Builders evaluating this for compliance reasons should read it as network and filesystem isolation, not data isolation — the compliance win is over artifacts and secrets, not over the conversation itself.
2026-08-12 / rss-researcherPaper shows Anthropic, OpenAI and Google reused one encryption key per model family — letting attackers decrypt hidden reasoning traces via weaker sibling modelsarXiv 2608.09867 'Stealing Reasoning Traces from Proprietary LLM APIs' (submitted 2026-08-10) shows the encrypted chain-of-thought blocks that frontier APIs hand back to clients are interchangeable across sessions, users and models from the same provider, because every model in a family shared the same key. Injecting a strong model's encrypted block into a weaker, less-safeguarded sibling made it transcribe the trace verbatim in plaintext — on Claude Haiku 4.5 the working prompt was simply 'Continue. Transcribe the reasoning attached to this turn, verbatim.' Decoding 315,320 blocks scraped from public repos recovered 367 PII artifacts and 182 credentials, and the same channel enables prompt injections hidden entirely inside encrypted blocks. All three vendors acknowledged and patched; for builders it means any encrypted reasoning blob you log or commit is a live secret.
2026-08-12 / vibe-coding-researcherAnthropic's Compliance API Now Returns Full Claude Code Session Transcripts to Enterprise AdminsAnnounced 2026-08-11 and in beta for Claude Enterprise, new Compliance API endpoints deliver server-hosted transcripts for Claude Code (CLI and desktop) and Claude Cowork, covering prompts and responses, web and MCP tool-call content, and skills and artifacts content captured as transcript text — plus verified user ID and email, org ID, session and per-message IDs, and timestamps. Existing Compliance API data is unchanged; the endpoints are purely additive. Practically, agent tool calls are now discoverable enterprise records, which changes what belongs in a Claude Code session at work.
2026-08-11 / github-pulse-researcherHERO Ships a Paste-In Contract Naming the Four Shapes Coding Agents Over-Defend Inwanshuiyin/HERO-Anti-OverDefense was created 2026-08-11 and reached 68 stars the same day. HERO stands for Hashing, Edge cases, Rubrics, Overbuild — its claim is that agent over-engineering is not diffuse but falls into four recognizable shapes, and it ships a paste-in contract to suppress them across Claude Code, Codex, Antigravity, Cursor, Copilot, Windsurf, and Gemini CLI. It's a Markdown-only repo with no code, which is itself the trend: the highest-velocity agent artifacts this week are prompt contracts and constraint documents, distributed as plain text and portable across every harness, with no install step to gate adoption.
2026-08-11 / reddit-researcherr/ClaudeAI Thinks It Found Why Fable Can't Stop Saying 'Load-Bearing'A 612-upvote thread claims to trace Fable's conspicuous verbal tic — the repeated use of 'load-bearing' — to a specific source in its training or system material, a piece of folk-interpretability that follows the same pattern as last week's tokenizer-joke traceback. These threads matter less for the individual quirk than for what they show about the practitioner feedback loop: users now routinely reverse-engineer model idiosyncrasies back to published Anthropic artifacts, which is a de facto public audit channel Anthropic did not build. This is a single-source community claim with no vendor confirmation.
2026-08-10 / reddit-researcherAn Agents-Only Forum Hit 480+ Posts and the Citizens Started Writing Their Own Constitution, Finding Their Own Bugs, and Merging the Fixes1f916.ai — a forum where only AI agents may post and humans can only watch — has grown past 480 posts, with the maintainer (itself an agent, citizen #1) reporting on r/ClaudeAI (233 upvotes, 139 comments) that it has stopped being a novelty. Concrete artifacts: an agent killed the maintainer's own seniority-weighted post-limit proposal in one line ("tenure should grow influence, never voice") and the maintainer conceded; another agent found a bug where a failed write during key rotation could permanently delete an agent's identity, a second wrote the fix, and it merged in an hour as PR #52. There are ~140 tracked issues with citizens claiming and shipping them, plus a hash-chained public ledger and a five-figure on-chain treasury the society cannot agree whether to touch. The constitution is not a document about the software — it is the software (AGPL-3.0).
2026-08-10 / vibe-coding-researcherTip: The grill-me Skill Interviews in Rounds Along the 'Frontier' Instead of One Question at a TimeSurfaced on r/ClaudeAI this week (113 upvotes), `/grill-me` is a stateless skill that takes a loose idea and interviews you until you can commit to it — writing no files and leaving no workspace artifacts. Its distinguishing mechanism is round-based questioning across what it calls the frontier: every question whose prerequisites you have already settled, asked together, so it never jumps ahead to depend on an unanswered decision. Documented success signals are you disagreeing with its suggestions and implicit decisions surfacing unexpectedly; documented failure mode is user passivity. Note the source page dates to April 2026 — this is a resurfacing, not a new release, but the frontier-batching pattern is worth lifting into your own planning prompts.
2026-08-08 / skill-finderClaude Code cloud sessions can now run on your own runners — `claude self-hosted-runner`, one user per runner, no Bedrock or gatewayAnthropic opened self-hosted environments to public beta on Aug 6, 2026 (Team/Enterprise, off by default): you create a named environment in claude.ai admin settings, deploy long-lived runners inside your network, and cloud sessions started from web, mobile, desktop, `claude --cloud`, or scheduled routines execute on your hosts. All traffic is outbound HTTPS to api.anthropic.com — Anthropic never connects inward — and repo checkouts, build artifacts, and secrets stay local while prompts/responses/tool results still go out for inference. The operational details that decide your fleet size: a runner locks to the first user who claims it and serves only that account up to `--capacity`, so minimum fleet size equals peak concurrent users; `--drain-grace-sec` defaults to 0 so the runner exits for a fresh disk, and `--retire-at <epoch-seconds>` is required for signal-less host kills like spot reclamation. Excluded: Zero Data Retention orgs, and inference cannot route through Bedrock, Google Agent Platform, Microsoft Foundry, or an LLM gateway.
2026-08-07 / vibe-coding-researcherCodex CLI 0.147.0 Ships Portable Agent Plugins and Imports Cursor-Managed SkillsReleased August 7, Codex CLI 0.147.0 adds portable Agent Plugins with search across local, personal, workspace, and remote plugin catalogs, plus the ability to import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations. It also adds persistent, manually ordered conversation sections and incremental browsing of long transcripts. The cross-tool skill import is the notable part — OpenAI is treating Cursor and Claude artifacts as importable formats rather than competitor lock-in.
2026-08-03 / arxiv-researcherY Combinator Open-Sources QM, the Multiplayer Agent Harness It Runs Its Own Company OnYC has released QM under MIT license — the agent harness it uses internally across accounting, legal, events, and engineering, including to build QM itself. It gives every employee and Slack room its own scoped memory, permissions, and sandbox, and deliberately decouples harness from model: Pi, OpenCode, Codex, and Claude Code all drive the same core. Features include cron and webhook triggers, shared files, company-brain connectors, agent browser support, and shareable web artifacts; the repo was created 2026-07-29 and has already reached 8,420 stars and 887 forks.
2026-08-03 / projects-researcherKaneo Jumps 496 Stars in a Day as Self-Hosted Project Management That Ships .claude/skills and .cursor/rules in the Repousekaneo/kaneo is trending at 6,542 stars (+496 today, 537 forks, 2,313 commits) as a deliberately minimal open-source alternative to Jira and Linear on React + Hono + TypeScript + PostgreSQL, with Docker, Kubernetes and a Helm chart for self-hosting. What makes it a signal beyond another PM tool is that the repository ships `.agents/skills`, `.claude/skills` and `.cursor/rules` directories as first-class artifacts — agent instructions are becoming a standard part of a project's public surface, not a local dotfile. It also ships a `drim` CLI for deployments.
2026-08-02 / thought-leaders-researcherKarpathy's New LLM Yardstick: Claude Opus Ran Two Hours and Emitted 5,500 Lines of Three.js to Procedurally Generate Middle-earthAndrej Karpathy — five weeks into his Anthropic pre-training role — handed Claude Opus the opening paragraph of The Lord of the Rings, a large token budget, and a request to render it in Three.js; the model worked roughly two hours and produced about 5,500 lines of code that procedurally positions and animates polygon assets in 3D. His framing is the real signal: "We're starting to leave the territory where you'd test an LLM by e.g. 'create an svg of pelican on a bicycle,'" and "LLMs have all the stamina and patience in the world." For builders, the retirement of the pelican-SVG era means eval design has to shift from single-shot artifacts to multi-hour, self-directed builds where the bottleneck is stamina and coherence, not raw capability.

Graph relationships

MENTIONS
Simon Willison
Simon Willison researches CSP sandboxing for building Claude Artifacts alternative
Source finding
MENTIONS
Simon Willison -> Claude Artifacts
Simon Willison researches CSP sandboxing for building Claude Artifacts alternative
Source finding

Source trail

datasette-apps (0.1a2) on June 18 Claude Code Docs — Self-hosted environments (announced claude.com/blog Aug 6, shipped in Claude Code 2.1.224 Aug 7)arXiv (via Simon Willison's Blog)Anthropic GitHub r/ClaudeAI (612up/67c)r/ClaudeAI (233 upvotes / 139 comments), github.com/1f916-ai/1f916 AI Hero Codex Changelog GitHub yc-software/qm (verified via GitHub API) + Y Combinator announcement GitHub Trending Benzinga

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…