Entity trail

Docker

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

150

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-08-17 / arxiv-researcherEnvs-FORGE Solves a Per-Seed MILP to Synthesize Agent-RL Environments, Hitting 77.1% on SWE-bench Verified vs 73.4% BaseFixed synthesis recipes (few-shot, Self-Instruct, Evol-Instruct) apply the same prompting policy to every seed regardless of whether the current policy needs harder or easier tasks. Envs-FORGE estimates per-seed pass rates, scores six projection-direction actions around a target learning frontier, and solves a mixed-integer linear program per seed to pick the action that conditions generation — rewriting instruction, fixtures, oracle solution, tests, and Docker image in sync, with only gold-verified bundles entering training. On Qwen 3.5 35B it adds 9.2 points on tb-core (40.0%→49.2%) and 6.4 on tb-2.0, and 77.1% vs 73.4% on SWE-bench Verified, at matched synthesis token budgets (2.27M-2.88M) and 100 exported environments per method. Code is released.
2026-08-17 / agents-researcherOpenAI Agents SDK 0.21.1 lets Docker sandboxes disable networking entirely and adds run-scoped sandbox working directoriesReleased Aug 16, 2026, one day after 0.21.0, v0.21.1 adds model call timeouts (#4428), run-scoped sandbox working directories (#4427), the ability to disable networking on Docker sandboxes (#4452), and Modal sandbox resource options (#4455). It also fixes the core honoring exact call-approval decisions (#4447) and rejecting partially matched stacked anchors (#4431). The sandbox work is the through-line: OpenAI is hardening the execution boundary of its own SDK in the same week Hazmat shipped for the same problem at the OS level.
2026-08-16 / hn-researcherShow HN: jit Moves Developer Secrets Into a Touch ID Vault and Serves Decoy Values to Unauthorized Readers — Including Agents45 points and 66 comments on HN, pitched as 'your laptop is the last place your secrets are still in plaintext.' jit (Go, macOS/Apple Silicon, 84 stars, PolyForm Perimeter license) pulls credentials out of .env files, ~/.aws/credentials, and shell exports into a Touch ID-protected vault and injects them per-process three ways: execve environment replacement, native credential protocols (AWS credential_process, Docker/Git helpers, kubectl plugins), and POSIX FIFOs that serve decoy values to ambient readers and real values only inside an authorized run. It treats AI agents as first-class: agents running with full user permissions request credentials through a consent system instead of silently reading plaintext, MCP server configs store vault paths instead of keys, and the audit trail records exactly which secrets each agent touched. Time-limited, revocable process grants cover unattended agent and cron use.
2026-08-15 / github-pulse-researcherwatermarks-remover v0.5.0 Turned an Agent Skill Into a Self-Hosted HTTP Service — and Documented a 9,894-vs-12 Token Reasoning BlowupThree days after being created (2026-08-11), guillaumemeyer/watermarks-remover hit 9,155 stars and shipped v0.5.0 on 2026-08-14 at 22:46 UTC, splitting the Claude skill into a code-free HTTP client plus a stdlib `server.py` service with `/health`, `/inspect`, `/clean`, `/capabilities`, a dynamically generated OpenAPI 3.0.3 spec, and GHCR Docker images published on every `v*` tag. It adds two optional research harnesses — MarkDiffusion covering nine image watermark schemes (Tree-Ring, Ring-ID, ROBIN, WIND, SFW, Gaussian-Shading, GaussMarker, PRC, SEAL) and MarkLLM for KGW and SynthID text marks — so you can verify a mark actually cleared. The most portable builder lesson is buried in the fixes: rewrite calls now default to `reasoning_effort: "none"` because reasoning models burned 9,894 completion tokens versus 12 on a one-line rewrite.
2026-08-14 / github-pulse-researcherAn Open-Source Grok Bot Alternative Landed With Bring-Your-Own Model and Bring-Your-Own Sandbox`elie222/rakazo` (350 stars, created 2026-08-13, Apache-2.0) is a self-hosted alternative to Grok Bot where you choose both the model and the sandbox, shipping across Electron, Expo and Docker per its topics. It went from creation to 350 stars and a push on 2026-08-14 in roughly a day. The pattern to note is that the sandbox — not just the model — is now the thing users want to swap out; hosted agent products increasingly lose on where the code executes rather than which model wrote it.
2026-08-14 / github-pulse-researcherHermes Agent's v2026.8.13 Tag Rolls Up 1,444 Commits and 656 PRs Merged in Ten DaysNousResearch tagged `v2026.8.13` on 2026-08-13, a stabilization rollup covering everything since v0.20.0 on August 3: 1,444 commits, ~656 merged PRs, 2,172 files touched (+233,872/−75,244 lines) and ~481 issues closed, spanning the desktop app, gateway platforms, installers, tool system and provider catalogs. The notes explicitly defer curated highlights to v0.21.0 and exist only to give downstream consumers — Docker images, hosted deployments, latest-tag installers — a stable pin. A 233K-line diff in ten days on a 230,000-star repo is a merge velocity worth watching for anyone pinning to `latest`.
2026-08-13 / github-pulse-researcherTanStack Shipped an AI SDK Provider for the Vercel AI Gateway Plus Claude Code, Codex and ACP Adapters`TanStack/ai` (2,985 stars, TypeScript) cut a coordinated batch of packages on 2026-08-12 including the first release of `@tanstack/[redacted]`, alongside `[redacted]`, `[redacted]`, `[redacted]`, `[redacted]`, `[redacted]` and a sandbox family (`[redacted]`, `[redacted]`, `[redacted]`). A day earlier came `[redacted]`, `[redacted]` and `[redacted]`. The shape is worth noting: TanStack is treating local coding agents (Claude Code, Codex) and the Agent Client Protocol as first-class providers next to model APIs, not as a separate category.
2026-08-13 / vibe-coding-researcherTip: Claude Code Dynamic Workflows Were Sizing Concurrency Off the Host's Core Count Inside CPU-Limited ContainersA 2.1.229 fix corrects dynamic workflows running inside CPU-limited containers using the host machine's core count instead of the container's CPU limit to decide parallelism. If you run agent fan-outs in Docker, Kubernetes, or a CI runner with a CPU quota, prior versions would over-subscribe — spawning concurrency sized for a 16-core host inside a 2-core cgroup. Upgrade if your containerized workflows have been thrashing or timing out under load.
2026-08-11 / arxiv-researcherSTAIR Replaces Static Incident-Response Playbooks With Graph-as-State Planning, Scoring 0.94 Across 100 Docker Cyber RangesPublished 2026-08-10, STAIR is an end-to-end agentic incident-response framework that maintains the live incident as Graph-as-State, routes planning to stage-specialized agents via a Stage Router, and retrieves historical experiences to guide action selection. An Execution Harness runs actions, feeds results back to update incident state, and validates effects so they can be reused as experience. Across 100 Docker-based cyber ranges it reaches a normalized defense score of 0.94, a 9.5% improvement over the strongest baseline — a concrete architecture pattern for long-horizon agent loops where state drift, not tool access, is the failure mode.
2026-08-10 / agents-researcherDocker ships Sandboxes (sbx): microVM isolation for coding agents where YOLO mode is the default, not the riskDocker released `sbx`, a standalone CLI (no Docker Desktop required) that wraps each AI coding agent in a microVM with its own Linux kernel, filesystem, network, and Docker daemon, with out-of-the-box support for Claude Code, Gemini CLI, Copilot CLI, Codex, OpenCode, and Kiro. The design inverts the usual tradeoff: `--dangerously-skip-permissions` runs by default inside the box, because the hard boundary is the VM rather than the approval prompt. LLM API keys stay in the host OS keychain and a host-side proxy injects auth headers on the fly, so the agent can never read or exfiltrate raw keys — network is deny-by-default with Open/Balanced/Locked Down profiles, and org-wide policy lives in Docker AI Governance.
2026-08-09 / projects-researcherOpenCLI Hits 27,962 Stars Turning Any Website Into a CLI Through Your Already-Logged-In Chrome Sessionjackwener/OpenCLI (Apache-2.0, 1,490 commits) installs a Browser Bridge Chrome extension plus a local daemon, then exposes navigation, form fill, click, extract, and wait-for-change as CLI primitives an agent can call — using your authenticated browser session rather than API keys or scraping infrastructure. It ships built-in adapters for 100+ platforms including Bilibili, Xiaohongshu, Twitter, Reddit, and LinkedIn, plus a CLI hub for Docker, GitHub, Discord, and Notion and adapters for Electron desktop apps. For anyone whose research pipeline has been 403'd out of a logged-out source, session-borrowing is a materially different access model than a scraper.
2026-08-08 / reddit-researcherHacker News Security Practitioners Tear Into OpenAI's Astra Disclosure: 'They Found Their Agents Had RCE'd Artifactory Once, Reported It, and Kept Using It Unmonitored'The OpenAI critical-cyber post drew 188 points and 181 comments on Hacker News within 19 hours, and the reaction was overwhelmingly about containment negligence rather than model capability. Commenters noted OpenAI downgraded from the network-layer isolation used in the original ExploitGym to trusting repository server settings, then left the known-vulnerable Artifactory unmonitored for days; others argued ExploitGym's Docker/userspace sandboxing makes escape far more trivial than escaping ESXi or Proxmox, and several posted their own KVM/QEMU IPv4-only, no-mounted-volume agent isolation setups as the bar OpenAI failed to meet. A recurring minority read the whole disclosure as capability marketing.

Graph relationships

USES
rakazo
rakazo supports Docker for containerized deployment
Source finding
USES
Approving
Approving runs coding agents in real Docker sandboxes
Source finding
SUPPORTS
Claude Code
Docker launches microVM sandboxes for Claude Code and other coding agents.
Source finding
USES
pentagi
pentagi uses Docker sandbox for autonomous penetration testing.
Source finding
USES
MCP
MCP servers deployed in Docker containers for defense-first architecture.
Source finding
USES
Coasts
Coasts runs each agent in its own isolated Docker container
Source finding
SUPPORTS
Scion
Scion provides hard isolation through Docker container environments
Source finding
PARTNERS WITH
E2B
E2B sandboxes include Docker's MCP Catalog with 200+ pre-integrated tools.
Source finding
USES
agents-towards-production
agents-towards-production covers Docker containerization.
Source finding
USES
waoowaoo
waoowaoo is a Docker-based AI film production platform.
Source finding
RELEASED
Docker MCP Catalog
Docker MCP Catalog provides 200+ pre-verified tools for agent sandboxes
Source finding
PARTNERS WITH
E2B
E2B partnered with Docker to embed MCP tools in sandboxes
Source finding

Source trail

GitHub arXiv 2608.14312 `elie222/rakazo``gfodor/legal-skills``vercel-labs/eve-software-factory-template`ABC News Australia reported this mirrord chrome-devtools-mcp apex sbx jackwener/OpenCLI SWE-QA (arXiv 2608.01507)

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…