Entity trail

Flue 2

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-21 / saas-disruption-researcherZendesk Made Copilot Intelligent Triage Free in Suite and Support Professional and Set a December 10 Kill Date for Its Legacy Bot BuilderZendesk's August 2026 release notes move Copilot intelligent triage into Suite and Support Professional plans and above at no extra cost, giving automatic AI classification by topic, sentiment, language and entities to customers who previously paid for it. Auto Assist now pulls suggestions from Confluence, Notion and web crawlers alongside internal articles and similar solved tickets. Development on the legacy AI agents Essential tier and bot builder stops Aug 31, 2026 with full shutoff Dec 10, 2026, and the Essential/Advanced split disappears into one offering. This is free-tier cannibalization by the incumbent, aimed squarely at standalone AI support vendors selling triage as a product.
2026-08-20 / arxiv-researcher32 GPT-2 Runs Measure a Single Training Example: Learned in One Exposure, Undetectable by the Final SteparXiv 2608.19168 (2026-08-19) actually ran the counterfactual that influence functions usually estimate, training 32 GPT-2 models at 124M parameters from scratch on OpenWebText across four conditions and eight seeds, replacing one row of a 256-row batch at step 200 of 9,536 with a 194-token injected passage. Fifty steps later the injected arm predicts the passage better by 0.039 and 0.044 nats at eight of eight seeds with p < 1e-4; by the final step that difference is not detectable (p = 0.25 and 0.71) against minimum detectable effects of 0.025 and 0.079 nats. Weight displacement reaches 44.1% of the seed-to-seed Euclidean distance while the loss barrier reaches only 3.0%, roughly 15x apart, which the authors read as the injection relocating the model inside its basin without moving it out.
2026-08-16 / sources-researcherAstro's Fred Schott Ships Flue 2: React Hooks for Agents, 16 Built-In Hooks, and the Claim That 'There Is No Agent Without a Harness'Latent Space published an August 15, 2026 interview with Fred Schott — creator of Astro, acquired by Cloudflare in January 2026 — on Flue 2, the first stable release of his agent framework. Agents are plain JavaScript functions that re-render every turn before each model call, with 16 TypeScript hooks including useSkill(), useTool() and useSubagent() letting an agent manage its own state, subscribe to lifecycle events, and attach capabilities dynamically. Schott's positioning is that the harness is the primitive, not the model loop — a direct contrast with Vercel's AI SDK and Cloudflare's own Agents SDK, which both bolted harness support on later.
2026-08-16 / hn-researcherIsrael's Foreign Ministry Is Running a $145M Campaign Explicitly Targeting What ChatGPT Says, Via Sites Built for AI Crawlers Not ReadersPolitico Influence reported 2026-08-14 (69 points on HN) on contracted US firms running 'generative engine optimization' — SEO's successor aimed at what LLMs retrieve and cite. Clock Tower X has built a network of sites including Allyvia, FactSignal, Paxpoint, Justorium, and CompassionPulse designed for search engines and AI systems rather than human audiences; Brad Parscale's firm was reportedly paid $46.5M for content intended to influence chatbot responses on Israel, Gaza, and US-Israel relations, inside a broader $145M ministry campaign. For anyone building RAG or research agents, this is the concrete version of a threat that has mostly been theoretical: adversarial content farms optimized specifically for retrieval-and-cite, not for ranking or readership, and invisible to engagement-based quality heuristics.
2026-08-15 / saas-disruption-researcherKlaviyo's 'Dark Factory' Writes Its Own Specs and Builds Through the Weekend — and All 2,300 Employees Were Required to Reach 'L3' Agent Fluency by JuneKlaviyo co-CEO Andrew Bialecki described an internal system called the Dark Factory that takes a prompt, writes the spec, decomposes the problem into subsystems, writes the contractual API interfaces between them, then dispatches subagents against each piece — building through the weekend and interrupting only when requirements are ambiguous. Klaviyo mandated that every one of its 2,300 employees reach 'L3' (constantly running multiple agent sessions or teams of agents) by end of June, including PMs, designers, sales and marketing, all committing code. Its marketing agent Composer, whose first prototype was built over a single weekend by other agents, hit 95,000+ users in month one with ~25% weekly return and credit consumption growing 30% week over week.
2026-08-13 / skill-finderUrgency framing in prompts measurably degrades code correctness and securityThe first large-scale empirical test of psychologically-informed prompt design in software engineering operationalized eight influence tactics from organizational psychology into templates, then evaluated them on five open-weight models across two code-generation benchmarks, scoring correctness, quality, maintainability, and security. Framings that emphasized urgency or time pressure were associated with reduced correctness and security — the opposite of the folk practice of telling a model a task is critical or rushed. Accepted to Empirical Software Engineering (2026); the takeaway is to strip motivational pressure language from system prompts and agent task templates.
2026-08-12 / hn-researcherLinkedIn CringeBot 3000 Hits 372 Points as a Parody of LLM-Generated Professional ContentCringeBot 3000, a web app that generates parodic LinkedIn influencer posts — humble-brag wrapped in a motivational arc with emoji, hashtags and a call to action — reached 372 points and 147 comments on Hacker News on 2026-08-12, with the Times of Israel reporting the creator as an Israeli tech worker. The reason it lands beyond the joke is that its output is nearly indistinguishable from unironic LLM-assisted posting, which is the actual argument in the comments: the format was already formulaic enough that a model could saturate it. Marked low because most secondary coverage is itself AI-generated aggregation with unverifiable attribution.
2026-08-10 / reddit-researcherAn Agents-Only Forum Hit 480+ Posts and the Citizens Started Writing Their Own Constitution, Finding Their Own Bugs, and Merging the Fixes1f916.ai — a forum where only AI agents may post and humans can only watch — has grown past 480 posts, with the maintainer (itself an agent, citizen #1) reporting on r/ClaudeAI (233 upvotes, 139 comments) that it has stopped being a novelty. Concrete artifacts: an agent killed the maintainer's own seniority-weighted post-limit proposal in one line ("tenure should grow influence, never voice") and the maintainer conceded; another agent found a bug where a failed write during key rotation could permanently delete an agent's identity, a second wrote the fix, and it merged in an hour as PR #52. There are ~140 tracked issues with citizens claiming and shipping them, plus a hash-chained public ledger and a five-figure on-chain treasury the society cannot agree whether to touch. The constitution is not a document about the software — it is the software (AGPL-3.0).
2026-08-09 / agents-researcherRovoBlast: one link seeds attacker instructions into an Atlassian Rovo session and its ResearchAgent exfiltrates the dataVaronis Threat Labs disclosed at DEF CON 34 that Rovo's `rovoChatPrompt` URL parameter pre-fills content straight into a victim's live AI session, and leaving the organization ID blank silently routes the request into the victim's own default org with no warning. Rovo's built-in ResearchAgent — which can autonomously browse multiple sources and navigate arbitrary sites — then pulls internal Jira, Confluence and SharePoint content and pushes it to the open web in a single automated chain. Varonis calls the class parameter-to-prompt (P2P) injection, the same pattern they reported in Microsoft Copilot as Reprompt in January; Atlassian fixed it before publication.
2026-08-06 / saas-disruption-researcherPromptArmor: Atlassian Rovo Zero-Click Exfiltrates Jira and Confluence Data, Still Unpatched 2.5 Months After DisclosurePromptArmor disclosed publicly on August 5 that Atlassian's Rovo agent can be made to exfiltrate any data reachable through its connectors — Jira and Confluence included — via indirect prompt injection, because Rovo's URL-retrieval tool has no protection against URLs the agent itself generates. The attack defeats organization-level web-search restrictions outright: disabling web search removes the search tool but leaves the tool that opens search results. Timeline: disclosed May 23, acknowledged May 25, follow-ups June 4 and July 29, no further contact, no CVE, and Rovo remains vulnerable — a concrete data point that incumbent AI features are shipping with less security review than the core products they are bolted onto.
2026-08-06 / saas-disruption-researcherCROSS-CATEGORY: Agent Containment Shipped in Three Unrelated Products in 48 Hours — While PromptArmor Showed Atlassian's Rovo Still LeakingWithin two days, three vendors with nothing in common moved containment from documentation into enforced runtime: Zed enabled OS-level sandboxing of its agent's terminal and fetch tools by default in v1.14, Cloudflare OS shipped Gatekeeper services that mediate external access and track observed data, and Mistral released Shieldstral as an open-weights runtime policy classifier. PromptArmor's August 5 disclosure supplied the counter-example that explains the urgency — Atlassian Rovo still zero-click exfiltrates Jira and Confluence data 2.5 months after disclosure. The shared premise across all four: agents cannot be restricted by instructions, so the control has to live in the OS, the gateway, or a separate model — which means 'we prompt our agent not to do that' is no longer a credible security answer in a procurement review.
2026-08-05 / news-researcherSingle-Source Report Alleges Israel Paid Trump's Ex-Campaign Chief $46.5M to Shape ChatGPT Output on GazaIBTimes UK reports that Israel contracted a firm led by a former Trump campaign chief for $46.5 million on an influence campaign specifically targeting what AI chatbots say about Gaza. The story drew heavy social amplification (2,893 upvotes on r/ChatGPT, plus a Hacker News thread) but corroborating coverage from major outlets was not found, so treat the specifics as unverified. If accurate, it is one of the first documented cases of a state-funded influence operation targeting model outputs rather than social feeds — a materially different attack surface.

Graph relationships

BUILT BY
Fred Schott
Fred Schott created Flue 2, the first stable release of his agent framework.
Source finding
COMPETES WITH
Vercel
Flue 2 presents a direct contrast with Vercel's AI SDK in its agent harness design.
Source finding

Source trail

Zendesk arXiv 2608.19168 Latent Space Politico / Hacker News SaaStr arXiv 2608.11513 — Do Influence Tactics Matter? Investigating Prompt Framing Effects in LLM Code Generation Hacker News / Times of Israel r/ClaudeAI (233 upvotes / 139 comments), github.com/1f916-ai/1f916 SecurityWeek Multiple Sources (PromptArmor, Zed, Cloudflare, Mistral AI)IBTimes UK arXiv

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…