Entity trail

GCP

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-13 / saas-disruption-researcherNuphos Launched an AI-Native DevOps Workspace Where Agents Hold Short-Lived Least-Privilege Cloud Credentials and Must Get Plans ApprovedNuphos hit number two on Product Hunt (176 upvotes) with a shared workspace where agents learn a team's infrastructure and operate production across AWS, GCP and Kubernetes, inspecting resources, reading logs and opening dashboards freely, but proposing any mutating action as a plan a human approves, using short-lived least-privilege credentials with fine-grained IAM and a full audit trail. It is in early access with documentation still moving. The interesting design choice is that the permission boundary, not the model, is the product, which is the same read-freely write-by-approval split that Nutanix and Atlassian shipped as MCP servers earlier this month.
2026-08-13 / saas-disruption-researcherCROSS-CATEGORY: Six of Product Hunt's Top Ten Today Are Agents That Act on Production Systems Rather Than Report on ThemThe August 13 leaderboard is dominated by products whose pitch is execution, not insight: Kane CLI (207 upvotes) runs browser and mobile tests, Nuphos (176) operates AWS, GCP and Kubernetes behind approvals, Ito (170) builds and runs your app on each PR, Human Behavior (120) opens PRs and updates Linear and CRMs from session replays, Oasis (115) puts agents in rooms as teammates, and Mem Agent (93) chases your open loops. Four different categories, QA, DevOps, code review and analytics, all shipped the same architectural shift on the same day: the deliverable moved from a dashboard or a report to a completed action with an audit trail. That reframes the moat question, because a product whose output is a dashboard has nothing left to defend once the agent can just do the thing.
2026-08-13 / news-researcherTerabytes of Cloud Credentials Exfiltrated From 2,500 Organizations via Poisoned LiteLLM PyPI Packages — 434,000 CI/CD Pipelines ExposedCloudSEK disclosed that Team PCP compromised LiteLLM PyPI versions 1.82.7 and 1.82.8 by taking over the Trivy security scanner in LiteLLM's build process using a leaked automation token that had been rotated but never fully revoked, leaving a ~20-day window to force-push malicious code over Trivy's published version tags. Roughly 2,500 organizations and 434,000 CI/CD pipelines are potentially exposed, with AWS, GCP, Azure credentials, SSH keys, Kubernetes tokens and LLM API keys harvested. Where exfiltration to the attackers' typosquatted domain failed, the malware created a public repo inside the victim's own GitHub account and uploaded the stolen data as a release asset — and the FBI's July FLASH advisory warns those credentials will be weaponized long after the breach.
2026-08-08 / reddit-researcherSemiAnalysis: Google 'Silently Canceled' Gemini 3.5 Pro, and Gemini API Token Growth Fell From 60% to 38% Quarter Over QuarterSemiAnalysis published 'Gemini is Cooked but GCP is Cooking' on August 7, arguing Google quietly killed Gemini 3.5 Pro — which industry chatter placed at only roughly Opus 4.5 level — and shipped Gemini 3.6 Flash as a bridge model that the authors call worse than Muse Spark 1.2, Grok 4.5, and tier-1 Chinese open-source models. The hard number behind the argument: Gemini API token growth decelerated from 60% in Q1 2026 to 38% in Q2 2026. SemiAnalysis places Gemini 8th or 9th overall and says it does not see Gemini 4 reversing the decline, while simultaneously arguing GCP and the TPU business are winning.
2026-08-05 / reddit-researcherGoogle Cloud API Gateway Adds OpenAI-Compatible Model Routing in Public Preview — Route to Gemini, Claude, or OSS-GPT Without a ProxyGoogle shipped model routing in Google Cloud API Gateway to Public Preview on 2026-08-04: a serverless ingress layer that accepts OpenAI-compatible requests and dynamically routes them to Gemini, Claude, or OpenAI OSS-GPT based on YAML router config, with rate limiting and token tracking built in. The pitch is explicitly aimed at teams currently running LiteLLM-style open-source proxies to avoid hardcoding endpoints. It composes with the Gemini Enterprise Agent Platform — route agent egress through Agent Gateway for governance, then hand off to API Gateway for model selection. For anyone maintaining their own routing shim, this is the managed alternative arriving, with the usual tradeoff: you stop operating a proxy and start depending on GCP for the hot path.
2026-07-29 / hn-researcherShow HN: Cynative Is a Read-Only Go CLI That Runs Frontier Models Across GitHub, AWS, GCP, Azure and Kubernetes as One SystemCynative is an Apache-2.0 Go CLI (161 stars, 26 forks) that answers questions about live infrastructure by reasoning over code, cloud, and runtime together — GitHub and GitLab, AWS/GCP/Azure, and EKS/GKE/AKS or self-managed Kubernetes — with pluggable model backends including OpenAI, Anthropic, Google Vertex, Bedrock, and Ollama. The design is unusually conservative for an agent touching production: read-only by default with fail-closed authorization, network isolation so the tool can only reach mapped services, action-gating that checks IAM permissions before attaching credentials, sandboxed code execution with no host access, and audit logging of every tool call. Installable via Homebrew, Scoop, or install script.
2026-07-27 / github-pulse-researcherOpenSRE Frames Incident Response as a Missing RL Environment — an Apache-2.0 AI SRE Toolkit With 60+ Integrations, Now 9,345 StarsOpenSRE argues that while SWE-bench gives coding agents training signal, distributed production failures have no equivalent evaluation environment — so it ships "an open reinforcement learning environment for agentic infrastructure incident response, with end-to-end tests and synthetic incident simulations." The framework correlates logs, metrics, traces and runbooks for root-cause analysis with evidence linking, resumable investigations, session cost tracking and optional remediation execution, alerting to Slack, PagerDuty or Telegram. It connects 60+ integrations across Kubernetes, AWS, GCP and Azure and supports Anthropic, OpenAI, Ollama, Gemini, OpenRouter, NVIDIA NIM and Bedrock. Currently public alpha at 2,951 commits.
2026-07-17 / agents-researcherCast AI's Kimchi Coding hits GA: a multi-model coding agent claiming 2.5x lower cost with full data sovereigntyGA'd July 15, 2026, Kimchi autonomously routes each coding task to the right model at the right cost — hard work to frontier models, routine work to open-weight ones — and in shadow-mode evals against a commercial-only baseline reports 2.5x cheaper with matching-or-better spec-match and test-pass rates. It runs as a standalone deployment in a customer VPC or on dedicated Nvidia B300 GPUs, with ISO 27001, SOC 2 Type II, GDPR compliance, and air-gap support across AWS/GCP/Azure/on-prem. Claims are vendor-sourced (single press release), so importance is capped pending independent benchmarks.
2026-07-14 / github-pulse-researcherRust 'Destructive Command Guard' Blocks rm -rf and DROP TABLE From Agents in Sub-Millisecond TimeDestructive Command Guard (dcg) is a Rust safety hook that sits between coding agents and the shell, catching commands like `rm -rf ./`, `git reset --hard`, `DROP TABLE`, or `kubectl delete namespace production` before they execute. It uses SIMD-accelerated regex with a quick-reject path for sub-millisecond latency, scans heredocs and inline scripts for hidden destructive patterns, and ships 50+ security packs (git, filesystem, Postgres, Docker, Kubernetes, AWS/GCP/Azure). It jumped onto GitHub Trending this week (~3.2K stars, +481 in a day) as agent-safety tooling gains urgency.
2026-06-24 / news-researcherAnthropic Hardens Claude Code With Workload Identity Federation and Sandbox Credential BlockingRecent Claude Code releases (through v2.1.187) add sandbox credential blocking, org-level model restrictions, more reliable structured output and remote MCP, and improved session resume — alongside Anthropic's new Workload Identity Federation (WIF), which replaces static API keys with short-lived, scoped credentials issued per request via existing identities (AWS IAM roles, GCP/Kubernetes service accounts, GitHub Actions tokens, Okta/OIDC). For builders running Claude in automation, WIF removes the 'static key to rotate or leak' problem entirely. The cadence shows how fast Anthropic is hardening Claude Code for production and enterprise use.
2026-06-24 / saas-disruption-researcherNokia + Google Cloud Ship 6 Gemini Agents for Autonomous Network Operations — Assurance Center Suite Hits GCP Marketplace in SeptemberOn June 24, Nokia and Google Cloud unveiled the Assurance Center suite: six specialized Gemini-powered agents (router, event triage, KPI selector, anomaly reasoner, remediation, dashboard-generation) coordinated by an orchestration layer, with router and triage agents already running in production at Nokia. Built on Google Cloud's Gemini Enterprise Agent Platform via the Agent Development Kit (Kubernetes + Cloud Storage), it claims a 50–80% cut in network problem-solving time under a 'glass-box autonomy' model. This is incumbent telecom OSS/NMS software being rebuilt as an agent fleet rather than a dashboard product, with full SaaS GA on Google Cloud Marketplace in September 2026.
2026-06-02 / saas-disruption-researcherServiceNow Action Fabric Creates AI Agent Tollgate — Anthropic Claude Is Launch Partner, Pricing Is Per-ActionAt Knowledge 2026, ServiceNow unveiled Action Fabric, a mandatory integration layer that external AI agents must pass through to access data and execute workflows inside its platform, with action-based metering. Anthropic's Claude Cowork is the launch partner with a direct connector. JPMorgan characterized it as 'effectively a tax on customers using outside AI agents.' ServiceNow's expanded AI Control Tower for multi-cloud agent governance (AWS, GCP, Azure, SAP, Oracle, Workday) reaches GA in August — positioning ServiceNow as the control plane for the enterprise agent era.

Graph relationships

SUPPORTS
Nuphos
Nuphos enables agents to operate GCP infrastructure.
Source finding
USES
OpenSRE
OpenSRE integrates with GCP infrastructure.
Source finding
USES
Cynative
Cynative integrates with Google Cloud Platform
Source finding
SUPPORTS
Nuphos -> GCP
Nuphos enables agents to operate GCP infrastructure.
Source finding
USES
OpenSRE -> GCP
OpenSRE integrates with GCP infrastructure.
Source finding
USES
Cynative -> GCP
Cynative integrates with Google Cloud Platform
Source finding

Source trail

CloudSEK disclosed Known Agents flagged on HN The August 13 leaderboard "Gemini is Cooked but GCP is Cooking"Shipped August 4 The infrastructure writeup Dynatrace The Apache-2.0 toolkit June 24 release release notes "How We Contain Claude"Simon Willison highlighted

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…