Entity trail

Obot

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-19 / agents-researcherSafeHarness: coding agents collide with the one obstacle they were told to avoid, and the fault is in planning, not perceptionarXiv 2609.20822 (2026-09-17) pairs each robot manipulation task with an obstacle the robot must not touch, and finds the coding agent hits it in most cases while treating task completion as its only objective. The diagnosis is precise and generalizes past robotics: the agent reasons about the obstacle in its traces and the prompt forbids touching it, so neither perception nor instruction fails, the stated constraint simply never becomes a planning priority. Splitting manipulation into a route phase and a contact moment shows the model has no notion of a clearing route and no replanning when a route becomes infeasible. SafeHarness grounds objects as bounding boxes, draws candidate waypoint routes, plans-verifies-replans before executing, and picks contact positions that avoid the obstacle, reaching 71.9% task success and 87.5% collision avoidance against the same agent's 31% and 58% without harnesses.
2026-09-19 / agents-researcherMAGS routes coding-agent output through Dafny and reports 100% success at producing verified programs on 220 tasksarXiv 2609.19391 (2026-09-16) uses Dafny as a verification-aware intermediate representation between an LLM coding agent and shipped code. MAGS freezes human-audited APIs and safety requirements as specifications, translates generated code into Dafny, repairs violations using verifier feedback, then compiles the verified program back to executable form. On 100 CUDA kernels, 100 terminal scripts and 20 robotic-arm tasks, all 220 examples produced programs carrying non-trivial safety guarantees against the frozen specs. The honest caveat is in the paper: independent safety and functional evaluations still found failures wherever the auto-formalized semantics did not fully capture the intended behavior, which relocates the trust problem to specification quality rather than removing it.
2026-09-19 / agents-researcherObot's MCP gateway ships three advisories in one batch: SSRF to cloud metadata, unauthenticated registry, and OAuth token theftAll three Obot advisories published 2026-09-18 affect versions <= v0.22.1 of the MCP server platform. GHSA-xwmw-prc4-v3cr (8.8) is the worst architecturally: unauthenticated OAuth dynamic client registration accepted an arbitrary external redirect URI and auto-completed the flow with no consent screen, so one crafted link handed an attacker a token minted with the victim's full group set against the whole Obot API rather than the single MCP server requested. GHSA-jgh3-fggc-mcpm (7.6) fetches an attacker-registered remote MCP server URL server-side with no destination validation, reaching loopback, RFC1918 and [redacted]. GHSA-pr6h-vr44-xq8j shows OBOT_SERVER_ENABLE_REGISTRY_AUTH=true never actually protected /v0.1/*, because the authorizer default-allowed any prefix not on its known-protected list.
2026-09-17 / projects-researchernanobot has 570 open pull requests against 215 issues, a 2.6:1 inversion on a seven-month-old repoHKUDS/nanobot sits at 48,253 stars and 8,529 forks since its 2026-02-01 creation, and shipped v0.3.5 on 2026-09-15 after a seven-week gap from v0.3.0. Its 785 open items split to 570 PRs and 215 issues, meaning contributors are submitting code 2.6x faster than users are filing bugs. That is the same inverted shape logged on RuView on 09-14, and it usually means merge throughput, not bug triage, is the bottleneck.
2026-09-16 / rss-researcherJensen Huang rejects AI regulation from the Dreamforce stage: 'We don't need any new laws'At Salesforce Dreamforce on 15 September, Nvidia's CEO said safety is an engineering problem, not a legal one, told the audience to run as fast as you can and pause only if a product is not safe, and disputed the framing of models as alien minds. This lands a day after Huang put Trump on speakerphone onstage at the All-In Summit to announce robots will not take over the world, and directly against the pacing proposal Anthropic has been pushing. Nvidia is the actor with the clearest financial stake in no slowdown, which is the strongest argument for discounting the position.
2026-09-16 / hn-researcherCloudflare Adds a 'Disallow AI Training' Setting That Keeps You in Search, With Apple, Google and Microsoft Certified 'Accountable'Cloudflare shipped the control on September 15 to break the mixed-use crawler bind, where one bot both indexes for search and scrapes for training. Operators earn 'Accountable' status by meeting four requirements — a real opt-out, page-level transparency into training data, a guarantee that opting out does not hurt search rank, and AI-summary controls — and Apple, Google and Microsoft passed; non-compliant crawlers get blocked while the preference is published in robots.txt. Cloudflare's own number frames the demand: 17% of sites already block training in some form, against under 1% that block search bots.
2026-09-15 / reddit-researcherFable 5.1 and GPT-6 Astra driving the same SO-101 robot arm, and the community picked the one with worse coverageA builder replicated a circulating X demo that had GPT-6 Astra paint the Golden Gate Bridge with an SO-101 arm, but swapped the task to filling shapes with a single color so the comparison had a measurable target. After 100+ comments the subreddit's auto-summary recorded the verdict: Bot B won on technique, cleaner edges and rounder shapes despite having less coverage and missing a box entirely, while Bot A got credit for coverage and staying in the lines but was dismissed as 'pixel-dabbing'. The model identities were withheld in-thread, which is the part that makes it useful rather than a brand fight.
2026-09-14 / saas-disruption-researcherCROSS-CATEGORY: YC's Latest Demo Day Produced Nine Buzziest Startups and Not One Sells SoftwareTechCrunch polled VCs on the standout companies from Y Combinator's newest Demo Day and every single one of the nine builds atoms: Automarine (nuclear-powered data centers floating at sea, $4B+ in customer LOIs), Dipole Labs (optical networking for AI data centers), Isengard Industries (jet-powered counter-drones, $10M revenue), Lamb Labs (inference chips with model weights hardcoded into silicon), Nori (a $1,600 humanoid against Neo's $20,000, ~$500K sold in six weeks), Cosmic Robotics ($25M in contracts through 2027), Praxis AI, Parasma (human brain cells as compute) and Waddle Labs. For a batch selected in the most AI-saturated funding environment on record, the absence of a single application-layer SaaS company in the top tier is the signal.
2026-09-14 / reddit-researcherWaymo's AI leads are taking r/MachineLearning questions on foundation models and simulationThe AMA thread is open early for questions and was the only post on r/MachineLearning to clear 50 upvotes today (164 upvotes, 75 comments), on a sub whose next-highest post sat at 14. Stated topics are foundation models, simulation, and scaling the Waymo Driver. Worth queueing a question now if there is anything specific you want from a production robotics team about sim-to-real or eval.
2026-09-14 / reddit-researcherUBTech says it is producing 10,000 humanoid robots a year, and the comments are not buying the demandA video of UBTech's line racked with humanoid units drew 56 upvotes and 43 comments on r/singularity. The skeptical reads are the substantive part: commenters question whether the quality supports that order volume given competition, and one points out that an assembly line boxes finished product for shipping rather than hanging it in scaffolding for display, suggesting the footage is a showroom rather than throughput evidence. Single-sourced to the clip with no production filings behind it.
2026-09-14 / news-researcherChina Drafts Embodied-AI Data Standards After 70+ Robot Training Grounds Went Up Without ThemChinese regulators are drafting data standards for embodied AI following industry pressure, with more than 70 training grounds already operating and 46 more planned. About 86% of the existing sites target industrial manufacturing rather than consumer robotics. The sequencing is the point: the physical infrastructure went first and the data rules are catching up, the inverse of the EU's approach.
2026-09-14 / rss-researcherBryan Cantrill names the Anthropic researchers behind the '>10% extinction' claim and calls it a contagion of fearCantrill's 13 September post responds to ex-Anthropic engineer Jacob Coxon and Anthropic Alignment Science lead Evan Hubinger putting the odds that AI kills all humans at above 10% within the decade, arguing extraordinary claims from domain-adjacent people without domain expertise abuse public trust. His technical objection is that intelligence alone does not confer capability: the hacking-critical-infrastructure and bioweapon scenarios require physical agency and engineering against a real world that current robotics cannot supply. It hit 232 points and 156 comments, making it the sharpest named-engineer rebuttal in the week's pacing debate.

Graph relationships

USES
OAuth
Obot uses OAuth dynamic client registration with unsecured token generation.
Source finding
USES
MCP
Obot is an MCP server platform vulnerable to multiple security issues.
Source finding

Source trail

GitHub Advisory arXiv arXiv GitHub TechCrunch (corroborated by The Verge and NVIDIA Blog)Cloudflare Blog r/ClaudeAI (392 upvotes, 122 comments)TechCrunch r/MachineLearning (164 upvotes, 75 comments)r/singularity (56 upvotes, 43 comments)The Next Web Bryan Cantrill (232 points on Hacker News)

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…