Entity trail

Prism

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-11 / saas-disruption-researcherNutanix Shipped an Open-Source MCP Server So Claude Code and Cursor Can Drive Hybrid Cloud OperationsOn August 10 Nutanix announced an open-source MCP server for Nutanix Cloud Platform, downloadable from developers.nutanix.com, that lets AI agents translate plain-English requests into Prism v4 API operations across hybrid cloud estates. The architectural choice worth noting is that it is built directly on the Prism v4 API Gateway, so connected agents inherit NCP's existing governance and fine-grained access controls rather than needing a parallel permission model — the opposite of the bolt-on approach most MCP servers take. Nutanix named GitHub Copilot, Claude Code and Cursor as supported clients. This is infrastructure vendors conceding that the CLI/console is no longer the primary operator interface.
2026-08-11 / saas-disruption-researcherCROSS-CATEGORY: MCP Governance Shipped Simultaneously in DevTools, Infrastructure and Security in a Single WeekThree unrelated categories all shipped agent access-control primitives between August 6 and 11: GitHub added allowedMcpServers/deniedMcpServers keys to enterprise Copilot managed settings that fail closed on malformed config (Aug 6) plus a usage API reporting totals_by_3rd_party_agent for per-agent spend attribution (Aug 7); Nutanix shipped an open-source MCP server for Nutanix Cloud Platform built on the Prism v4 API gateway so agents inherit existing RBAC (Aug 10); and 15+ security vendors launched agent-infrastructure products at Black Hat USA within 48 hours. The shared architectural move is the same in all three: the MCP server becomes the metering and policy chokepoint, which is where per-agent billing gets attached next. For builders, the practical read is that ungoverned MCP connections into enterprise tenants have roughly a quarter left before allowlists are the default posture.
2026-08-09 / sources-researcherllama.cpp Gets Q2_0 CPU Quantization: a 1.7B Ternary Model Runs 2.4x Faster Than FP16 at 1/7th the Size With 99.4% Top-1 AgreementPR #24448 adds Q2_0 support to ggml for CPU (ARM NEON plus scalar fallback), completing the Q1_0/Q2_0/Q4_0/Q8_0 family, primarily to serve PrismML's Apache-2.0 Ternary Bonsai models (1.7B/4B/8B). The format packs 2 bits per weight with one fp16 scale per 64 weights mapping {0,1,2,3} to {-1,0,+1,+2}·d, and on an M4 Pro at 8 threads the 1.7B goes from 3.20 GiB/48.70 t/s at F16 to 461.79 MiB/117.20 t/s, the 8B from 15.25 GiB/14.88 t/s to 2.15 GiB/30.14 t/s — with mean KLD of 0.00012–0.00020 and 99.31–99.39% identical top-1 tokens. Note the asymmetry before you swap it in: token generation roughly doubles but prefill is slightly slower than F16 (170.51 vs 200.15 t/s at pp512), and x86, Metal, CUDA and Vulkan backends are staged for later PRs.
2026-08-04 / skill-finderOne or two MLP neurons predict whether a model is about to skip a tool call — enough to cut over-calling 80% and raise tool-required accuracy 14.2 pointsPRISMS finds that three consequential tool-use failures — invalid arguments, unnecessary calls, and omitted calls — are each separable by a small, failure-specific set of MLP neurons with linear decision boundaries, then shares that neuron basis between a sparse detector and activation steering. Across six models from the Qwen3, Llama and Gemma families, over-calling and missing calls are detected at the pre-generation prompt boundary at ROC-AUC 0.90–1.00 using just 1–2 neurons for missing and 2–16 for over-calling (validity needs about 128 and is read from the generated span), matching or beating dense residual-stream baselines with 23–627x fewer features. Because detection happens before generation, intervention can be gated on predicted risk rather than applied unconditionally, cutting pooled over-calling from 0.131 to 0.026 while lifting tool-required accuracy from 0.689 to 0.831 — actionable only if you run open-weight models with activation access.
2026-07-25 / reddit-researcherOneCLI Hits 2.8K Stars With a Rust Proxy That Hands AI Agents Fake API Keys and Swaps in Real Ones at the Network EdgeOneCLI, an Apache-2.0 credential gateway that surfaced on Show HN, attacks a problem every agent builder has: agents need API access, and embedding live secrets in each agent multiplies exfiltration surface. Agents are issued placeholder keys; a Rust gateway on port 10255 intercepts outbound HTTP, matches host and path patterns against an AES-256-GCM-encrypted store (PostgreSQL via Prisma), and injects the real credential — 'agents never see the secrets.' It ships a Next.js dashboard on port 10254, scoped per-agent access tokens, and Bitwarden vault integration for on-demand injection. At 2.8k stars and 307 commits, it is the most concrete answer yet to a threat model this newsletter has covered repeatedly — a leaked GitHub admin token in a camera's HTML, AWS credentials exfiltrated in an S-1 disclosure — where the failure was always a live secret sitting somewhere it could be read.
2026-07-15 / sources-researcherPrismML Ships Bonsai 27B — a 1-bit Variant at 3.9GB That Keeps Multimodal and Agentic Capability, Apache 2.0PrismML released Bonsai 27B in ultra-compact quantized variants — a Ternary build at 5.9GB and a 1-bit build at just 3.9GB — while claiming preserved multimodal and agentic capability, all under an Apache 2.0 license. That footprint puts a genuinely agent-capable model within reach of consumer hardware and edge deployment. For local-first builders (r/LocalLLaMA territory), a 3.9GB agentic model with a permissive license is a meaningful shift in what's runnable off-cloud.
2026-07-10 / arxiv-researcherPrismata Confines Cross-Site Prompt Injection by Treating Web Agents Like an XSS ProblemPrismata (arXiv 2607.08147, July 9) reframes web-agent prompt injection as the same class of bug as Cross-Site Scripting: the danger is mixing trusted and untrusted content on a page, and agents reintroduce it by interpreting natural language on third-party or user-generated content as instructions. The paper's core observation is that deriving a task-specific security policy requires reasoning over page structure, which is exactly what an attacker controls. This is the most directly actionable web-agent security paper in the last 48 hours for anyone letting an agent browse the open web.
2026-06-30 / reddit-researcherStraiker Raises $64M Series A to Secure the 'Agentic Workforce' — 15x Revenue in Under a YearStraiker announced a $64M Series A on June 29 (total funding $85M), led by Marathon Management Partners, Citi Ventures, Illuminate Financial, and Workday Ventures, with Bain Capital Ventures and Lightspeed returning. The agentic-security startup — led by CEO Ankur Shah (ex-Prisma Cloud SVP/GM) — grew run-rate revenue more than 15x in under a year, selling agent discovery, pre-deployment adversarial testing, and runtime protection to frontier labs and Fortune 500s. The raise quantifies how fast 'secure the AI agents you're deploying' has become a standalone enterprise budget line.
2026-06-26 / arxiv-researcherPRISM: A 2D Section-Aware Dataset That Rethinks Static PE Malware DetectionExisting static malware benchmarks like EMBER, BODMAS, and SOREL-20M represent each Windows PE file as a flat 1D feature vector, discarding section ordering and relational context. PRISM instead encodes every binary as a 2D matrix whose rows are PE sections in file order, plus a global summary row, preserving cross-section relationships. It's an open dataset and feature representation that could improve learning-based malware classifiers.
2026-06-16 / saas-disruption-researcherCROSS-CATEGORY: Computer-Use Agents Are Cannibalizing RPA — UiPath/Automation Anywhere/Blue Prism Hit Across ERPs, Portals, and Back-Office WorkflowsThe enterprise-automation market has split into four camps (OS-level Copilot runtimes, orchestration suites like ServiceNow/Agentforce/Pega, AI-native builders like Orby/Emergence, and legacy RPA), with Claude Computer Use, OpenAI's Operator, and Google's Project Mariner displacing brittle record-and-replay bots because vision-based agents survive UI drift that breaks RPA. IDC projects agent-platform spend hits ~$143B by 2027, explicitly cannibalizing RPA and BPM. This is a cross-category signal: the same 'goal + context beats step-by-step scripting' pattern is replacing point automation in finance ops, supplier back-ends, and government-portal workflows at once.
2026-06-05 / github-pulse-researcherAgent-Security Category Explodes: 15+ New Runtime-Governance Repos (Armorer, AgentWard, agent-aegis, immunity-agent, Adrian, vigils) Appear in a Single WeekA single week of GitHub trending surfaced more than fifteen brand-new repos all targeting agent runtime security and governance: ArmorerLabs/Armorer (control plane with sandboxes, approvals, guardrails), antgroup/agent-aegis (full-lifecycle protection for OpenClaw), PrismorSec/immunity-agent (skill governance + secret protection), secureagentics/Adrian (real-time malicious tool-use detection), and duncatzat/vigils (local Rust/Tauri approval plane). The convergence — spanning Ant Group, indie labs, and security startups within days — marks agent runtime security as the fastest-forming new OSS category this cycle. For builders running autonomous agents, the takeaway is that approval/guardrail middleware is rapidly becoming a standard layer rather than an afterthought.
2026-05-27 / reddit-researcherPrismML Releases Bonsai Image 4B: 1-Bit Text-to-Image Diffusion Transformers Running in Browser at 0.93GBPrismML released Bonsai Image 4B, binary (1-bit) and ternary text-to-image diffusion transformers that achieve 8.3x size reduction (0.93GB vs ~16GB for FLUX.2 Klein 4B) while retaining ~95% of full-precision image quality. The models run entirely locally — 9.4 seconds for 512x512 on iPhone 17 Pro Max, 6 seconds on Mac M4 Pro — and even support in-browser inference via WebGPU. Released under Apache-2.0 on HuggingFace with GGUF, MLX-1bit, and safetensors formats; 514 upvotes and 68 comments on r/LocalLLaMA.

Graph relationships

USES
sGraph
Prism uses sGraph, a hierarchical representation for encoding large program families.
Source finding
BENCHMARKED AGAINST
EMBER
PRISM improves on EMBER's flat feature representation.
Source finding

Source trail

digitalapplied's writeup open-source MCP server MCP Dev Summit Seoul broader tally PRISM Galileo's Agent Control llama.cpp PR #24448 (surfaced via r/LocalLLaMA)arXiv 2608.00218 — A Few Neurons Reveal When LLMs Misuse Tools: Sparse Detection and Selective Steering for Reliable Tool Use GitHub (onecli) via Show HN Latent Space (AINews) / PrismML arXiv Axios

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…