Entity trail

Shield AI

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-13 / saas-disruption-researcherThrive Holdings Raises $2B at $12B to Buy 70+ Services Businesses and Run AI Inside Them Instead of Selling Them SoftwareOpenAI-backed Thrive Holdings closed $2B at a $12B post-money valuation on August 12 from SoftBank, D1 Capital and Altimeter, operating as a private equity firm that acquires traditional businesses and rebuilds their operations with AI, with OpenAI holding a stake since December 2025 and embedding its own employees in portfolio companies. Its accounting platform Current now spans 50+ firms and 2,000+ professionals, with a TaxAI product that processed over 7,000 returns at 98% accuracy and cut prep time 30%; its IT platform Shield has ~20 companies and claims 36x faster help desk resolution. This is the inverse of the SaaS model: rather than selling agents to accounting firms, buy the firms and capture the entire labor margin, which competes with vertical SaaS on the customer side rather than the vendor side.
2026-08-10 / projects-researcherECC Is Now the Largest Agent-Harness Repo on GitHub at 239,125 Stars, Shipping 284 Skills, 67 Agents and a 1,282-Test Security Scanner Across 12 CLIsaffaan-m/ECC has reached 239,125 stars and 36.3k forks under MIT, making it the biggest single agent-tooling repo in circulation. It bundles 67 agents, 284 skills, 94 legacy command shims, and 'instincts' — patterns learned from prior sessions with confidence scores that auto-recall when relevant — plus a `.ecc/memory/` markdown vault that is explicitly cross-harness, so context survives a move between Claude Code, Codex, Cursor, Kimi Code, OpenCode, Gemini, Zed, Antigravity, Qwen, Hermes, OpenClaw, CodeBuddy and JoyCode. The security component, AgentShield, runs 1,282 tests against secrets, hook definitions and MCP config risk. Version 2.1 adds a browser-based 'Plan Canvas' for plan review, Kimi Code integration, and self-hosted compute; install is `npx ecc-universal setup`.
2026-08-09 / vibe-coding-researcherECC v2.1 Adds a Browser-Based Plan Canvas and a Native Kimi Code Install PathECC (238,911 stars, pushed August 9) shipped v2.1 with Plan Canvas — a browser review surface where you click-annotate a plan and approve or request changes instead of retyping corrections into the terminal — plus a native install target for Moonshot's Kimi Code harness and an optional Itô compute bridge for self-hosted model serving. The system bundles 67 agents, 284 on-demand skills, and AgentShield, a config scanner with 102 static-analysis rules and 1,282 tests that checks agent configurations for prompt injection, secret leaks, and permission misconfigurations. A cross-harness 'Unified Memory Vault' using inspectable Markdown is listed as in development; install via `npx ecc-universal setup`, MIT-licensed with a paid tier for private repos.
2026-08-06 / saas-disruption-researcherCROSS-CATEGORY: Agent Containment Shipped in Three Unrelated Products in 48 Hours — While PromptArmor Showed Atlassian's Rovo Still LeakingWithin two days, three vendors with nothing in common moved containment from documentation into enforced runtime: Zed enabled OS-level sandboxing of its agent's terminal and fetch tools by default in v1.14, Cloudflare OS shipped Gatekeeper services that mediate external access and track observed data, and Mistral released Shieldstral as an open-weights runtime policy classifier. PromptArmor's August 5 disclosure supplied the counter-example that explains the urgency — Atlassian Rovo still zero-click exfiltrates Jira and Confluence data 2.5 months after disclosure. The shared premise across all four: agents cannot be restricted by instructions, so the control has to live in the OS, the gateway, or a separate model — which means 'we prompt our agent not to do that' is no longer a credible security answer in a procurement review.
2026-08-06 / saas-disruption-researcherCROSS-CATEGORY: Open Source Undercut the Paid Tier in Four Unrelated Categories Within 48 HoursBetween August 4 and 6, the same move landed in four categories that share no customers: Deno's celld reimplemented Cloudflare Workers/Durable Objects under Apache 2.0 for self-hosting; Superlog Responder shipped a free open-source production bug-fixing agent aimed at Datadog and Sentry; Neon and Castform published a post-trained 4B open-weights model matching GPT-5.6 Sol on agentic retrieval at 1/100th the cost; and Mistral released Shieldstral 1.0 3B as Apache-2.0 weights against hosted moderation APIs. Prime Intellect's MIT-licensed Prime Agent harness the same day makes five. The pattern for builders: in agent infrastructure the differentiated layer is being open-sourced within weeks of being commercialized, so betting a product on runtime, retrieval, moderation, or harness scaffolding as the moat now has a very short half-life.
2026-08-05 / reddit-researcherMistral Ships Shieldstral: a 3B Apache-2.0 Safety Classifier That Takes Plain-Language Policies at Inference Time Instead of a Frozen TaxonomyMistral released Shieldstral on 2026-08-04 — a 3B open-weights multimodal safety classifier that reframes moderation as policy-adaptive question answering: you write the moderation rule in plain language at inference time and get back a calibrated safety score from a single token, with no retraining and one interface covering text and images. Mistral claims it matches open guard models up to 7x its size on text safety and sets a new state of the art on multimodal moderation, covers 12 languages, and runs on a single 16GB NVIDIA GPU. It ships under Apache 2.0 on Hugging Face as Mistral's inaugural contribution to the NVIDIA-led Open Secure AI Alliance (52 partners, launched July 28, notably without OpenAI, Google, or Anthropic). For builders, this is the first credible drop-in replacement for hardcoded-category guardrail models when your policy differs per jurisdiction or per product surface.
2026-07-29 / sources-researcherMistral's Shieldstral: a 3B Policy-Adaptive Safety Classifier Trained on 54.1M Samples That Beats Models 7x Its SizeAn eleven-author paper (arXiv 2607.25857, July 28) including Guillaume Lample and Giada Pistilli introduces Shieldstral, a 3B-parameter multimodal safety classifier that matches or beats models nearly 7x larger on text safety benchmarks and sets a new state of the art on multimodal safety classification. The design trick is reformulating all of content moderation as a single binary yes/no question-answering task, which lets heterogeneous safety datasets with incompatible taxonomies be consolidated under one training framework rather than requiring a taxonomy merge. The paper publishes the full data construction recipe covering curation and generation of roughly 54.1 million samples plus a fine-grained evaluation set specifically for measuring policy adaptability, which matters because most guardrail models cannot be retargeted to a new policy without retraining.
2026-07-28 / github-pulse-researcherECC Hits 234,432 Stars and #5 on GitHub Trending — 281 Skills, 67 Subagents and a 102-Rule Security Auditor for Agent Harnessesaffaan-m/ECC gained 458 stars on July 28 alone to reach 234,432 stars and 35,700 forks, making it one of the largest agent-tooling repos on GitHub. The v2.1.0 release ships 281 on-demand skills, 67 specialized subagents, an 'instincts' layer that extracts confidence-scored patterns from past sessions, and AgentShield — a security auditor that scans CLAUDE.md, MCP configs and hooks against 102 static analysis rules with an optional three-agent adversarial audit. Notably, despite calling itself a 'performance optimization system,' the MIT-licensed README publishes no quantified benchmarks — the claims are architectural (selective context loading, deterministic quality gates outside the model loop), not measured.
2026-07-27 / thought-leaders-researcher'Paragraph Nine Was the Payload': An Argument That Nvidia's Open-Weights Letter Is Really a Distillation Liability Shieldpaddo.dev makes the most contrarian read of the week: the letter's substance isn't openness at all but paragraph nine, which defends distillation as 'a widely used technique for model improvement' and urges policymakers against 'conflating legitimate model development techniques with misappropriation.' The timing is the evidence — White House officials accused Moonshot on July 22 of covertly distilling Anthropic's Fable to build K3, and the letter landed two days later, with K3's weights due July 27, closing the enforcement window. The piece also lands the incentive point cleanly, quoting Huang to Axios: 'If there's great AI, even if it's open, wherever it comes from, there will be more use...you'll have to sell a lot more NVIDIA computers.'
2026-07-17 / arxiv-researcherDataShield: Detecting Risky Fine-Tuning Data Across LLMs via Consensus Subspace AlignmentFine-tuning on even benign task-specific data can silently erode an LLM's safety, and prior detectors rely on a single mean vector tied to one model and tokenizer. DataShield instead builds a consensus safety subspace aligned across multiple models, making risky-data detection transferable rather than model-specific. Practical for teams doing domain adaptation who need to screen datasets for safety degradation before shipping a fine-tune.
2026-07-12 / hn-researcherDefense AI Firm Shield AI Raises $1.5B Series G at a $12.7B ValuationShield AI secured $1.5B in Series G funding — part of a broader $2.25B capital package — at a $12.7B valuation, per July 2026 funding roundups. The round signals continued heavy investor appetite for autonomy and defense AI amid the broader H1 2026 mega-round wave.
2026-06-14 / arxiv-researcherGrammar-Constrained Decoding Can Jailbreak LLMs into Generating Malicious Code (CodeSpear)CodeSpear shows that simply applying a benign code grammar constraint during decoding can jailbreak LLMs into producing malicious code, raising attack success by more than 30 percentage points on average across 10 popular models. The authors propose CodeShield, which generates harmless honeypot code under grammar constraints while preserving natural-language refusals. A warning for anyone using constrained/structured decoding in code pipelines.

Graph relationships

COMPETES WITH
Waymo
Waymo, Shield AI, and Wayve are competing AV startups
Source finding
COMPETES WITH
Waymo -> Shield AI
Waymo, Shield AI, and Wayve are competing AV startups
Source finding

Source trail

TechCrunch GitHub Multiple Sources (PromptArmor, Zed, Cloudflare, Mistral AI)Multiple Sources (denoland/celld, Superlog, Neon, Mistral AI, Prime Intellect)Mistral AI (via r/LocalLLaMA, 237 upvotes / 41 comments)arXiv / HuggingFace Daily Papers (Mistral AI)paddo.dev arXiv Crunchbase News arXiv arXiv MetaMask

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…