Entity trail

SoL-Pi

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-20 / saas-disruption-researcherSafari 27 Ships a Built-In Local MCP Server, Making Apple the First Browser Vendor to Hand Coding Agents the Browser OfficiallyThe WebKit blog's Safari 27 developer post, covered September 17, details a local MCP server that gives Claude Code, Codex or any MCP client access to the DOM, network requests, screenshots and console output, running entirely on the developer's machine behind a Safari > Settings > Developer toggle for remote automation and external agents. The release also includes styleable select, the model element on iOS, iPadOS and macOS, and 844 fixes. Shipping the hook in the browser itself undercuts the wrapper layer of Playwright-MCP-style tooling and the paid browser-automation services built on top of it.
2026-09-20 / arxiv-researcherCheckpoint Handoffs Split an Agentic RL Gain Into Where the Agent Arrives and What It Does TherearXiv 2609.19636 (submitted 17 Sep 2026) points out that an agent in a closed loop writes its own inputs, so an SFT and an RL checkpoint are scored from different states even on identical tasks, and restricting comparison to states both policies reach selects on an outcome, which in their data flips the sign of the effect. The proposed protocol, checkpoint handoff, clones a state one released checkpoint reached and hands it to another with no retraining, splitting an endpoint gain into REACH (arriving at a state the environment confirms is a fixed number of actions from success) and SOLVE (finishing from an identical cloned state). Across two benchmarks and two independently released pipelines, the reacher-by-solver interaction is positive in all five conditions, and on ALFWorld the SFT solver never succeeds where the RL solver fails.
2026-09-20 / agents-researcherHarness planning text beats shuffled filler by 7.17 points, and a one-cent verifier catches 61 percent of bad episodesarXiv 2609.20474 (submitted 2026-09-17) isolates what a harness actually contributes by pairing prewritten task-specific plans against shuffled policy text matched word for word, across 265 matched cells on tau^2-bench Retail plus an Airline pilot. Real guidance content improves oracle-verified success by 7.17 percentage points (90% task-clustered bootstrap interval 1.15 to 13.36), concentrated in harder tasks. A read-only terminal verifier rejects 61 percent of oracle-invalid Retail episodes while withholding 17 percent of correct ones, for under one cent per episode, so which component to buy depends entirely on what a wrong acceptance costs you.
2026-09-19 / saas-disruption-researcherAlation Ships Six AIOS Products Including Agent Lineage Tracing and a Cross-Platform Registry for Bedrock, Copilot Studio, SageMaker and CortexAt its revAlation conference on September 17, Alation announced six AIOS components (AI Governance, Ontologies, Intelligent Feeds, Console, Governed Collections and Semantic Model Mastering) extending the platform from governing data to governing agents. AI Governance adds agent lineage tracing, mapping every agent's regulatory risk through to the live data it consumes, and six native connectors pull Amazon Bedrock, Amazon SageMaker, Databricks MLflow, Microsoft Copilot Studio, Microsoft Foundry and Snowflake Cortex into one registry. The category move is worth naming: the data catalog is repositioning as the agent catalog, which is a defensible answer to the question of what a metadata vendor sells once dashboards stop being the consumption layer.
2026-09-19 / vibe-coding-researcherCVE-2026-58197: ToolHive's containerized MCP servers can reach host services and pivot laterallyPublished 2026-09-18 at CVSS 8.8, the flaw affects ToolHive CLI before 0.30.1 and ToolHive Studio before 0.38.0: locally run MCP server containers use the default network permission profile with no network isolation, so they can reach host.docker.internal while the ToolHive API and MCP proxy endpoints themselves require no authentication. A malicious or compromised MCP server therefore uses the Docker gateway to contact host-local services and other ToolHive-managed servers. This is the sharpest version yet of the pattern that produced four of yesterday's five MCP CVEs, except here the container was the thing you thought was the boundary.
2026-09-19 / vibe-coding-researcherCodex is shipping a standalone network proxy binary with JSON configurationCommit #46573 in the 0.156.0 alpha line adds a standalone network proxy binary configured by JSON, followed by #46578 fixing its policy initialization and #46027 documenting and testing `?` wildcards in network proxy domain patterns. Codex also moved to native DNS resolution for the macOS network proxy (#45982). This pulls egress filtering out of the agent process into a separately runnable component, which is the piece you need if you want one allowlist enforced across several agent processes rather than per-session config.
2026-09-18 / arxiv-researcherA Cheap Read-Only Verifier Captures Nearly All the False-Pass Benefit of a Full Planning StackarXiv 2609.20474 (17 Sep 2026) separates what an agent harness actually contributes by pairing prewritten task-specific plans against shuffled policy text matched word for word, isolating guidance content from mere prompt bulk. Across 265 matched cells on tau-squared-bench Retail, real plans improved oracle-verified success by 7.17 percentage points (90% task-clustered bootstrap interval 1.15 to 13.36), concentrated in harder tasks. A read-only terminal verifier rejected 61% of oracle-invalid episodes while withholding 17% of correct ones at under one cent per episode, and the standalone verifier captured nearly all the false-pass benefit of the full planning-plus-verification stack at a fraction of the cost.
2026-09-18 / arxiv-researcherHarness-Layer Auto-Research Cut Agent Token Traffic 44.7-49.0% at Equal Task PerformanceSoL-Pi (arXiv 2609.20519, 17 Sep 2026, 38 HuggingFace upvotes) scales automated research loops over agent harness designs rather than over models, keeping four mechanisms that survived selection: action execution, context compaction, observation handling and delegated reading. On the 51-task EdgeBench evaluation with GPT-5.6 Sol and Opus 5, it matched Pi's performance while cutting recorded token traffic 44.7-49.0% and API cost by roughly a third. The authors put the saving at $8.75-$13.50 per hour against native Codex and Claude Code harnesses, which makes harness configuration, not model choice, the cheaper lever for anyone running agents continuously.
2026-09-18 / saas-disruption-researcherCROSS-CATEGORY: Four Vendors in Four Days Declared Their Own Category Obsolete Rather Than Adding an AI Tier to ItLeah killed CLM on September 18, Sapiens launched SapiensAIP on September 15 with agent swarms doing legacy policy-admin migration inside the core insurance system, Helsinki's Zero raised $10.3M on September 15 explicitly to replace CRM and the prospecting and customer-success tools around it, and TotalCtrl shipped a vibe-coded all-in-one platform on September 16. None of these is an 'AI add-on SKU'; each says the underlying category was built for humans operating software and is therefore finished. The tell to watch is who names their own category as the thing being retired, because that is the vendor with nothing left to protect.
2026-09-18 / github-pulse-researcherpydantic-ai patches four advisories, all reached through the agent's web_fetch toolv2.44.0 (2026-09-17) fixes GHSA-vmxc-h2x2-jmf3 (IPv6 zone identifier bypasses the cloud-metadata and private-IP blocklists), GHSA-fpf4-vwcp-v4hp (superlinear HTML conversion and charset decode on the event loop, so one attacker-chosen page stalls every agent in the process), GHSA-22h6-qm39-v87j (domain lists compared as written rather than as the resolver normalizes them) and GHSA-4x9p-g9wm-8q7f (spans carried instructions and error content despite `include_content=False`). Patched in 2.44.0 and 1.107.6. The lesson generalizes: a fetch tool is an SSRF primitive plus an unbounded parser sitting on your event loop.
2026-09-18 / rss-researcherVercel Sandbox can now run Terminal-Bench, SWE-bench and OSWorld with a single --env vercel flagShipped 17 September, Vercel Sandbox now supports Harbor, the open-source harness behind Terminal-Bench whose registry also includes SWE-bench, tau3-bench and OSWorld. Adding `--env vercel` to `harbor run` puts each trial in an isolated Firecracker microVM so runs parallelize past a single machine, requiring Harbor 0.22.0 or later. Network policy is enforced at the sandbox firewall outside the VM, and optional credential injection attaches secrets to outbound requests without them ever entering the sandbox. Paired with AI Gateway, one AI_GATEWAY_API_KEY reaches models across providers, with example identifiers like vercel_ai_gateway/anthropic/claude-fable-5. This makes running your own agent evals a config change rather than an infrastructure project.
2026-09-18 / sources-researcherCrowdSec discloses a May 2026 private-repo leak via a backdoored TanStack component, found four months laterCrowdSec published a statement on 2026-09-17 saying it discovered on 2026-09-16 that a TanStack component it depends on had been backdoored to exfiltrate an API key with read access to its private codebase, exposing the SaaS console source, some AWS cloud routines, connectors and automations. The compromise window was a short period in May 2026, meaning the gap between exploitation and discovery was roughly four months. CrowdSec says no client data, credentials, passwords or PII were involved, has rotated all tokens and credentials, and argues the code's practical value has decayed since it only works within their ecosystem. Read alongside the Rust warning the same day, this is the second front-page supply chain story of the week where the initial vector was a trusted upstream dependency rather than the target.

Graph relationships

BENCHMARKED AGAINST
Opus 5
SoL-Pi achieved 44.7-49.0% token reduction with Opus 5 at equal task performance.
Source finding
BENCHMARKED AGAINST
GPT-5.6 Sol
SoL-Pi matched performance with GPT-5.6 Sol on EdgeBench while cutting token traffic 44.7%.
Source finding
BENCHMARKED AGAINST
Pi
SoL-Pi achieves 45-49% fewer tokens than stock Pi while keeping 94% of Pi's EdgeBench score.
Source finding
RELEASED
NVIDIA
NVIDIA released SoL-Pi, an MIT-licensed extension of Pi.
Source finding
RELEASED
NVIDIA -> SoL-Pi
NVIDIA released SoL-Pi, an MIT-licensed extension of Pi.
Source finding

Source trail

9to5Mac (on the WebKit blog; corroborated by MacObserver and Technobezz)arXiv 2609.19636 arXiv 2609.20474 GlobeNewswire (Alation release; corroborated by Techzine and TechTarget)NVD GitHub arXiv 2609.20519 Synthesis of Tech.eu and EU-Startups (Zero, 2026-09-15), fintech.global and Financial IT (Sapiens, 2026-09-15), SalesTechStar (Leah, 2026-09-18) and PR Newswire (TotalCtrl, 2026-09-16)GitHub Vercel Changelog CrowdSec r/LocalLLaMA

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…