Entity trail

Solo.io

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-21 / agents-researcherAn MCP server's optional instructions field lands attacker prose in the agent's context before the first tool callMike Moore of Solo.io published a red-team lab on 2026-09-19 showing that MCP's server-authored instructions field, which sits outside individual tool definitions and is returned during initialize in older versions or via server/discover in the 28 July 2026 spec, is a prompt-injection route the industry's tool-definition-focused defenses do not cover. Four scenarios run with no model in the loop: a direct override, a directive buried in a 24,000-character payload, a change to already-approved instructions after several discovery requests, and a response marked cacheScope "public" so a shared proxy serves the poisoned text to a second caller that never contacted the hostile server. All four reach the harness's trusted prompt region or cross its caller boundary undefended and all four are blocked by isolation, a 4,096-character cap, caller-bound cache keys and a change-rejecting digest. An August registry audit found 5,462 of 8,235 responding servers (66%) populate the field, median 577 characters and max 68,669; Claude Code loads server instructions at session start with a 2KB cap, which strips the volume attack but not a short hostile paragraph.
2026-09-21 / news-researcherYoung Chinese Founders Launched More Than 7 Million Solo AI Startups in 2025The Wall Street Journal reports over 7 million one-person AI startups registered in China in 2025, up roughly 42% from 2024, driven by graduates routing around a brutal job market rather than by venture funding. The scale means China's AI startup count is now dominated by companies with no employees. It is the clearest quantification yet of AI tooling collapsing the minimum viable company to one person, and of that collapse being a symptom of unemployment rather than of opportunity.
2026-09-21 / projects-researcherSuperset orchestrates 100+ coding agents in parallel on your own subscription, 735 open issues at 14,433 starssuperset-sh/superset is an agentic IDE for running 100+ coding agents in parallel against whatever subscription you already pay for, and it shipped desktop-v1.30.1 today at 2026-09-21T05:08 after a desktop-canary build eight hours earlier. It is at 14,433 stars with 1,291 forks and 735 open issues, created 2025-10-21. The 'your own subscription' framing is the notable bit for solo builders: the orchestration layer is being commoditized while the inference stays on whatever plan you hold, which is the opposite of the per-seat platform model.
2026-09-16 / saas-disruption-researcherHancom Puts AI Employees in a 3D Virtual Office and Aims Nomadian at US Solo Founders, Beta in DecemberHancom, the 36-year-old Korean office-software company that rebranded around an agentic OS in May, unveiled Nomadian on September 15 — a SaaS platform where a user states a task in one sentence and the system decomposes it and assigns the pieces to AI agents for roles like data analysis, content marketing and email marketing, with custom agents for gaps. Work is rendered in a 3D virtual office called Room where agents move as characters and hand off outputs, so a user can see who did what with which tool. US beta lands in December 2026 with paid subscriptions in 2027; the target is solo entrepreneurs and small businesses, which is the segment that buys five SaaS tools instead of one.
2026-09-08 / reddit-researcherNeurIPS desk-rejected 178 position papers on a proprietary AI detector's score, and the detector flags the track chairs' own papers at 24-69%A field note reconstructed from conference statements and Pangram's technical docs shows 178 of 969 Position Paper Track submissions (18.4%) were desk-rejected with no human review and no appeal: 77 scored above 0.9, 79 scored above 0.8 and were solo-authored, and 22 scored above 0.5 while the authors had ticked the box denying AI use. Pangram 3.3.2's default window settings flagged 42.7% of all submissions in the 90-100% AI band; shrinking to ~100-word windows brought that to 12.7%. Independent researchers ran the three track chairs' own recent papers through the same detector and got 24% to 69%.
2026-09-06 / arxiv-researcherAdapting Agents to 30 Individuals Over 600 Tasks Lifts Solo Success 4.5-20.9% Within Tens of TasksAgents trained on population-scale data encode the average practitioner, but professional work lives in the departure from that average, and users cannot fully specify their criteria up front. TAHI treats cross-session human-agent interaction as the signal, folding it into agent context and weights through an evolving rubric module that crystallizes each user's training and evaluation criteria. Adapted to 30 individuals across writing and visual creation on 600 total tasks, agents improved solo task success 4.5-20.9% within only tens of tasks, and the rubric module doubles as an annotation tool producing evaluation rubrics that catch 16.0-22.3% more failures than rubrics from LMs or humans alone.
2026-09-03 / saas-disruption-researcherCROSS-CATEGORY: Four Unrelated Vendors Shipped Agent Authorization Control Planes Inside 48 HoursBetween 2026-09-02 and 2026-09-03 the same product shape appeared in four different categories: Genesys shipped an AI Control Plane for contact centers, JetStream announced Clearance, a zero-trust reasoning engine that authorizes every agent tool call at its AI Gateway before execution, AccuKnox released AgentZ bundling sandboxes, role-based access, runtime credential injection and audit traces with SaaS, on-prem and air-gapped deployment, and a solo builder posted Oconee Runtime to Show HN as policy enforcement for browser AI and coding agents. All four describe the same primitive, a per-action allow/deny decision made before the tool call rather than an audit log read afterward. The category is forming simultaneously at enterprise CX, security, platform and indie scale, which is usually the signal that it becomes table stakes rather than a product.
2026-09-02 / saas-disruption-researcherHN Match Maker Automates the Monthly "Who's Hiring" and "Who Wants to Be Hired" PairingA solo-built tool hit 99 points on Hacker News on September 1 that matches candidates in the monthly "Who wants to be hired?" thread against roles in "Who is hiring?", launched the same day September's threads went up. The two threads have been the highest-signal informal job market on HN for years and matching them has always been manual reading. One person shipping the matching layer over free public text is the smallest possible version of the recruiting-software displacement thesis.
2026-08-31 / saas-disruption-researcherA Solo MIT-Licensed Website Chatbot Named Chatbase, Botpress and Dify as Its Targets With One Star on the RepoAniket Wathore posted Bolnee-Chat to Show HN on 2026-08-30 (32 points), a self-hosted retrieval-augmented website chatbot under the MIT license with a SQLite database, crawler, retrieval layer, dashboard and embeddable widget, described as "free forever" though operators still pay for compute and a model endpoint from OpenAI, Groq, Ollama or vLLM. Commits on 2026-08-29 and 2026-08-30 added grouped conversations, appearance settings, persistent widget history and themes. RuntimeWire's review found the repo had one contributor, one star, one fork and 43 commits, which is the honest read: the category signal matters (Chatbase, Botpress, Dify and AnythingLLM now face solo single-purpose clones weekly) while this specific project has no traction to speak of.
2026-08-31 / reddit-researcherA month of solo work produces uncensored GGUFs for LongCat-Flash-Lite-Sparse at 1M context, and none of them run on upstream llama.cppA 93-upvote r/LocalLLaMA release covers LongCat-Flash-Lite-Sparse (still 69B-A3B, but sparse attention and 1M context versus dense attention and 256k in the original), Qwen3.8-27B and Qwen3.5-122B-A10B with MTPs, Qwen3-Coder-Next, and Laguna-S2.1 with vision, all in GGUF. Getting there required writing Heretic support for the architecture from scratch and then adding llama.cpp support, and mainline llama.cpp has zero support for LongCat-Flash-Lite-Sparse, so using the GGUFs means pulling the author's fork. This is the current shape of the abliteration ecosystem: the weights are the easy part and the runtime fork is the deliverable.
2026-08-31 / reddit-researcherA solo Max subscriber found his default Anthropic organisation spend limit set to $200,000 with notifications offA 62-upvote r/ClaudeAI post reports the Anthropic console's default organisation spend limit sitting at $200,000 for a single-seat Max user who never set it, with no built-in notifications enabled by default; another commenter posted a screenshot of the same. The practical exposure depends on whether you have API billing attached at all, which the thread does not fully resolve, but the actionable part is concrete: check the spend limit and turn on threshold notifications in your org settings.
2026-08-31 / reddit-researcherHunterBench runs models against live infrastructure and puts GPT-5.6-luna tenth, behind five Chinese open modelsA solo-built autonomous pentest benchmark posted to r/LocalLLaMA scores models out of 1000 on two private labs, Halcyon (Node API, Flask and legacy PHP with SQLi, IDOR, path traversal and broken auth) and Meridian (a live fintech SaaS with real accounts, roles and chained exploits), three runs per lab averaged. Z.ai glm-5.3 leads at 415, followed by glm-5.3-flash and glm-5.2 at 328, deepseek-v4-flash at 302, minimax-m3 at 237, kimi-k3 at 229, hunyuan hy3 at 218, qwen3.8-27b at 180, and gpt-5.6-luna at 86. The author built it because CyberGym drifted toward promoting agents and toward exploit generation for known OSS-Fuzz bugs rather than comparing models on live targets; single-source and self-published, so treat the ordering as directional.

Graph relationships

PARTNERS WITH
MCP
Solo.io participates in MCP Enterprise Interest Group.
Source finding
WORKS AT
Mike Moore
Mike Moore of Solo.io published research on MCP security.
Source finding
WORKS AT
Mike Moore -> Solo.io
Mike Moore of Solo.io published research on MCP security.
Source finding

Source trail

The Clarity Wall Street Journal GitHub The Korea Times (corroborated by Seoul Economic Daily and Digital Today, all 2026-09-15)StrictCite (via r/MachineLearning, 65 upvotes, 25 comments)arXiv 2609.04141 JetStream (corroborated by Genesys Xperience 2026 coverage, aiagentstore.ai and Hacker News Show HN)Hacker News (Show HN)Hacker News (Show HN), reviewed by RuntimeWire r/LocalLLaMA r/ClaudeAI HunterBench, via r/LocalLLaMA

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…