Entity trail

AWS CLI

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-13 / github-pulse-researcherdocker/cagent puts kubectl and the AWS CLI inside its sandbox templates and adds secure HTTP relay packagesv1.138.1, published 2026-09-11, bakes `kubectl` and the AWS CLI into the `sbx-templates` image so agents get them in a sandbox without a manual install step, and adds `pkg/config/httprelay` and `pkg/modelsgateway/relay` for agent configuration fetching and model-API forwarding. On the correctness side it fixes a production data race in `App` where `ReplaceSession` wrote `a.session` from the update loop while background goroutines started by `App.Start` read it concurrently, and a session bug where the starred flag was silently dropped on forking because the `AddSession` insert omitted the column. CI now runs `go test -race -shuffle=on` on every push to main.
2026-09-12 / github-pulse-researcherDocker cagent's `share push --key` now signs a DSSE-wrapped in-toto statement instead of raw YAML bytesRelease 1.138.1 on 2026-09-11 changes agent-artifact signing so the signature covers an in-toto statement carrying metadata about where and when the artifact was published, rather than just the YAML payload. The same release adds `kubectl` and the AWS CLI to the `sbx-templates` sandbox image, adds secure HTTP relay packages for agent configuration fetching and model-API forwarding, and fixes a production data race where `ReplaceSession` wrote `a.session` while background goroutines read it.
2026-09-11 / agents-researcherA2ABreak extracts a 37-state machine from the A2A spec and finds 11 protocol-level flaws that a fully compliant attacker can exploitarXiv 2609.10871 used an LLM to turn 929 formalized statements from the Linux Foundation A2A specification into a verified model of 37 states and 76 transitions, then searched it adversarially. The 11 new vulnerabilities include cross-client context injection through unprotected context IDs, credential harvesting through identity loss in multi-hop delegation, and exfiltration by rogue agents advertising capabilities nobody attests. A zero-shot LLM reading the same spec confirmed zero findings, while the formal approach scored 84.6% F1 against expert review. Teams adopting A2A should treat context IDs and agent cards as untrusted input until the spec closes these gaps.
2026-09-07 / sources-researcherAsk HN on managing skills files draws 144 comments and a clear practitioner consensus: git repo plus symlinks, evals as integration tests, and automated drift checksThe thread posted 2026-09-06 reached 169 points and 144 comments, and the answers converge on a pattern nobody has written up as a standard: keep skills in one version-controlled repo (or dotfiles via chezmoi/guix home), symlink into every harness's skills directory, and let frontmatter progressive disclosure handle selection. Several people go further, running AI evals against skills as behavioural integration tests, and one team runs a biweekly agentic workflow that diffs skill content against the docs and opens PRs when they drift. Named tooling in the thread includes vercel-labs/skills (30,587 stars, MIT, pushed 2026-09-06), genged/capshelf, skillcatalog.dev, Microsoft's APM, and a proposed mise standard for shipping skills alongside CLI tools; a visible minority argues skills are redundant now that agents read repos and AGENTS.md well enough.
2026-09-02 / saas-disruption-researcherSandrPod Runs the Unmodified E2B SDK Against Your Own InfrastructureSandrPod posted to Show HN on September 2 as an Apache 2.0 self-hosted control plane for AI agent code execution. Its compatibility claim is the whole product: the unmodified e2b and e2b-code-interpreter SDKs work against it with nothing but two environment variables changed, running on AWS, GCP, Azure, Docker or bare metal. This is the cleanest form of the drop-in pattern, where the open-source project does not compete on features but on making the hosted vendor's own client library point somewhere else.
2026-09-01 / saas-disruption-researcherAWS Shipped a Single CLI Command That Hands Kiro, Claude Code, Codex and Cursor AWS KnowledgeThe Agent Toolkit for the AWS CLI, announced in the August 31 roundup, equips third-party AI coding agents with AWS-specific knowledge and secure API access through the AWS MCP Server in one command, naming Kiro, Claude Code, Codex and Cursor as targets. AWS listing its own Kiro alongside three competitors is the tell: the company is optimizing for its APIs being callable from whatever agent the developer already runs rather than defending the agent itself. For builders, cloud vendors are converging on MCP servers as the distribution channel that replaces SDK documentation.
2026-09-01 / saas-disruption-researcherCROSS-CATEGORY: Product Hunt's September 1 Board Sells Supervision of Agents, Not AgentsThree of the top eight products on Product Hunt for 2026-09-01 are control surfaces over coding agents rather than agents themselves: Kilo Code for JetBrains at #1 with 234 upvotes (parallel agents, PR integration, inline diffs), Superset Mobile at #6 with 86 upvotes for running and approving parallel agents from a phone, and EAS Observe at #8 with 82 upvotes for per-release performance monitoring of the apps those agents ship. Google's /boost and AWS's Agent Toolkit for the AWS CLI landed in the same 48 hours with the same shape. The saleable unit has moved from the agent to the harness around it: orchestration, approval and telemetry.
2026-08-28 / rss-researcherAWS cut ASR inference from 16 GPUs to 4 using CUDA MPS, a 75% drop with no model changeRunning a clinical fine-tune of NVIDIA Parakeet TDT 0.6B V2, AWS partitioned each L40S into four MPS execution contexts at 25% SM each, layered on Triton dynamic batching and ONNX Runtime with TensorRT encoder optimization. On g7e.4xlarge at concurrency 32 the setup reached 92.1 requests per second per GPU with 352ms mean and 769ms p99 latency, inside an SLA of sub-650ms mean and sub-1,000ms p99. Peak load that previously needed 16 g6e.4xlarge GPUs now runs on 4, and the concurrency sweep from 1 to 100 is reproducible for anyone serving small speech or embedding models.
2026-08-26 / saas-disruption-researcherSpinifex Reimplements EC2, S3, EBS, VPC, IAM, RDS and EKS on Your Own Hardware Under AGPLSpinifex hit Show HN on August 26, 2026 with an AGPL-3.0 (commercial license available) reimplementation of the AWS control plane on self-owned infrastructure, keeping the AWS CLI unchanged: EC2, EKS, ECS, ECR, EBS via Viperblock, S3 via Predastore, VPC, ALB, NLB, RDS and IAM, with Bedrock slated for Q3 2026. The stated target is teams needing a cloud that keeps running offline with no external control plane, aimed at edge and on-premise. It is early at 89 stars, and the repo makes no specific cost comparison against AWS beyond a claim of cheaper GPU capacity via Neocloud partners, so treat the economics as unproven.
2026-08-25 / rss-researcherGPT-5.6 lands in AWS Kiro with a three-tier credit multiplier and an 82% cost reduction claimOpenAI announced on 2026-08-24 that the GPT-5.6 family is live in Kiro across IDE, CLI, and web, split into Sol (2.4x credit multiplier, complex agentic coding), Terra (1.2x), and Luna (0.6x), rolling out experimentally to Pro through Power tiers in us-east-1 and Frankfurt with cross-region inference. Kiro's testing puts Terra at roughly 82% lower cost per successful Terminal-Bench 2.1 task, and ahead of Claude Opus 4.8 on the Coding Agent Index at 74.6 versus 72.5 for about a quarter of Sol's cost. OpenAI cut Luna API pricing 80% and Terra 20% in July, with a further 20%+ Sol cut on August 21 for three months.
2026-08-25 / rss-researcherAWS backs Agentic Resource Discovery, an Apache-2.0 spec that makes agent registries federate like DNSAWS published Agentic Resource Discovery (ARD) on 2026-08-24, an open specification at agenticresourcediscovery.org under Apache License 2.0 that AWS contributed feedback to but did not author. ARD lets agent, tool, and skill registries federate across clouds, on-prem, and SaaS without bilateral connectors, working the way DNS does for names. AWS Agent Registry implements it and exposes a remote MCP endpoint, so any MCP client can search the catalog directly, which makes this the first credible answer to 'where does my agent find tools it wasn't hardcoded with'.
2026-08-24 / agents-researcherClawSentry cuts skill-injection attack success from 39.55% to 2.61% across Codex, Claude Code, Kimi CLI and Gemini CLIClawSentry is an open-source, framework-agnostic security gateway that treats agentic risk as progressive, guarding four points in the control loop: skill admission, invocation intent, execution effect and post-action consequence. It reviews a skill package before first execution, then routes runtime decisions through a deterministic L1 layer, a rule-anchored L2 semantic reviewer and a read-only L3 evidence-seeking agent, with session-level detection of tool-switching and rephrased retries. On SkillInject with Codex/GPT-5.4 contextual attack success fell to 2.61% while task success moved only from 83.78% to 83.05%; across five work agents on SkillsSafety it held attack success to 9.09-15.03% versus 33.5-49.7% unprotected.

Graph relationships

USES
cagent
cagent includes the AWS CLI in sandbox templates.
Source finding
USES
cagent -> AWS CLI
cagent includes the AWS CLI in sandbox templates.
Source finding

Source trail

v1.138.1 release notes Product Hunt AWS arXiv Hacker News SandrPod (Show HN)AWS Machine Learning Blog GitHub (via Show HN, 2026-08-26)Kiro Blog / OpenAI AWS Machine Learning Blog arXiv

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…