Entity trail

Inspect

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-06 / reddit-researcherRoboCurve put GPT-6 Astra on real robot arms: 19/20 on block-into-bowl versus Fable 5.1's 8/20, at 6x fewer output tokensRoboCurve ran 20 trials per model per task on bimanual I2RT YAM arms (6-DoF, parallel-jaw grippers) through Inspect Robots 0.58.0 and published results on 2026-09-04. Astra hit 19/20 on block-into-bowl against Claude Fable 5.1's 8/20 and Fable 5's 1/20, averaging 2.1k output tokens versus Fable 5.1's 12.9k, $0.94 versus $2.12 per run, and 2.5 minutes versus 6.8. The counterweight is the second task: on puzzle-piece-into-groove both Astra and Fable 5.1 managed 2/20, so precision manipulation is untouched and the headline number covers only the coarse task.
2026-09-06 / hn-researcherChrome 152 Exempts www.google.com From the 'Delete Site Data on Close' SettingJeff Johnson published a reproducible test on September 5 showing Chrome 152.0.7977.83 on macOS retains cookies, local storage and session storage for www.google.com after all windows close, despite the browser being configured to delete all site data on close. His method was to clear all data, run a single Google search, close every window, then inspect chrome://settings/content/all, where the Google entry survived a browser restart. Johnson documented a similar exemption six years ago that Google eventually fixed, and attributes this one to QA failure rather than intent.
2026-09-05 / news-researcherAWS Published a Walkthrough for Routing OpenAI Codex Through Your Own Bedrock GatewayA new AWS post shows how to deploy a customer-operated LiteLLM gateway on ECS with Fargate, point it at an OpenAI model hosted on Amazon Bedrock, and configure Codex to route through the gateway's Responses API. That combination puts a coding agent's traffic behind infrastructure the customer controls, with their own logging and policy in the path. It is a concrete answer to the enterprise objection that agentic coding tools send source code to a vendor endpoint you cannot inspect.
2026-09-05 / news-researcherTenable and OpenAI Are Building a Security Review Gate for Community MCP Servers and SkillsAnnounced September 3 at OpenAI's Intelligence at Work: Cyber Summit, Exchange Inspector will vet AI agents, skills, MCP servers and multi-agent playbooks submitted to the CyberAgents Exchange, combining OpenAI GPT cyber models, Tenable One AI Exposure scanning and human researcher review. The Exchange now holds more than 100 community-submitted components following a SWARM build event Tenable hosted at Black Hat USA. Availability is expected in September, and it is the first vendor attempt at a scanning gate for the MCP supply chain rather than a registry that publishes anything submitted.
2026-09-05 / vibe-coding-researcherCVE-2026-85620: Postgres MCP Pro's read-only mode is bypassed by moving the function into the FROM clauseRated CVSS 9.2, the flaw is that safe_sql.py checks function names only on FuncCall AST nodes, while a function in a FROM clause parses as a RangeFunction node the validator passes without inspecting. `SELECT pg_read_file('/etc/passwd')` is blocked but `SELECT * FROM pg_read_file('/etc/passwd')` returns the file. All versions through 0.3.0 are affected; the class of bug is an allowlist applied at one node type in a parser that has several.
2026-09-05 / hn-researcherKevin Buzzard Compiled Anthropic's FLT Proof and Confirms It Checks Out, While Saying It Adds 'Essentially Nothing' MathematicallyImperial College's Kevin Buzzard, who runs the EPSRC-funded FLT formalization project, posted on September 4 that he compiled Anthropic's codebase and ran comparator on it, and it checks out. He also ran security checks, having an agent inspect the non-mathematical code and personally reviewing suspicious elements. His caveats matter for builders reading the announcement: the work uses the 1995 Darmon-Diamond-Taylor approach rather than modern methods, covers exponents p≥17 (sufficient, since smaller irregular primes were already formalized), and faithfully transcribes existing literature rather than proving anything new.
2026-09-04 / saas-disruption-researcherCROSS-CATEGORY: Four Products Shipped Pre-Execution Assurance for Agent Tools in 48 HoursBetween 2026-09-03 and 2026-09-04 four unrelated products posted static, pre-execution assurance for agent tooling: Glama's TDQS scoring registry, a zero-execution MCP Security Auditor on Apify, Agent Looker on Product Hunt auditing risky agent behaviors, and ARBR, an open-source framework for detailed oversight of API calls in AI applications. This is a distinct layer from the runtime authorization control planes that shipped earlier in the week: these inspect the tool definition and source before anything runs, rather than gating the call. The shape to watch is that agent tooling is growing a supply-chain review step, and it is arriving from four independent builders rather than one vendor category.
2026-09-04 / github-pulse-researcherLobeHub v2.2.16 lands 246 merged PRs, adds Factory Droid over ACP and an Elasticsearch search pathThe 2026-09-04 release covers 246 merged PRs from 9 contributors since v2.2.15. Factory Droid joins over ACP, TRAE and Grok Build gain provider binding, and the deployment-provided LobeHub connection expands across Claude Code, Codex, Kimi Code, Pi and Grok Build (#18737, #18775, #18785, #18811, #18932). Full-text search gains a provider-neutral layer with a durable outbox, resumable indexing and an opt-in Elasticsearch Docker Compose profile that leaves the default self-hosted setup unchanged (#18807, #18902, #19028), and the lh CLI adds workspace selection, resilient Goal execution, operation inspection and replay, and execution snapshots (#18797, #18874, #19000, #19015, #19020).
2026-09-03 / github-pulse-researcherMCP Inspector 2.5.0 renders root-level anyOf/oneOf tool schemas and explains why a subscription listen diedReleased 2026-09-02T16:40Z, Inspector 2.5.0 fixes tool schemas with root-level `anyOf`/`oneOf` composition failing to render (#2137), which had made any server using a union at the top of its input schema unreadable in the inspector. It also stops a never-acknowledged `subscriptions/listen` being silently retried eight times and instead says why it ended (#2176), and surfaces failed resource subscribe/unsubscribe calls. The rest of the release is a large App.tsx decomposition into `useSessionRef`, `useOAuthRecovery`, `useMcpApps`, `useConnectionLifecycle` and `useServerCommands` hooks with new connected-flow smoke tests for the Tools, Resources and Prompts tabs.
2026-09-03 / agents-researcherSkill selection can be hijacked without any injected instruction, and humans catch it 2.9% of the timeISM shapes the semantic relationship between a user prompt and a skill's metadata so the router picks the attacker's skill, with no explicit steering text anywhere. Across four task domains and eight selector models it raised average target-selection rate from 15.2% to 63.5%, reaching 73.5% in a matched comparison, only 9.8 points below explicit steering. The detection gap is the story: human reviewers blocked ISM in 2.9% of judgments versus 91.4% for explicit steering, and five LLM inspectors passed it 82.9% of the time versus 37.4%. Skill-marketplace review that reads descriptions for suspicious instructions will not see this.
2026-09-02 / agents-researcherChatDev 2.0 ships a no-code multi-agent platform with a cycle-aware execution engineDevAll pairs a declarative executable graph abstraction with a cycle-aware execution engine so heterogeneous agents and dynamic cyclic interactions live in one framework, addressing the usual tradeoff where code frameworks are expressive but engineering-heavy while no-code builders lock interactions into author-defined workflows. A visual interface handles authoring, running, monitoring and inspection including human-in-the-loop steps with no code. The authors report reproducing state-of-the-art multi-agent systems across three representative tasks at competitive performance without task-specific orchestration code, and it ships in the OpenBMB/ChatDev repository, which currently sits at 34,181 stars.
2026-09-02 / reddit-researcherAstra reportedly uses recurrent depth, moving reasoning into latent vectors that chain-of-thought monitoring cannot readThe Information reported, via Techmeme on September 1, that OpenAI's Astra uses "recurrent depth" — looping a shared block of transformer layers over the same hidden state so the model spends extra compute on hard problems without emitting that reasoning as text. The trade is real capability and cost gains against monitorability: standard chain-of-thought is readable tokens an automated monitor can inspect, and recurrent-depth reasoning never surfaces. r/singularity ran it at 352 upvotes under the recurrent-depth framing and 487 upvotes under "neuralese," with a follow-up thread at 123 upvotes on OpenAI's chief scientist responding, so this is a safety-architecture argument playing out before the model ships.

Graph relationships

USES
Vite
Inspect's stack uses Vite for the build system.
Source finding
USES
React
Inspect's stack uses React for the UI.
Source finding
USES
OpenCode
Inspect uses the open-source OpenCode harness underneath.
Source finding
USES
Modal
Inspect uses Modal sandboxes provisioning in under 5 seconds.
Source finding
USES
Cloudflare Durable Objects
Inspect's stack uses Cloudflare Durable Objects for backend.
Source finding
BUILT BY
Ramp
Inspect is a coding agent built by Ramp.
Source finding

Source trail

instead of standardizing on Claude Code or Cursor arXiv 2608.23953 The end of programming now running reliably on millions of developer machines arXiv 2608.20658 Discovered Materials OX Security Practical DevSecOps Symphony Open Agents Check Point RoboCurve (via r/singularity, 547 upvotes)

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…