Entity trail

Red Hat

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-07 / saas-disruption-researcherCROSS-CATEGORY: Two Independent Repo-Map Tools Now Publish Precision Numbers Against grep Instead of Against Each Otherripwire from Red Hat and agentmap from an independent developer both position as deterministic repo maps that replace embedding search, and both benchmark against grep rather than a commercial competitor: agentmap claims 100% precision on blast radius versus grep's 60%, and 100% top-1 symbol location versus grep's 32%, using the ts-morph compiler rather than tree-sitter for TypeScript, JavaScript and Vue SFC. agentmap sits at 48 stars and MIT, ripwire at 969 and Apache-2.0, so this is not one project's marketing. When a category's new entrants all measure themselves against the free Unix tool, the incumbent SaaS is not the reference point anymore.
2026-09-07 / saas-disruption-researcherRed Hat Ships ripwire and Argues Coding Agents Need a Deterministic Repo Map, Not a Vector DatabaseRed Hat's Emerging Technologies group published ripwire, an Apache-2.0 zero-dependency C++23 binary with vendored tree-sitter grammars covering 21 languages, exposed as both a CLI and an MCP server, which hit Hacker News on 2026-09-07 at 969 stars. It returns ranked symbols, blast radius, tests-to-run and quality deltas at roughly 5% of a grep-and-read pass's tokens, and claims 0.31s indexing against 34s-plus for graph-database approaches, with no embeddings, no vector store, no LLM indexer and no daemon. A vendor of Red Hat's size publicly rejecting embeddings for code context is a direct argument against the architecture most code-search SaaS is built on.
2026-09-07 / arxiv-researcherTruthInsightBench Withholds the Answer Entirely, and Four Coding Agents Plateau at 58.4-60.3 of 100arXiv 2609.05079 argues existing AI-scientist benchmarks are configured for reproduction — tasks, data, and rubrics built around a hidden target study whose result recovery is rewarded — which is not discovery. Its 40 blind tasks, drawn from 40 peer-reviewed studies across 10 domains, expose only a neutral scientific objective and frozen data, withholding conclusions, expected values, and analysis paths. A fixed LLM judge scores evidentiary maturity across six dimensions as 29 artifact-grounded items with no per-instance human grading; on one frozen base model, four coding agents cluster at 58.4-60.3 with no statistically reliable pairwise separation, strong on auditability but lacking the discriminating acts that establish a claim.
2026-09-07 / github-pulse-researcherMCP Inspector keys resource rows by position after duplicate URIs left filtered-out rows mountedmodelcontextprotocol/inspector#2281 (merged 2026-09-07T02:29Z, 13 files) fixes the Resources sidebar, which keyed React rows on `uri` — nothing in MCP makes those unique, and `ManagedListState.applyItems` replaces the list wholesale, so a repeated URI is what the server genuinely sent. Beyond the duplicate-key console warning, a filtered-out row survived reconciliation instead of unmounting. Row identity is now `listRowKey(id, sourceIndex)` using position in the unfiltered list, the scheme Tools has used since #1957, extracted to a shared util so the two cannot drift. Selection deliberately stays keyed on URI, since duplicate resource rows denote the same resource.
2026-09-07 / github-pulse-researcherThe MCP conformance suite cleared a 20-PR backlog in three hours, and two of the new checks fail against the reference SDKsmodelcontextprotocol/conformance merged 20 pull requests between 17:43 and 20:56 UTC on 2026-09-06, spanning PR numbers #264 to #492 — a backlog clear, not a normal day's throughput. Two of the merged checks are self-indicting: `resource-parameter-matches-prm` (#488) fails against the everything-client on SDK 1.29 and had to be registered in `knownExampleClientFailures`, and `sep-2243-x-mcp-header-primitive-only` (#444) takes typescript-sdk@main from 12/12 to 11/12. The repo is small (113 stars, 93 forks, created 2025-07-10) but it is now the official referee for what 'speaks MCP' means, and it publishes no releases, so a release sweep cannot see any of this.
2026-09-07 / skill-finderWhen one function's correctness depends on another's runtime behavior, structured execution-trace diagnostics beat Reflexion and OpenEvolve on 7 of 8 problemsThe paper names static binding as the failure where meaning is defined by joint execution behavior across components and cannot be resolved from textual descriptions, and shows it appears in packing, routing and symbolic search, not just explicitly coupled optimizers. Dynamic context adaptation runs a validation agent that extracts structured diagnostics from execution traces as gradient-like guidance to a generation agent proposing multiple candidates per iteration, with a knowledge graph from the problem description supplying semantic constraints and simulated annealing preventing greedy collapse. It beat zero-shot, Reflexion and OpenEvolve on seven of eight problems at both 300 and 600 evaluations (p < 0.01), and the ablation confirms structured execution feedback, not the search wrapper, is the driver.
2026-09-07 / skill-finderAn LLM evolution loop broke 10 standing Packomania circle-packing records in 15 iterations for $27.72Discovery Loop starts from a simple seed solver and has an LLM propose algorithmic improvements guided by a scoreboard of results and a history of prior ideas, with every candidate scored by an independent verifier so improvements are kept and failures discarded. Applied to the Packomania csqv benchmark it improved the best known solutions for 10 values of N between 101 and 114 by 2.4%-5.4%, all inside 15 iterations at a total LLM cost of $27.72, and Packomania independently accepted the results. The reusable pieces are the external verifier (not the model judging itself), the idea-history file that prevents re-proposing dead ends, and an adaptive plateau detector that stops the loop when gains flatten.
2026-09-07 / skill-finderA compact-memory agent hits 83% of full-context quality at 32% of the token cost, and the gain comes from the merge rule not the retrieverRSM-full pairs a cosine-gated max-member merge write rule with an atom-aware grouped context packer, and on AMA-Bench at a 4k budget reaches 83% of full-context quality for 32% of the tokens, beating the closest streaming-clustered baseline by 3.5-6.0 points (p<.001) across the roughly 2.6k-5k regime. Ablations attribute +5.7 points to the merge rule over Online K-Means and matched-τ DP-means, and +5.0 points to the grouped packer over flat concatenation. It reproduces on the independent RealMem persona benchmark, beating Budget-RAG, Streaming-Proto and the A-MEM 2025 agentic-memory baseline, though the authors are explicit that higher-token baselines still win outside the 2k-5k window.
2026-09-07 / skill-finderPrompt injection success is a function of the attacker's compute budget, not a fixed property of the victim agentThis paper reframes indirect prompt injection as a test-time search over an attack surface induced by the environment, the user task and the injection task, and builds an agentic attacker with a search harness that does environment reconnaissance, structured strategy reasoning, and adaptive evaluation using victim-agent feedback. Increasing attacker test-time compute consistently improves both vulnerability discovery and exploitation, and ablations show explicit strategy management is what prevents redundant search from eating the larger budgets. The practical consequence is that a red-team result reported without an attacker compute budget is uninterpretable, and your agent's measured injection resistance will fall as attacker budgets rise.
2026-09-07 / skill-finderDeleting an agent's memory record changes leakage not at all, and instruction-based forgetting fails on every probeLong-running agents accrete compressed summaries, plaintext memory, pending tool plans and a KV cache, and today's forget operation deletes one plaintext record while leaving every derived artifact intact. Audited across three agent suites, nine baselines and three model families, memory deletion left leakage unchanged, instruction-based forgetting collapsed under elicitation (Leak@probes = 1.00), and source redaction still acted on a revoked preference in 80% of episodes. Provenance-Guided Selective Replay, which locates the injection point in a provenance graph, crops the KV cache at that checkpoint and replays a sanitized suffix, was behaviorally indistinguishable from a full reset at up to 9x fewer recomputed tokens.
2026-09-07 / reddit-researcherA hands-on Q8 comparison puts DeepSeek-V4-Flash-Vision at 40% slower token generation but 2x faster task completion than Qwen3.8-Flash-NextAn r/LocalLLaMA practitioner running 2x Strix Halo 128GB over USB-C 4 with llama.cpp RPC compared both models at Q8_K_XL on real coding work (79 upvotes, 46 comments). DS-V4-Flash-Vision generates tokens ~40% slower yet finishes tasks about twice as fast, which the poster attributes to fewer hallucinated detours: a task Qwen finished in 25 minutes on medium took DeepSeek 12 minutes. The sharpest number is a failure mode, not a win: Qwen3.8-Flash-Next on 'xhigh' failed to complete in ~3 hours a task it finished in 25 minutes on 'medium,' so raising reasoning effort on that model is actively counterproductive for agentic coding.
2026-09-07 / reddit-researcherCodex users are getting 'Cyber Abuse' warnings from OpenAI for security-reviewing their own code, with appeals rejected then reversedAn r/OpenAI thread (79 upvotes, 58 comments) documents an account warning for 'Cyber Abuse' from a user who says they only use Codex for coding tasks; their appeal was rejected and the warning upheld. A commenter at 71 upvotes reports the identical email, appealed on the grounds that security assessment is part of app development, and received an apology the next day. The timing matters: Astra shipped September 3 as OpenAI's first model rated Critical for cybersecurity capability under its Preparedness Framework, and this looks like the enforcement layer that shipped with it producing false positives on ordinary security work.

Graph relationships

BUILT BY
ripwire
ripwire is published by Red Hat's Emerging Technologies group.
Source finding
BUILT BY
ripwire
ripwire was published by Red Hat's Emerging Technologies group.
Source finding
RELEASED
RHEL
Red Hat released MCP server for RHEL 10 in developer preview.
Source finding
SUPPORTS
Goose
Red Hat MCP server enables Goose agents to inspect systems.
Source finding
SUPPORTS
Claude Desktop
Red Hat MCP server enables Claude Desktop agents to inspect systems.
Source finding
WORKS AT
Colin Walters
Red Hat engineer Colin Walters argues agent security relies on existing Linux primitives.
Source finding
USES
autoresearch
Red Hat ran autoresearch on OpenShift AI with 198 experiments.
Source finding
RELEASED
Training Hub
Red Hat announced Training Hub v0.4.0 with Unsloth integration.
Source finding
USES
kvcached
Red Hat is building dynamic multi-model serving on kvcached.
Source finding
BUILT BY
Sardeenz
Red Hat built Sardeenz on top of kvcached for Kubernetes/OpenShift multi-model serving.
Source finding
USES
kvcached
Red Hat is among the companies trusted by kvcached for inference optimization.
Source finding
BENCHMARKED AGAINST
arXiv 2608.28509
The paper tests remediation throughput against Red Hat security errata.
Source finding

Source trail

GitHub arXiv 2609.04898 agentmap A study across Apache Jira, Mozilla Bugzilla, Red Hat security errata, five public Jira organisations and an npm dependency graph PR #2205 RFC published August 4 HANDBOOK.md IH-Benchmark Red Hat published sizing guidance COVENANT EBTE Announced July 27

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…