buildOne report1 publisher Tranquility puts its investigative AI on Knox's FedRAMP High cloud for federal teams
Tranquility AI says federal investigators can now use its investigative tools through Knox Systems' FedRAMP High cloud. The listing names Knox's platform alone, so agencies still have to check how TimePilot and HelioTrace run inside its authorization boundary.
Reality
- Evidence45
- Adoption10
- Hype gap+35
- Incentives75
- Confidence55
SailPoint's agent tools trade permanent access keys for temporary permissions
SailPoint added AI agent discovery and automated access cleanup to its identity platform, aimed at the 79% of enterprises it says run agents in production. Existing customers can bring agent credentials under the platform that governs their staff, on SailPoint's evidence alone so far.
Reality
- Evidence25
- Adoption
- Not scored
- Hype gap+55
- Incentives85
- Confidence35
buildConfirmed4 publishers Anthropic made Claude for Government generally available to US federal and state agencies under FedRAMP High, sold in prepaid blocks with no seat fees. A hard cap fixes the bill, so teams now plan for blocks running out mid-month and for chat records kept on agency devices.
Perspective Coverage
4 publishers
- Builder
- Builder 30%
- Operator
- Operator 50%
- Investor
- Investor 20%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+15
- Incentives65
- Confidence60
Flow Engineering raised a $50 million Series B at a $750 million valuation for AI agents that check hardware designs against requirements. The months-to-days speedup is Flow's own figure, so buyers should test it against how long their own design changes take to verify.
Perspective Coverage
3 publishers
- Builder
- Builder 30%
- Operator
- Operator 27%
- Investor
- Investor 43%
Reality
- Evidence55
- Adoption58
- Hype gap+30
- Incentives70
- Confidence60
Flow Engineering raised $50 million at a $750 million valuation to sell AI agents that track and verify hardware design changes. Its only quantified usage comes from Rivian and counts seats and API calls, while the promised cut in design cycles from months to days is still a stated goal.
Perspective Coverage
3 publishers
- Builder
- Builder 31%
- Operator
- Operator 22%
- Investor
- Investor 47%
Reality
- Evidence25
- Adoption45
- Hype gap+40
- Incentives80
- Confidence55
CISA has rewired the Known Exploited Vulnerabilities catalog to a binding directive issued June 10, 2026. The inclusion criteria are unchanged; the deadlines and the paperwork copying them are not.
Reality
- Evidence70
- Adoption40
- Hype gap+10
- Incentives40
- Confidence65
FedRAMP's December 7 rules shrink the worst-case remediation window to 12 hours
FedRAMP will require daily vulnerability scans at Class D and fixes in as little as 12 hours from December 7, 2026, with a grace period to March 7, 2027. Failures in the detection pipeline now count as vulnerabilities themselves.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+18
- Incentives68
- Confidence55
buildOne report1 publisher Eleven variants of one shell script launched years-old images into a FedRAMP cluster
The fix was a single new image tag, and it had to land on hundreds of laptops with no channel back to them. That requirement is what pushed a platform team off bash and onto a self-updating Go binary.
Reality
- Evidence34
- Adoption22
- Hype gap+8
- Incentives26
- Confidence44
FedRAMP's staffing conditions make federal SaaS revenue a hiring decision
Corelight's CISO writes that customers now grade suppliers on how their own security operations use AI, while FedRAMP gates federal SaaS sales on round-the-clock support and US-based employees. A June directive adds a 72-hour clock.
Reality
- Evidence33
- Adoption
- Not scored
- Hype gap+22
- Incentives76
- Confidence54
Amazon's cure for shadow AI ships on the desktop from outside its European sovereign cloud
AWS has made the Quick desktop assistant generally available on macOS and Windows and pitched it to IT as the sanctioned answer to shadow AI. It runs in Frankfurt, London and Ireland, and not in the Brandenburg sovereign cloud.
Reality
- Evidence55
- Adoption34
- Hype gap+28
- Incentives74
- Confidence55
buildOne report1 publisher Amazon pitches the Quick desktop app to IT as containment for shadow AI
The argument AWS makes to IT for its newly general desktop assistant is that unapproved tools already move data out of controlled environments, and its answer is audit trails in CloudWatch and CloudTrail plus four named certifications.
Reality
- Evidence26
- Adoption24
- Hype gap+46
- Incentives93
- Confidence62
CloudNC raises $20mn for commercial expansion, with pricing agent due later this year
CAM Assist already runs in more than 1,000 machine shops, where a machinist checks its work before anything is cut. The new money funds Quote Agent, whose output nobody inspects until the invoice.
Reality
- Evidence44
- Adoption52
- Hype gap+14
- Incentives72
- Confidence55
buildOne report1 publisher Anthropic's federal ban falls on a record that failed the supply-chain statute
Judge Rita Lin ordered the administration to restore Anthropic's eligibility for federal agencies. The availability of a model vendor is now something a court can review. This review ran from March into August.
Reality
- Evidence54
- Adoption52
- Hype gap+12
- Incentives66
- Confidence50
MinIO went dark on 13 February. Docker will keep patching it until 2031, for a fee.
Archiving a project with a billion Docker pulls turned an object store into an audit finding. Docker's extended support does not remove the migration, it moves the deadline out to 2031.
Reality
- Evidence28
- Adoption24
- Hype gap+34
- Incentives92
- Confidence32
CMMC Phase 2 Assessments Are Paused. The False Claims Act Is Not.
Kiteworks found 96% of defense contractors trust their self-attested SPRS score and 29% can substantiate it. The DFARS duty to attest accurately never stopped when the third-party audits did.
Reality
- Evidence54
- Adoption63
- Hype gap+22
- Incentives80
- Confidence55