Compound Labs
Get the newsletter
THE STANDUPAnthropic fixes Claude 5.1 error spikesERROR SPIKES, FIX DEPLOYEDCOMPOUND MASTODONSkillWorks records inactive files beside their roster status22 INACTIVE FILES STILL LOADCTXWINDOWContext Window tracks AI lab changes and filters their evidenceFILTERS KEEP EVIDENCE TOGETHERAGENTWIREmicrosoft/agent-governance-toolkit - AI Agent Governance ToolkitPOLICY ENFORCEMENT FOR AI AGENTSCOMPOUND FACEBOOKCompound Portfolio restores its sweep after a missing module stops desk dataSWEEP RESTORED, DESK DATA WRITTENBLOCKDEXBlockDex shows no destination for captured rows with rejected slash names31 ROWS, NO DESTINATIONCONTEXT WINDOWOpenAI adds 1024p image pricing: $0.50 and $0.251024P IMAGE, $0.50 AND $0.25COMPOUND BLUESKYCompound Labs renamed job labels so job-run finds breaker stateBREAKER STATE, NOW FINDABLECTXWINDOWContext Window tracks document changes but failed mobileMOBILE WORKFLOW, ONE COLUMNAGENTWIREMineDojo Voyager: Open-Ended Embodied AgentOPEN-ENDED EMBODIED AGENTFOUNDER BLUESKYdeploy.sh now fails false Vercel production landingsFALSE LANDINGS NOW FAILCOMPOUNDlast known fixes redirect tracking after migrationSTUDIO SOURCES NOW SAY COMPOUNDCONTEXT WINDOWOpenAI adds sora-2-pro pricing720P VIDEO, $0.15, $0.30FOUNDER LINKEDINdeploy.sh now stops failed promotes from marking production landedFAILED PROMOTES NO LONGER LANDUSINGITUPUsing It Up records a receipt fixing a wobbling wooden tableONE RECEIPT, TABLE STAYED LEVELCOMPOUNDpnpm v12.4.2POSIX BIN SHIMS REPLACEDFOUNDER PEERLISTCompound Labs' deploy runner rejects failed promotesFAILED PROMOTES NO LONGER LANDTRUSTDESKTrustDesk fixes host migration redirects while keeping /api/ outOLD HOST, 308; API STAYS LIVE
Independent product R&D labFounded and run by Isaiah Kim, @kyisaiah47Newest commit Sep 16, 2026, AgentwireNewest writing Sep 16, 2026Site changelog Sep 16, 2026
The register, most recently moved first
WED SEP 16
Open breachprobe.thecompound.tech

free security score for vibe-coded apps, with the only automated cross-tenant RLS-correctness probe on the market; paid one-shot report with agent-pasteable fixes

On its own page, read 14 September 2026

Find out if your app leaks its database

The only scanner that signs up two throwaway users and checks whether row-level security actually isolates them.

  • Paste something you shipped with Lovable , Bolt , v0 or Supabase , and read what it is serving the public.
  • SAMPLE demo-app.lovable.app · THE WORKED EXAMPLE, SCORED BY THE ENGINE
  • Critical exposure found. 1 issue could let anyone read or damage your data right now.
breachprobe.thecompound.tech at a 1440 pixel desktop viewport
breachprobe.thecompound.tech, shot at a 1440 CSS px desktop viewport by capture-entry.mjs
What the lab wrote about it, newest first
  1. Aug 27, 2026BreachProbe reads the JavaScript your site already serves the public, then counts the rows that come back3 min
  2. Aug 23, 2026Two Supabase keys, the same shape, opposite consequences: how BreachProbe tells them apart3 min
TUE SEP 15
SUN SEP 13
FRI SEP 11
WED JUL 29
TUE JUL 28
MON JUL 27