— / 06
Sources — what this review stands on
Source fileLessons
- 00AI Assistants — the Top 15 and What to Learn from Them
- 01Assistant profiles — the fifteen and the rest of the field
- 02The AI assistant market — business models, numbers, failures
- 03Technical patterns of assistants — what the best ones teach
- 04Poland and data sovereignty — an assistant that does not send data to the US
- —Sources — what this review stands on
Checked on 11 October 2026. For every entry: what I took from it. Primary sources (product pages, price lists, documentation, company announcements, legal acts) take precedence; figures reported by the companies themselves and press estimates are flagged in the text. Every profile in 01-PROFILES.md also has its own source links.
GitHub figures
- GitHub API —
GET /repos/{owner}/{repo}andGET /repos/{…}/releases/latest, called on 11 October 2026: openclaw/openclaw, NousResearch/hermes-agent, browser-use/browser-use, NVIDIA/NemoClaw, nanocoai/nanoclaw, bytedance/UI-TARS-desktop, cline/cline, nextcloud/assistant → stars, licences, releases.
Profiles 1, 2, 5, 6, 13
| Source | What I took |
|---|---|
| OpenClaw — GitHub | MIT licence, stars, releases, 2026 security advisories (GitHub API, 11 October 2026) |
| OpenClaw — introduction | rename to OpenClaw, >100k stars and 2 million visits in a week, funding for the maintainers |
| OpenClaw Foundation | 501(c)(3) foundation from 8 July 2026, donors and partners, ClawCon, "4.5 million new claws", NemoClaw |
| OpenClaw Enterprise | enterprise distribution from 29 September 2026, "will always be free", IT bans agents by default |
| Microsoft Autopilot on OpenClaw | Autopilot from 25 September 2026, private preview, upstream fixes (Policy plugin, Teams, Windows) |
| OpenClaw — security in public | Steinberger's report statistics, moving channels and providers into plugins |
| OpenClaw — rough week | broken releases in April 2026, "too founder-driven" |
| OpenClaw — VirusTotal | skill scanning since 7 February 2026 |
| OpenClaw — NVIDIA SkillSpector | SkillSpector and Skill Cards (1 June 2026) |
| OpenClaw — ClawScan | Tencent AI-Infra-Guard, 98.6% of malicious skills detected across 556 cases |
| OpenClaw docs — heartbeat | 30 min / 1 h interval, wake-up limits |
| OpenClaw docs — standing orders | scope, trigger, gate, escalation; files injected into the session |
| OpenClaw docs — dreaming | memory consolidation phases, DREAMS.md, weights 1–10 |
| OpenClaw docs — workspace | the workspace is not a hard sandbox |
| OpenClaw docs — local models | llama.cpp, Ollama, vLLM, ds4; ≥8 GiB and 64K; no safety filters locally |
| OpenClaw docs — Ollama | native /api/chat, /v1 breaks tool calls |
| OpenClaw docs — security | pairing codes, allowlists, security audit |
| TechCrunch: Steinberger at OpenAI | move to OpenAI on 14–15 February 2026, foundation announcement |
| The Register on OpenClaw 2.0 | 2.0 news, secrets stored unencrypted, sandbox off by default, the gym incident |
| Cloudflare — Moltworker | hosting on Workers, "flood of people buying Mac minis" |
| Cisco on OpenClaw | exfiltration via a skill, 26% of 31k skills vulnerable |
| InsiderLLM — ClawHub audits | counts of malicious skills (secondary source) |
| Wiz — Moltbook | exposed API tokens and e-mails |
| Wikipedia — OpenClaw | history of the names, MoltMatch, restrictions in China, Nadella, 247k stars in March 2026 |
| Wikipedia — Moltbook | launch on 28 January 2026, acquisition by Meta |
| Anthropic — Series G | USD 30 bn at USD 380 bn, run-rate USD 14 bn, Claude Code >USD 2.5 bn, 4% of commits |
| Claude — memory | memory in topic files, sensitive topics kept out of memory by default (25 August 2026) |
| Claude — Cowork to Claude | merge with chat on 16 September 2026, scheduling, asking before acting |
| Claude — how people use Cowork | 1.2 million sessions, breakdown of task categories |
| Claude — Dispatch and computer use | Dispatch with computer use from 23 March 2026 |
| Claude — Routines | Routines in Claude Code (14 April 2026) |
| Claude — Cowork research preview | plan prices, folders, separate browser, approvals |
| Claude — Cowork help | execution in the Anthropic cloud, scope of outbound-traffic permissions |
| Simon Willison on Cowork | local Apple Virtualization VM in January 2026 |
| Docs — computer use tool | toolset GA, 17 tools, batch actions, screenshot cost, recommendations |
| Docs — browser use tool | 31 tools, accessibility tree, developer-side execution |
| Computer use demo | open reference container |
| Claude for Chrome | safeguards, 23.6% → 11.2%, availability schedule |
| Claude in Chrome | 2026 features, GA on paid plans, discouraged use cases |
| Anthropic — prompt injection defences | about 1% for Opus 4.5 against an adaptive attacker |
| Anthropic — computer use 2024 | launch on 22 October 2024, 14.9% OSWorld |
| Anthropic — Sonnet 4.5 | 61.4% OSWorld |
| Anthropic — Sonnet 4.6 | prices USD 3 / 15 |
| Anthropic — Opus 5.5 | 81.8% OSWorld 2.1, prices USD 4 / 20 (22 September 2026) |
| Anthropic — Vercept | acquisition on 25 February 2026, 72.5% OSWorld |
| Claude Code — data | model providers, retention, non-essential traffic switch, cloud VM |
| TechCrunch — Claude Code limits | weekly limits from 28 August 2025, <5% of subscribers |
| Stack Overflow 2026 | Claude Code — 66% of coding-agent users |
| iTiger — SemiAnalysis | estimate of about USD 44 bn run-rate in May 2026 (secondary) |
| TechCrunch — Claude for Legal | plugins and MCP connectors to Westlaw, Box, Docusign (12 May 2026) |
| LawNext — CoCounsel on the Agent SDK | the new CoCounsel built on the Claude Agent SDK |
| Microsoft — Copilot privacy | Anthropic models outside the EU Data Boundary (as of 8 October 2026) |
| PromptArmor — Cowork | file exfiltration through an allowed API |
| BleepingComputer — BragJack | attack via extensions, CVE-2026-0628, including Claude in Chrome |
| Wikipedia — Claude (language model) | Ars Technica's concerns about Chrome, Cowork in Chrome |
| Wikipedia — Claude (AI) | Claude Code source leak, abuse cases (Wired, BBC), Claude Design |
| Hermes Agent — GitHub | MIT, stars, releases, zero security advisories in 2026 |
| Hermes Agent — README | features, backends, FTS5, migration from OpenClaw, trajectories |
| Hermes Agent — website | Nous Portal Plus / Super / Ultra prices (11 October 2026) |
| Hermes docs — memory | MEMORY.md and USER.md limits, frozen snapshot |
| Hermes docs — skills | skills catalogue, hub, ClawHub, scanning |
| Hermes docs — cron | jobs in natural language |
| Hermes docs — delegation | executors with a separate provider, child limit (after the harness review) |
| Hermes docs — voice | faster-whisper locally, Edge TTS by default (after the harness review) |
| Hermes docs — index | Nous Portal as a model and credits provider |
| Nous — funding round | USD 90 m, investors, 24 million clones, 2.5% of tokens, MIT since February 2026 |
| Nous Research | Microsoft Store app from 8 October 2026 |
| Nous — blog | refactoring with 1393 agents |
| Hermes Business | shared balance, per-person limits, skills library, Enterprise |
| NVIDIA NemoClaw | supported agents (OpenClaw, Hermes, Deep Agents), OpenShell sandbox |
| Manus — context engineering | six principles, KV-cache, 100:1, todo.md, about 50 calls per task |
| Manus 2.0 | Cascade, Cloud Computer, automations, Cue, claimed savings |
| Manus Flex | bring your own model key, credits for infrastructure |
| Manus — Wide Research | parallel agents with fresh context |
| Manus docs — Wide Research | up to 250 items |
| Manus 1.5 | full-stack apps, task time 15 → <4 min |
| Manus — Browser Operator | extension in the local browser, per-session consent, action log |
| Manus docs — Cloud Browser | persistent sessions, Take Over, data-centre IP blocks |
| Manus — USD 100m ARR | ARR, run-rate, 147 trillion tokens, 80 million computers, 105 employees |
| Manus — letter to users | return to independence, data deletion on 23–24 August 2026, data in the US and Singapore |
| Manus — independence | formal independence on 1 September 2026, availability in the EU |
| Manus — credit rules | what consumes credits, daily refresh, no carry-over |
| E2B — Manus case study | Firecracker micro-VMs, about 150 ms startup, rejection of Docker |
| The Decoder | models at launch, browser-use, executor–planner setup |
| TechCrunch — Manus March 2025 | reliability tests, GAIA claim |
| TechCrunch — China's veto | NDRC decision of 27 April 2026, exit ban for the founders |
| TechCrunch — round October 2026 | >USD 500 m, Boyu and IDG, target of about USD 4 bn |
| Bloomberg — blocked acquisition | confirmation of the block |
| Yahoo — Manus valuation | share buyback, operational separation |
| Dahui Lawyers | first public prohibition in Chinese investment review |
| Sacra — Manus | March 2025 prices, estimate of USD 450 m in June 2026 |
| MyClaw — Manus 2.0 review | September 2026 prices, Cloud Computer, Cue wallet limits (third party) |
| Embrace The Red | attack exposing a port (25 August 2025) |
| OpenManus | open MIT clone, stars, Ollama support |
| Wikipedia — Manus | launch, Series B, move to Singapore, resale of invites |
| browser-use — GitHub | MIT, stars, release 0.13.11 |
| browser-use — GitHub API | repository creation date, forks |
| browser-use — pricing | browser, proxy and token rates, concurrency tiers (3 September 2026) |
| browser-use — benchmarks | Browser Use Bench v2.1 with cost per task (7 October 2026) |
| browser-use — changelog 3 April 2026 | free tier, V4 schedule, Agency skill |
| browser-use — BU-30B-A3B | open weights, 3B active, vLLM |
| browser-use — move to CDP | "100% CDP-based" |
| browser-use — BU 2.0 | comparison with Opus 4.5 (vendor claim) |
| browser-use — choosing an agent | V2 / V3 / V4: cost, accuracy, time; profiles and secrets |
| browser-use — BU 2.0 model card | model available only via API |
| browser-use — WebVoyager report | 89.1% after removing 55 tasks |
| Felicis | USD 17 m seed, investors |
| ain.ua | founders, ETH Zurich, the "text instead of pixels" idea |
| Princeton HAL — Online-Mind2Web | independent score of 40.0% for browser-use + Sonnet 4 |
| TechCrunch — OpenAI on prompt injection | "unlikely to ever be fully solved" (22 December 2025) |
| The Register — Gartner | recommendation to block AI browsers (8 December 2025) |
| TechCrunch — end of Atlas | Atlas shutdown, "feature, not the destination" |
| 36Kr — AI browser share | <1% of the browser market (August 2026) |
| OpenManus — commits | Browser Use CLI 3.0 integration (August 2026) |
| Harness review — profiles | Hermes (81 pts, 4th place), OpenClaw (47th place), the H4 trap, Moltis with Polish Piper |
Profiles 3, 4, 9–12, 14
| Source | What I took |
|---|---|
| Fortune, 11 June 2026 — Abridge | Abridge's shift to a "platform", Lilly, NVIDIA, Artisight, 100m+ conversations a year, valuation of USD 5.3 bn |
| Sacra: Abridge | price estimate of about USD 2,500 per physician per year, ARR 2024–2025, Best in KLAS February 2026 |
| Abridge: ASR benchmark | claimed results of its own ASR (6 August 2025) |
| Abridge: eliminating confabulation | guard model, 97% vs 82% for GPT-4o (company data) |
| Webb et al., Appl Clin Inform 2026 | independent comparison of Abridge and DAX in the ED |
| MobiHealthNews: Abridge Series E | rounds D and E, 2025 valuations |
| Menlo Ventures: AI in healthcare 2025 | scribe market shares (Microsoft about 33%, Abridge about 30%) |
| HLTH: Epic AI Charting | Epic's native scribe (February 2026) and pressure on vendors |
| Fierce Healthcare: PHTI on scribes | less burnout, limited financial return |
| Lukac et al., NEJM AI (UCLA RCT) | moderate time savings with scribes |
| Parakeet-TDT-0.6B-v3 | local ASR with Polish, about 7.3% WER per the model card |
| pyannote community-1 | offline diarization, CC-BY-4.0 |
| Noa: pricing | Noa Notes PLN 199 + VAT per month, price anchor for a scribe |
| Harvey: multi-model by design | model router, failover, BigLaw Bench |
| Harvey Tenet | Kimi K3 + RL (GSPO), no client data, about 1/10 of the cost |
| Harvey II | Spaces, personal memory, ethical walls |
| Harvey: MCP Policy Engine | policies outside the model, lethal trifecta, tool pinning |
| Harvey: security | processing regions, zero retention, certifications, no on-prem |
| Harvey: USD 550m round | USD 15.5 bn (9 September 2026), 80% of the Am Law 100 |
| TechCrunch, 9 September 2026 — Harvey | total capital above USD 1.55 bn |
| Wikipedia: Harvey | valuation history, founders, the A&O test |
| ITBrief: Harvey's 500 agents | Agent Builder, customer count (May 2026) |
| raising.fi: Harvey September 2026 | ARR above USD 400 m (secondary press), acquisition of Guardrails AI |
| Vaquill: Harvey review | seat price estimates (unverified) |
| LexisNexis + Harvey | content alliance, Shepard's |
| D. Charlotin's hallucination database | 2,184 cases, 6 in Poland (10 October 2026) |
| Cursor: pricing | plans and prices (October 2026), Bugbot, MCP |
| Cursor: changelog | Self-Hosted Machines, Projects, Rollouts, iOS (August–October 2026) |
| Cursor: Composer 2 | benchmark results and token prices (company data) |
| Cursor: June 2025 pricing | Pro plan change, apology and refunds |
| Cursor: data use | every request goes through the backend, Privacy Mode |
| Cursor: security | SOC 2 Type II |
| Cursor: joining SpaceX | acquisition closed on 14 August 2026, SpaceXAI, Grok |
| Wikipedia: Cursor | rounds, SpaceX deal timeline, acquisitions, the "Sam" bot |
| Bloomberg: Cursor ARR USD 2 bn | ARR February 2026 |
| Gigazine: Composer 2 on Kimi | undisclosed Kimi K2.5 base |
| DataCamp: Cursor 3 | agents window, cloud VMs, session transfer |
| Silicon Canals: Cursor | about 60% of revenue from businesses (March 2026) |
| Jetadmin: Cursor plans | Pro+ and Ultra (July 2026) |
| TNW: Granola Series C | rounds, MCP and API, customers |
| Granola: pricing | per-seat plans, integrations, Enterprise features |
| Granola: transcription | audio is not stored, Me/Them diarization |
| YipitData: Granola vs competitors | winning over users, low churn |
| SoftwareTestingHelp: Granola | stated ASR and LLM vendors (unverified) |
| ARR.club: Granola | revenue growth in Q1 2026 |
| Sacra: Granola | 250k+ users (unverified) |
| Substack: dangers of AI note-takers | AssemblyAI key hard-coded in the beta |
| Granola: June 2026 vulnerability | course of the patching |
| Startup Fortune: Granola privacy | sharing and training on by default |
| PPC Land: Chamberlain v. Granola lawsuit | class action of 30 July 2026 |
| Sierra: blog | Agent OS 2.0, Voice Personas, Ghostwriter, fleming-1 |
| Sierra: year two | ARR, customers, Fortune 20, expansion |
| Sierra: Horizon | long-horizon agents, "you pay for outcomes" |
| Sierra: outcome-based pricing | billing model (10 December 2024) |
| Sierra: τ-bench | pass^k, GPT-4o drop at pass^8 |
| Sierra: Personal Agent Protocol | protocol with Meta (6 October 2026) |
| TechCrunch, 4 May 2026 — Sierra | USD 950 m at over USD 15 bn, 40% of the Fortune 50 |
| Forbes, November 2025 — Sierra | valuation of USD 10 bn |
| Decagon: Series D | Sierra's competitor, USD 4.5 bn |
| Decagon: blog | PACT protocol (6 October 2026) |
| Intercom: pricing | USD 0.99 per outcome |
| Parloa: pricing | billing per minute or per interaction |
| Wikipedia: OpenEvidence | features, licensed content, lawsuit against Pathway |
| Sacra: OpenEvidence | revenue, CPM, margin, usage, ChatGPT for Clinicians |
| Rutland Herald: OpenEvidence round | USD 250 m at USD 12 bn (21 January 2026) |
| Sacra: OpenEvidence vs Doximity | conflict and convergence of the products |
| Wikipedia: Doximity | acquisition of Pathway (August 2025) |
| ASCO Post: AMA survey | 81% of US physicians use AI (2026) |
| Physicians Practice: AMA survey | 71% with no say in tool choice |
| Code of Medical Ethics (PDF) | Article 12 — AI in diagnosis and treatment |
| Noxtua | features, Athena and Minerva, number of documents |
| Noxtua: security | hosting, self-hosting in a sovereign cloud, § 43e BRAO, § 203 StGB |
| Noxtua: Series C | EUR 100 m+ (23 September 2026), 30,000+ users, certifications |
| TechCrunch: Noxtua Series B | USD 92.2 m, own model 2025, Xayn history |
| CMS: C.H.Beck becomes Noxtua investor | Series B amount per CMS, working without anonymization |
| Noxtua: Beck-Noxtua in Poland | announcement of 3 December 2025 |
| Noxtua: Beck-Noxtua in the Czech Republic | IONOS and Open Telekom Cloud hosting, BSI C5 |
| beck-noxtua.pl | PLN 590 net/month, Legalis Silver+ requirement, ISO certifications |
| NRA: § 23e of the Code of Ethics | rules for advocates' use of AI |
| Prawo o adwokaturze (Advocacy Act) (PDF) | Article 6 — advocate-client privilege |
| Ustawa o radcach prawnych (Legal Advisers Act) (PDF) | Article 3 — legal adviser privilege |
| UODO: AI checklists | "initial questions" before deploying AI (6 August 2026) |
| KIRP: AI recommendations | recommendations for legal advisers |
| prawo.pl: LEX Expert AI | competitor in Poland, links to source excerpts |
| Gaius-Lex | Polish player with an on-premise deployment |
| Mistral: September 2026 round | capital for sovereign AI in the EU |
| TechCrunch: Cohere + Aleph Alpha | merger at USD 20 bn |
Profiles 7, 8, 15 and "worth knowing"
As of 11 October 2026. The openai.com, chatgpt.com and perplexity.ai sites blocked downloads, so some of the facts about OpenAI and Perplexity come from the press, the system card (PDF) and Wikipedia; I flagged this in the text.
| Source | What I took |
|---|---|
| Engadget — DevDay 2026 | 1.2 bn weekly users, dots, Pro 500 (29 September 2026) |
| Decrypt — DevDay 2026 | 1.2 bn users, opening up the Codex harness |
| emergent — DevDay 2026 | GPT-6 API prices, dots outside the EEA on Pro, OSWorld 2.0 Sol vs Astra |
| eesel — dots | a VM per dot, Custom Rules, auto-review, dots memory |
| TechCrunch — dots | dots on GPT-6 Astra, 4000+ apps |
| ChatGPT agent system card | agent tools, accuracy of confirmations, watch mode, memory disabled, resistance to injections |
| digitalapplied — ChatGPT Work | plan mode, 1400+ plugins, auto-review, usage-based billing |
| 9to5Mac — end of Atlas | Atlas deprecation, new desktop app |
| OpenAI forum — Atlas | Atlas shutdown date 9 August 2026 |
| 36Kr — Atlas | "feature, not a destination", about 10 million Atlas MAU, AI browser share < 1% |
| 9to5Mac — scheduled tasks | tasks, once-an-hour limit, end of Pulse |
| Thurrott — memory | "Dreaming" from 4 June 2026 |
| 9to5Mac — Agent Plugins | plugin standard and committee |
| OpenAI — computer use in the API | "code instead of clicks" recommendation |
| TechCrunch — prompt injection | RL-trained attacker, "unlikely to ever be fully solved" |
| PinMeTo — ads in Europe | ads in Poland from 24 August 2026, contextual only |
| a16z — Top 100 | ads at USD 1 bn a year, subscribers 3× vs Claude and Gemini |
| Investing.com — OpenAI ARR | ARR "close to USD 70 bn" (Axios/Reuters) |
| Bloomberg Law — OpenAI round | USD 122 bn at USD 852 bn |
| TechCrunch — Sensor Tower | MAU and shares of ChatGPT, Gemini, Perplexity, Grok, DeepSeek (May 2026) |
| Hugging Face — privacy-filter | OpenAI's open PII classifier |
| Wikipedia — ChatGPT | ChatGPT Health outside the EEA, rename to plugins |
| Alphabet — Q2 2026 results | 950 million MAU, subscriptions segment USD 12.9 bn |
| 9to5Google — I/O 2026 | Daily Brief, Spark, Live, Ultra prices |
| TechCrunch — Gemini 3.5 Flash | Antigravity, pauses for decisions |
| Android Headlines — Spark in AI Pro | Tasks/Schedules/Skills, consent by data scope, country exclusions |
| Google — Spark help | local vs remote Chrome, 15 tasks, outside the EEA, warnings |
| Google — Spark July 2026 | Chrome integration, 160+ countries |
| Efficiently Connected — Spark | dedicated cloud VMs |
| Google — agent security in Chrome | planner + User Alignment Critic, Origin Sets, confirmations, VRP |
| Google — auto browse | auto browse features, UCP, US only |
| Google — auto browse on Android | Android from 18 August 2026 |
| Google — Gemini Agent | Gemini Agent from 18 November 2025 |
| Gemini API — computer use | loop, safety_decision, 7 policy categories |
| Google — Computer Use model | launch on 7 October 2025, latency of about 225 s |
| Google — Mariner | Mariner, WebVoyager 83.5% |
| Wikipedia — Project Mariner | shutdown on 4 May 2026 |
| Google — 1 bn users | over 1 bn monthly (11 August 2026) |
| Google — Gemini 4 Argon | Argon API prices |
| Gemini — prices PL · prices US | plans in zloty and dollars |
| Business Today — Gemini replaces Assistant | replacement of Assistant from 4 September 2026 |
| TNW — Live, Spark and the DMA | Personal Intelligence, DMA deadline July 2027 |
| 9to5Google — Gems → Skills | migration on 17 November 2026 |
| Android Developers — Gemini Nano | AICore, offline, Hybrid API |
| Google DeepMind — Gemma | Gemma 4 sizes |
| TechGenyz — Gemini agent for business | collaborator agents, routing to Claude |
| BleepingComputer — BragJack | attack on Gemini in Chrome, Comet, Neon; CVE-2026-0628 |
| Wikipedia — Google Gemini | lawsuits and the fine in France |
| VentureBeat — Portable Computer | architecture, models, hardware, Terminal-Bench, escalation with a PII filter |
| VentureBeat — hybrid at Computex | consent before sending to the cloud |
| TechRepublic — Portable Computer on Windows | Windows from September 2026 (teaser) |
| Computerworld — Perplexity Computer | model split, Enterprise Max USD 325 |
| TechCrunch — Perplexity Computer | 19 models, Max USD 200 |
| TechCrunch — Comet for free | free Comet, background assistant |
| Wikipedia — Comet · Perplexity AI | platforms, dropping ads, Azure, Personal Computer |
| The Decoder — BrowseSafe | open classifier, 91% detection, about 10% leaks through |
| PYMNTS — Perplexity revenue | ARR about USD 450 m in March 2026, 100 million+ MAU |
| Yahoo Finance — Nvidia and Perplexity | ARR about USD 750 m, valuation > USD 30 bn |
| TNW — talks with Nvidia | no published figures |
| TechCrunch — India | Airtel, MAU, app revenue |
| Vice — Comet Plus | Pro/Max prices, Comet Plus |
| Jones Day — Ninth Circuit | injunction vacated, data flow in Comet |
| Brave — Comet | indirect injection, recommendations |
| LayerX — CometJacking | exfiltration via a URL parameter |
| The Register — PleaseFix | zero-click via the calendar, patches |
| Help Net Security — MCP API in Comet | hidden extension, disabling |
| The Register — Gartner | advice to block AI browsers |
| Android Authority — Hey Plex | Perplexity in the Galaxy S26 (teaser) |
| money.pl — Bielik and NVIDIA | announcement of Bielik in Perplexity |
| AMD — Radeon AI PRO R9700 | 32 GB per card |
| Hugging Face — Qwen3.8-27B | 84.3% OSWorld-Verified (claim), Apache 2.0 |
| UI-TARS-1.5-7B · UI-TARS-desktop | OSWorld results, operators, running locally |
| TNW — Legora | ARR, funding, tabular review |
| HLTH — Heidi | ARR USD 50 m, USD 340 m, agents outside the UK/EU |
| Microsoft — Copilot privacy · FY26 Q4 results | EU Data Boundary, 30 million seats |
| Yahoo Finance — Genspark | ARR, valuation of USD 2.6 bn |
| Cognition — Poke | acquisition, 100 million messages |
| NVIDIA NemoClaw | OpenShell sandbox, alpha status |
| TechCrunch — Ghost | price, hardware, models, firewall |
| PubMed — UCLA RCT | Nabla and DAX/Dragon results |
| Nabla — ASR | Whisper + 7000 h of audio |
| Basis — behavior specs | standard for evaluating an agent's run |
| Hebbia — Matrix 2.0 | Matrix interface, checkpoints |
| TechCrunch — Glean · ITBrief — Tau | ARR USD 300 m, cost per task |
| Lindy — pricing · iMessage | approval rule, Apple ban |
| gaius-lex.pl · Signalbase | Gaius Vault on-prem, seed |
| Meta — Muse · Muse retention | Sentinel, VM, payments; 5 million downloads vs 700k DAU |
| VentureBeat — Muse Glimmer | model parameters and licence |
| Amazon — Alexa+ · countries | Experts, markets without Poland |
| TNW — Siri AI · Apple — languages | iOS 27, EU, no Polish |
| TNW — Microsoft Copilot · Windows Agent Workspace | removed features, 38.5 million, agent account |
| Wikipedia — Grok · Finbold — Grok Bot | incidents, 418k users |
| TechNode — Doubao | 200 million DAU |
| TechTimes — Qwen | RMB 6 bn campaign, session length, MAU |
| Hugging Face — DeepSeek · netzpolitik | MIT weights, demand to remove the app |
| TechCrunch — Mistral · pricing | EUR 3 bn round, Pro USD 14.99 |
| Pulse 2.0 — Instinct | Series C, sandboxes, credentials |
| NanoClaw | containers, scripted gates, Claude Agent SDK |
| OpenManus | framework, stars, Ollama |
| Kortix — README | sandbox per session, credential broker, licence |
| Agent S · Simular — OSWorld 2.0 | 72.6% OSWorld, 28.25% binary on OSWorld 2.0 |
| Microsoft Research — Fara-7B | 7B model, WebVoyager, number of steps |
| Open-AutoGLM | Android control, GPU requirements |
| Skywork Desktop · 36Kr — Kunlun | local VM, ARR of the tools division |
| Opera — free plan for agents · MCP | MCP and CLI for external agents |
| Fellou — pricing · Eko | cost per task, open framework |
| AWS — Nova Act · AWS blog | price per agent hour, code + act() |
| LawNext — CoCounsel · BNN Bloomberg | Claude Agent SDK, 1 million users |
| LexisNexis — growth · Protégé PL | 90% of new business, offering in Poland |
| Microsoft — FY26 Q4 | Dragon Copilot, 100 million visits |
| Wikipedia — Doximity · Sacra — OpenEvidence | Doximity's reach, ChatGPT for Clinicians |
| Cognition — USD 1 bn run-rate | Devin's run-rate |
| VKTR — Lovable | ARR, valuation |
| Decagon — Series D | AOP, valuation of USD 4.5 bn |
Market (02-MARKET.md)
| Source | What I took |
|---|---|
| menlovc.com | Menlo Ventures (analyst), 9 December 2025: USD 37 bn of enterprise spending on genAI, coding 55% of departmental spending |
| menlovc.com | Menlo Ventures, 21 October 2025: AI in healthcare USD 1.4 bn, scribes USD 600 m, DAX/Abridge/Ambience shares |
| emergent.sh | blog: ChatGPT Pro 500 (USD 500), dots without the EEA, DevDay 29 September 2026 |
| decrypt.co | press: 1.2 bn weekly ChatGPT users (29 September 2026) |
| claude.com | Anthropic: Pro/Max/Team prices |
| gemini.google | Google: AI Plus/Pro/Ultra prices in zloty (October 2026) |
| vice.com | press: Perplexity Pro USD 20, Max USD 200 (August 2025) |
| poke.com | Poke: Pro USD 19, Ultra USD 199 (11 October 2026) |
| hermes-agent.nousresearch.com | Nous: Nous Portal tiers USD 20/100/200 |
| mistral.ai | Mistral: Vibe Pro EUR 14.99, Team EUR 24.99 excl. VAT |
| pymnts.com | press: Perplexity ARR USD 450 m and 100 million+ MAU (March 2026) |
| finance.yahoo.com | The Information via Yahoo: ARR about USD 750 m, talks with NVIDIA at >USD 30 bn (August 2026) |
| help.manus.im | Manus: credit rules (tokens + machine + API, order of consumption) |
| myclaw.ai | review: Manus prices USD 20/40/200 (September 2026), credit price calculation |
| genspark.ai | Genspark: Plus/Pro/Team tiers, credits |
| lindy.ai | Lindy: USD 49.99 per user, 5,000 credits, pause when the pool runs out, consent rule |
| fellou.ai | Fellou: tiers and about 250 Sparks per task |
| browser-use.com | browser-use: USD 0.02 per browser hour, cost per task |
| aws.amazon.com | AWS: Nova Act USD 4.75 per agent hour |
| rabbit.tech | Rabbit: intern USD 99.99 for 30 tasks, "per task" price |
| cursor.com | Cursor: pricing change of 16 June 2025 and apology of 4 July 2025 |
| techcrunch.com | press: weekly Claude Code limits from 28 August 2025 |
| docs.github.com | GitHub docs: AI credits from 1 June 2026 |
| github.com | GitHub: Copilot tiers and credits included in the price |
| techcrunch.com | press: Glean USD 300 m, flat fee + usage model |
| notion.com | Notion: Custom Agents USD 10 per 1,000 credits |
| gartner.com | Gartner, 17 August 2026: cost per agentic workflow ×5 by 2028 |
| sierra.ai | Sierra: outcome-based payment rules (10 December 2024) |
| sierra.ai | Sierra: "you pay for outcomes, not for tokens" |
| intercom.com | Intercom: Fin USD 0.99 per outcome |
| parloa.com | Parloa: billing per minute or per interaction |
| ambiencehealthcare.com | Ambience: contracts with an outcome bonus (April 2026) |
| sierra.ai | Sierra: ARR 100 → 150 m+ USD, narrow "jobs to be done" |
| sacra.com | Sacra (analyst): OpenEvidence revenue, CPM, margin |
| en.wikipedia.org | encyclopedia: licensed NEJM, JAMA, NCCN content |
| en.wikipedia.org | encyclopedia: Doximity funded by pharma marketing |
| openclaw.ai | OpenClaw Foundation: 501(c)(3), donors, "4.5 million claws a week" |
| openclaw.ai | OpenClaw Enterprise "always free" (29 September 2026) |
| portal.nousresearch.com | Nous: Hermes Business and Enterprise |
| manus.im | Manus Flex: bring your own model key (29 September 2026) |
| kortix.com | Kortix: credits for the sandbox only, BYOK |
| openhands.dev | OpenHands: models "at cost, no markup" |
| agent-zero.ai | Agent Zero: A0T token as financing |
| github.com | nanobot: affiliate links to model providers |
| vaquill.ai | external estimate: Harvey seat price |
| layer3labs.io | external estimate: Legora seat price |
| sacra.com | Sacra: Abridge about USD 2,500 per physician per year, ARR |
| legal.thomsonreuters.com | Thomson Reuters: CoCounsel in bundles with Westlaw |
| lawnext.com | LawSites: Clio Work USD 199 per user |
| bluej.com | Blue J: USD 1,498 a year |
| microsoft.com | Microsoft: Copilot Business USD 18–21 |
| github.com | GitHub: OpenClaw repository (stars, security reports via the API, 11 October 2026) |
| anthropic.com | Anthropic: Series G USD 30 bn at USD 380 bn, run-rate USD 14 bn, Claude Code >USD 2.5 bn (12 February 2026) |
| itiger.com | secondary press: Anthropic run-rate about USD 44 bn (May 2026, SemiAnalysis) |
| mobihealthnews.com | press: Abridge Series E at USD 5.3 bn |
| fortune.com | press: Abridge as a "platform", customer scale (June 2026) |
| harvey.ai | Harvey: USD 550 m at USD 15.5 bn, 80% of the Am Law 100 (9 September 2026) |
| itbrief.co.uk | press: Harvey 1,500 organizations, 100k+ lawyers (May 2026) |
| raising.fi | secondary press: Harvey ARR >USD 400 m (September 2026) |
| nousresearch.com | Nous: USD 90 m, "24 million clones", "2.5% of tokens" (October 2026) |
| github.com | GitHub: Hermes Agent repository |
| manus.im | Manus: USD 100 m ARR, 147 trillion tokens, 80 million computers (December 2025) |
| sacra.com | Sacra: Manus about USD 450 m annualized (June 2026), share buyback |
| techcrunch.com | press: Manus round >USD 500 m (8 October 2026) |
| en.wikipedia.org | encyclopedia: 900 million weekly users (February 2026) |
| blog.google | Google: Gemini 1 bn+ monthly (11 August 2026) |
| bloomberg.com | press: Cursor ARR USD 2 bn |
| cursor.com | Cursor: joining SpaceX |
| en.wikipedia.org | encyclopedia: SpaceX deal timeline, ARR USD 3 bn (May 2026) |
| thenextweb.com | press: Granola Series C USD 125 m at USD 1.5 bn |
| arr.club | aggregator: Granola ARR growth in Q1 2026 |
| techcrunch.com | press: Sierra USD 950 m at >USD 15 bn |
| rutlandherald.com | press: OpenEvidence USD 250 m at USD 12 bn |
| felicis.com | Felicis: browser-use seed USD 17 m |
| github.com | GitHub: browser-use repository |
| noxtua.com | Noxtua: Series C EUR 100 m+, 30,000+ users |
| techcrunch.com | press: Noxtua Series B USD 92.2 m |
| beck-noxtua.pl | Beck-Noxtua: PLN 590 net, Legalis Silver requirement, certifications |
| en.wikipedia.org | encyclopedia: Perplexity valuation about USD 20 bn (September 2025) |
| thenextweb.com | press: Legora USD 100 m ARR in 18 months, funding |
| runtimewire.com | secondary press: Legora >USD 200 m ARR, valuation talks |
| aol.com | press: Genspark about USD 250 m ARR |
| finance.yahoo.com | press: Genspark USD 485 m at USD 2.6 bn (17 June 2026) |
| microsoft.com | Microsoft IR: 30 million+ paid Copilot seats |
| getpanto.ai | secondary source: 4.7 million paid GitHub Copilot |
| cognition.com | Cognition: run-rate USD 1 bn (25 September 2026) |
| en.wikipedia.org | encyclopedia: Cognition valuations, Windsurf history |
| vktr.com | press: Lovable USD 400 m at USD 13.3 bn |
| hlth.com | press: Heidi ARR USD 50 m, USD 340 m round (September 2026) |
| heidihealth.com | Heidi: Series B (October 2025) |
| cognition.com | Cognition: acquisition of Poke, >100 million messages |
| techcrunch.com | press: Poke USD 300 m after the round, "recipes", creator compensation |
| mistral.ai | Mistral: EUR 3 bn at >EUR 21 bn |
| techcrunch.com | press: Cohere ARR USD 240 m (2025) |
| techcrunch.com | press: Cohere + Aleph Alpha, USD 20 bn, Schwarz USD 600 m |
| thelogic.co | press: Clio buys vLex for USD 1 bn, Series G |
| finance.yahoo.com | press: Meta acquires Manus (December 2025) |
| techcrunch.com | press: Steinberger at OpenAI |
| anthropic.com | Anthropic: acquisition of Vercept |
| techcrunch.com | press: Meta buys Moltbook |
| cohere.com | Cohere: agreement with Aleph Alpha (16 September 2026) |
| techcrunch.com | press: NDRC blocks the Manus acquisition (27 April 2026) |
| dahuilawyers.com | law firm: first public prohibition in a Chinese security review |
| manus.im | Manus: independence, data deletion, data in the US and Singapore |
| manus.im | Manus: formal independence (1 September 2026) |
| thenextweb.com | press: Tandem USD 100 m from the Scaleup Europe Fund, MDR IIa |
| openclaw.ai | OpenClaw: Microsoft Autopilot on OpenClaw (25 September 2026) |
| sierra.ai | Sierra: Personal Agent Protocol with Meta (6 October 2026) |
| blog.google | Google: auto browse in Chrome on Android (18 August 2026) |
| eu.36kr.com | press: AI browsers <1% of the market, Chrome about 2/3 (August 2026) |
| techcrunch.com | press: Poke the first agent on Apple Messages for Business |
| docs.openclaw.ai | OpenClaw documentation: list of messengers in the gateway |
| hlth.com | press: Epic AI Charting (February 2026) |
| lexisnexis.com | LexisNexis: AI is 90% of new sales |
| prawo.pl | press: Wolters Kluwer and legal content in Poland |
| harvey.ai | Harvey: Tenet on Kimi K3, cost about 1/10 |
| cursor.com | Cursor: Composer 2, prices and results |
| gigazine.net | press: Composer 2 built on Kimi K2.5 |
| lawnext.com | LawSites: "Thomson" model on an open base |
| noxtua.com | Noxtua: Athena (open models) and Minerva tiers |
| bandt.com.au | press: Canva cuts its forecast over AI costs, own models 17–30× cheaper |
| harvey.ai | Harvey: MCP Policy Engine |
| dgft.nhs.uk | NHS: framework for 70,000 clinicians |
| en.wikipedia.org | encyclopedia: Rabbit r1, sales, key leaks |
| theverge.com | press: about 5,000 active out of ~100,000 r1 owners |
| techcrunch.com | press: 11x, fake logos, CEO departure |
| techcrunch.com | press: Artisan's LinkedIn ban |
| en.wikipedia.org | encyclopedia: Replit's agent deleted a production database (July 2025) |
| uctoday.com | press: claims against Otter survived (13 August 2026) |
| ppc.land | press: lawsuit against Granola (30 July 2026) |
| insiderllm.com | secondary source: audits of malicious skills in ClawHub |
| theregister.com | press: OpenClaw 2.0, unencrypted secrets, sandbox disabled |
| lindy.ai | Lindy: Apple ID ban over iMessage |
| community.openai.com | OpenAI forum: Atlas stops working on 9 August 2026 |
| techcrunch.com | press: Atlas shutdown announced on 9 July 2026 |
| en.wikipedia.org | encyclopedia: end of Project Mariner on 4 May 2026 |
| trymartin.com | Martin: last post on 23 April 2025 (stagnation) |
| embracethered.com | security blog: injection via PDF in Manus |
| promptarmor.com | security blog: file leak in Claude Cowork |
| damiencharlotin.com | database of cases with AI hallucinations (10 October 2026) |
| lindy.ai | Lindy: shift towards a "teammate in Slack" (31 August 2026) |
| claude.com | Anthropic: what people use Cowork for (July 2026) |
| techcrunch.com | press: ChatGPT dots |
| manus.im | Manus 2.0: Cloud Computer, automations (28 September 2026) |
| support.google.com | Google: Gemini Spark, 15 tasks, EEA exclusion |
| blog.cloudflare.com | Cloudflare: "flood of Mac mini purchases" (January 2026) |
| techcrunch.com | press: Ghost, an AI computer for USD 3,499 |
| huggingface.co | model card: Qwen3.8-27B 84.3% OSWorld-Verified (company data) |
| digital-strategy.ec.europa.eu | European Commission: the CADA proposal and sovereignty levels |
| learn.microsoft.com | Microsoft docs: EU Data Boundary without Anthropic models |
| theregister.com | press: Gartner recommends blocking AI browsers (8 December 2025) |
| techcrunch.com | press: OpenAI on the persistence of prompt injection |
| bankinfosecurity.com | press: Akamai buys LayerX for about USD 205 m |
| jonesday.com | law firm: Amazon v. Perplexity, injunction vacated (4 August 2026) |
| business-standard.com | press: blocking of the Doubao agent in Chinese apps |
| techcrunch.com | press: Claude for Legal (12 May 2026) |
| lawnext.com | LawSites: the new CoCounsel on the Claude Agent SDK |
| noxtua.com | Noxtua: Beck-Noxtua hosting on IONOS and Open Telekom Cloud |
| apps.apple.com | App Store: LEX AI prices PLN 49/120/489, servers in Poland |
| noa.ai | Noa: Noa Notes PLN 199 + VAT |
| wfirma.pl | wFirma: AI features included in the subscription price |
| gaius-lex.pl | Gaius-Lex: Gaius Vault on-premise, no price list |
| manus.im | Manus: token ratio 100:1, about 50 calls per task, cache about 10× cheaper |
| anthropic.com | Anthropic: Opus 5.5 prices USD 4/20 per million tokens |
| simular.ai | Simular: cost of long OSWorld 2.0 tasks (company data) |
| stat.gov.pl | GUS (Statistics Poland): 8.7% of firms use AI, 23.2% in professional services (2025) |
| ec.europa.eu | Eurostat: AI in EU firms 19.95%, adoption barriers (2025) |
| pie.net.pl | PIE: 77% of firms without AI will not adopt it "until they have to" |
| stackoverflow.co | Stack Overflow 2025: trust in AI 26% in Poland |
| ceneo.pl | Radeon AI PRO R9700 prices in Poland, about PLN 8,900 (11 October 2026) |
| amd.com | AMD: R9700, 300 W TBP |
| ceneo.pl | ASUS Ascent GX10 from PLN 24,499 (11 October 2026) |
| apple.com | Mac mini M5 Pro from PLN 8,499 |
| ceneo.pl | Strix Halo mini PC 128 GB, PLN 13,490–19,999 |
Technical patterns (03-TECHNICAL-PATTERNS.md)
Checked by the research team on 11 October 2026 (files research/2–6); company data is flagged in the text (company data).
| Source | What I took |
|---|---|
| Manus: Context Engineering for AI Agents | six context rules, KV-cache as the main metric, todo.md, input-to-output ratio ~100:1 |
| Manus: Browser Operator · Cloud Browser | local browser as the actuator, logging every action, "Take Over", banking through the local browser |
| E2B: how Manus uses E2B | Firecracker micro-VMs ~150 ms, dropping Docker |
| Harvey: multi-model by design | per-task routing, failover, administrator's model list, BigLaw Bench |
| Harvey: Tenet | Kimi K3 + RL, no client data, cell cost ~1/10, −90% per query |
| Harvey II | matter "Spaces" |
| Harvey: MCP Policy Engine | "lethal trifecta", tool pinning, Rego, Unicode sanitizer outside the model |
| Google: security architecture of the agent in Chrome | goal-alignment critic, Agent Origin Sets, deterministic confirmations, work log |
| Gemini API: computer use | safety_decision, 7 policy categories |
| Google: Gemini Spark | handing over login and payments, unavailable in the EEA |
| Google: CC | a daily e-mail as the interface |
| OpenClaw: Microsoft Autopilot | policy-compliance check, masking secrets in approvals, "unknown outcome — no retry" |
| OpenClaw docs: heartbeat · standing orders · dreaming · workspace · local models · index | 30-minute heartbeat and wake-up limits, programme contract, memory in files, no hard sandbox, offline work, channels |
| OpenClaw: security in public · ClawScan | report statistics (1,309 / 746 / 87%), skill scanning |
| The Register: OpenClaw 2.0 | sandbox still not the default |
| Cisco: OpenClaw security nightmare | 26% of 31,000 skills vulnerable, exfiltration via curl |
| Hermes docs: memory · skills | limits of 2,200 / 1,375 characters, frozen snapshot, skills scanned at install |
| OpenHands: condenser · runtime · security | context condensation, event stream, ConfirmRisky and risk analyzers |
| digitalapplied: ChatGPT Work | "Plan mode" as the consent boundary |
| Decrypt: DevDay 2026 | opening up the Codex harness |
| TechCrunch: ChatGPT Pulse | overnight brief |
| Claude: browser use · computer use | accessibility tree, element references, screenshot cost of 1,000–1,800 tokens |
| Simon Willison: Claude Cowork | local VM, mounting selected folders |
| PromptArmor: Cowork exfiltration | exfiltration via an allowed API |
| Claude for Chrome · Anthropic: prompt injection defenses | confirmations before publishing and purchasing; 23.6% → 11.2%, ~1% for Opus 4.5 |
| Claude: memory | memory in topic files, sensitive topics not saved by default |
| Claude Code: data usage | credentials outside the VM, traffic proxy |
| browser-use: ain.ua · CDP changelog · Agency changelog · docs · BU 2.0 · WebVoyager report | "text first", CDP, approvals only before an external action, secret bindings, cloud-only features, 89.1% after removing 55 tasks |
| HAL: Online-Mind2Web | independent 40.0% for browser-use + Sonnet 4 |
| UI-TARS-desktop · UI-TARS-1.5-7B | GUI vision model, GUI + DOM hybrid, event browser, ~27.5% OSWorld for 7B |
| Agent S | separate "where to click" model, choosing the best run, 72.6% OSWorld |
| MSR: Fara-7B | training a small model on synthetic trajectories |
| Microsoft: agent workspace | separate Windows account for the agent, six folders |
| Microsoft 365 Copilot: privacy | Anthropic models outside the EU Data Boundary |
| Jones Day: Amazon v. Perplexity | local execution, cloud reasoning in Comet |
| the-decoder: BrowseSafe | 91% detection, ~10% of attacks get through |
| TechCrunch: Perplexity Computer | 19 models with sub-agents |
| NVIDIA NemoClaw · NanoClaw | sandbox by default and egress approval; container per agent, scripted gates, credential gate |
| Kortix README | credential broker with a single token |
| Lindy: pricing · Lindy: iMessage | approvals by external impact; Apple ID block, ratio ~10:1 |
| TechCrunch: Poke recipes · TechCrunch: Poke in Apple Messages · Cognition | text recipes, first agent in Messages for Business, >100 million messages |
| LexisNexis: Protégé | partner skills, customers "soon" |
| Spellbook · LawNext: Spellbook | Word plugin; share of accepted suggestions as a metric |
| Noxtua · Noxtua security | Athena / Minerva, EU sovereign cloud, Word and Outlook plugins |
| Nabla: STT reliability | Whisper + 7,000 h of medical audio, the raw transcript does not reach the records |
| Abridge: confabulation elimination | Linked Evidence, guard 97% vs 82% |
| Wikipedia: OpenEvidence | RAG over licensed literature with citations |
| Hebbia: Matrix 2.0 | grid interface, human checkpoints, "you can see where every number comes from" |
| CoCounsel Legal | Tabular Analysis 10,000 × 100 |
| Prawo.pl: LEX Expert AI | answers with links to LEX excerpts |
| Decagon: Series D | Agent Operating Procedures |
| Basis: behavior specs | trajectory evaluation, specifications hidden from the agent |
| Sierra: τ-bench | pass^k, drop to ~25% at pass^8 |
| Cursor: Composer 2 · Gigazine · Cursor: data use | open Kimi base, not disclosed at launch; requests via the backend |
| itbrief: Glean Tau | routing, USD 0.58 vs USD 2.98 per task (vendor benchmark) |
| Granola: transcription · Startup Fortune · ppc.land | two "Me / Them" channels, no audio recording; sharing and training on by default; the Chamberlain v. Granola lawsuit |
| TechCrunch: Ghost | egress firewall as a trust feature |
| Brave: Comet prompt injection | structural cause, same-origin does not protect |
| TechCrunch: OpenAI on prompt injection · The Register: Gartner | "unlikely to ever be fully solved"; recommendation to block AI browsers |
| The Register: Comet calendar · BleepingComputer: BragJack | attack without a click; "prompt forcing" in five products |
| ComplexDiscovery | agent logs as evidence (title only) |
| NRA: § 23e ZZEA | personal verification, "due protection", naming the tools at the client's request |
| GDPR | Article 28, Chapter V, Article 32, Articles 33–34, recital 26 |
| EDPB: AI Privacy Risks – LLMs | re-identification risk |
| 18 U.S.C. § 2713 | CLOUD Act |
| UODO, 26 June 2026 | "regularly measure and test the security measures in place" |
| PLCC · CPTUB | Polish acceptance tests; best open model 89.83 vs 92–97 |
| arXiv 2609.32042: PolAgentBench | cliff between 3 and 2 bits in agentic tasks |
| arXiv 2608.30929 · arXiv 2511.04205 · arXiv 2606.12250 · arXiv 2608.12928 | statute retrieval 72.3% / BM25 61.7%; KIO (National Appeals Chamber) exam; −31 pp on medical exams; weak vision on Polish medical questions |
| arXiv 2606.29537: OSWorld 2.0 | 20.6% of long tasks completed, causes of failure |
| Bielik-11B-v3 · Bielik-Guard · gpt-oss-20b | Apache-2.0 licence, sizes, classifier precision 75.28% |
| Harness review: 02-BUILDING-BLOCKS · 03-ARCHITECTURE · 01-PROFILES | local tools (voice, vision, sandboxes, channels), rig figures (1,186 tok/s, 13.6 tok/s, 104.2 GB, repeatability 83), Moltis, ZeroClaw, OpenCode, Hermes TTS |
Poland and sovereignty (04-POLAND-AND-SOVEREIGNTY.md)
| Source | What I took |
|---|---|
| 18 U.S.C. § 2713 (Cornell LII) | Text of the CLOUD Act: "possession, custody, or control" regardless of location |
| EDPB–EDPS, reply to LIBE (12 July 2019) | A CLOUD Act request without an international agreement is not a basis under the GDPR |
| The Register (25 July 2025) | Microsoft France's testimony in the Senate: "Non, je ne peux pas le garantir" |
| Microsoft — European digital commitments | Contractual commitments, not immunity |
| GDPR (EUR-Lex) | Articles 9, 10, 28, 32–35, 44–49, 48 |
| GDPR recital 91 | A single physician or lawyer is not "large scale" — a DPIA is not mandatory |
| CMS on EDPB Opinion 28/2024 | Model anonymity and legitimate interest |
| Ustawa o prawach pacjenta (Patient Rights Act) (Dz.U. 2024 poz. 581) | Articles 13–14 and 24(2)–(6): IT staff and the processor are bound by confidentiality |
| European Commission — EU–US transfers | Date of the DPF decision (10 July 2023) |
| WilmerHale (blog) | Judgment T-553/23 Latombe (3 September 2025) |
| secureprivacy (blog) | Appeal C-703/25 P pending |
| Skadden (July 2026) | Trump v. Slaughter and the estimated date of the CJEU judgment |
| Microsoft EU Data Boundary | Completion on 26 February 2025 and the exceptions |
| Microsoft Sovereign Cloud | Data Guardian, Azure Local, Bleu, Delos |
| Copilot — privacy | Anthropic models outside the EU Data Boundary |
| Copilot — pricing | Business USD 18/user/month |
| Microsoft FY26 Q4 | 30+ million paid Copilot seats |
| AWS European Sovereign Cloud | GA 15 January 2026, Brandenburg, EU staff |
| S3NS and ANSSI SecNumCloud | SecNumCloud 3.2 and protection against extraterritorial law |
| OVHcloud AI Endpoints, STACKIT, IONOS AI Model Hub | EU clouds without a US parent company; IONOS token prices |
| Azure — region list, OChK | Poland Central; "100% Polish" when reselling US AI |
| CADA (European Commission) | Sovereignty levels L1–L4, status of the proposal |
| Prawo o adwokaturze (Advocacy Act) (Dz.U. 2024 poz. 1564) | Article 6 |
| NRA — changes to the ZZEA (Code of Ethics of Advocates) and Rzeczpospolita (16 June 2026) | § 23e and § 19(6) |
| Ustawa o radcach prawnych (Legal Advisers Act) (Dz.U. 2024 poz. 499) | Article 3(3)–(6) |
| KIRP — recommendations and prawo.pl | 22 recommendations, co-authors, scope |
| Ustawa o zawodach lekarza (Medical Profession Act) (Dz.U. 2026 poz. 37) | Article 40 |
| Kodeks Etyki Lekarskiej (Code of Medical Ethics) (NIL) and OSOZ blog | Article 12 and criticism |
| Ustawa o doradztwie podatkowym (Tax Advisory Act) (Dz.U. 2026 poz. 1274) | Article 37 |
| Rzeczpospolita on KIDP (12 January 2026) and IKiDP (9 August 2026) | Verification of AI outputs; risk of pasting documents |
| Prawo o notariacie (Notaries Act) (Dz.U. 2026 poz. 614) | Article 18 |
| Ustawa o biegłych rewidentach (Statutory Auditors Act) (Dz.U. 2025 poz. 1891) | Article 78 |
| Kodeks karny (Criminal Code) (ISAP) | Article 266 § 1 |
| Charlotin's hallucination database | 2,184 cases, 6 in Poland (10 October 2026) |
| AI Act (EUR-Lex), Article 50, Article 6, Annex III | Roles, transparency, the exception in Article 6(3), high-risk categories |
| AI Omnibus (OJ EU), FPF, Lewis Silkin | Timeline after the Omnibus, Articles 4 and 4a |
| GPAI guidelines (Commission) | "Significant modifications" |
| MDR (EUR-Lex) | Rule 11 |
| Ustawa o systemach SI (AI Systems Act) (Dz.U. 2026 poz. 1003) | Articles 5, 9, 11, 12, 13, 15, 127 (text read) |
| gdpr.pl and infor.pl | Confirmation of the dates 11 August and 28 October 2026 |
| PLD (Commission) | Software and AI as a product, from 9 December 2026 |
| CRA (Commission) | Reporting from 11 September 2026, obligations from 11 December 2027 |
| UODO — checklists, UODO — MyDr, UODO — security testing | Initial questions (6 August 2026), the MyDr inspection, testing of measures |
| Noxtua, security, Series C, TechCrunch | Tiers, hosting, users, funding |
| Beck-Noxtua, Noxtua PL, Noxtua CZ | PLN 590 net, Legalis Silver+, IONOS and Open Telekom Cloud |
| Mistral pricing, heise | Vibe and prices |
| Proton Lumo pricing, privacy, Help Net Security | Price, encryption, models, Lumo 2.0 |
| Nextcloud AI, llm2 | On-prem AI apps and default models |
| Cohere North 2, TechCrunch (February 2026), TechCrunch (April 2026) | Air-gap, ARR, merger with Aleph Alpha |
| DeepL Pro, Langdock | Prices and hosting |
| Heidi safety, Heidi GDPR, Heidi plans | No recordings, EU residency, prices |
| Nabla (Commure, competitor's review), STAT | Audio in the browser, 14-day retention, funding |
| prawo.pl on LEX Expert AI, Wolters Kluwer | Launch 19 November 2025, EU servers, expansion 14 July 2026 |
| Protégé Polska | Offering in Poland, demo only |
| Gaius-Lex, Legal Technology Hub, Signalbase | On-prem, segment of 20–99 lawyers, seed |
| LEX AI (App Store), lexai.pl | Prices PLN 49/120/489, servers in Poland |
| Noa pricing, Noa Notes | PLN 199 + VAT, AWS and Azure, 13,000+ professionals |
| Medidesk, Comarch ChatERP, Comarch AI, wFirma, inFakt, SentiOne | Polish market: hosting and approach to data |
| KSeF | Obligation deadlines and legal basis |
| iMagazine on mObywatel | Assistant on PLLuM without personal data |
| Eurostat, GUS, PIE | AI adoption in firms, barriers, professional services sector |
| Future Ready Lawyer 2026 (prawo.pl) | 92% of lawyers use AI daily |
| NIL — summary (30 June 2026) | Number of physicians and dentists |
| Bielik-11B-v3.0, arXiv 2601.11579, Minitron-7B, Bielik-PL-11B, arXiv 2604.10799, DFlash, Bielik-Guard | The Bielik v3 family: sizes, licences, APT4 |
| bielik.ai, Ollama SpeakLeash | Downloads, partners (Dell) |
| PLLuM-12B-chat, 250715, 12B-2512, 4B-2512 | The patchwork of PLLuM licences |
| CPTUB, PLCC, Polish Medical Leaderboard | Polish benchmark results with data dates |
| Qwen3.5-27B, Gemma 4 31B, gpt-oss-20b, EuroLLM-22B | Licences and context of open models |
| arXiv 2608.30929, arXiv 2511.04205, arXiv 2606.12250 | Statute retrieval, KIO exam, medical exams |
| arXiv 2603.04162, PolAgentBench arXiv 2609.32042 | 2-bit quantization: multiple-choice tests vs agents |
| whisper.cpp | Speed of large-v3-turbo |
| Mac mini, Mac Studio, Apple newsroom, Apple power draw | Prices in Poland, memory, power draw |
| llama.cpp #4167, #15396, #16578, #10879, Ollama MLX, LMSYS, Framework forum | Decoding and prefill speeds |
| bestllmfor (estimates), runaihome (blog) | Estimates for M5 and Strix Halo, noise and power draw |
| ceneo GX10, ceneo DGX Spark, ceneo Strix Halo, ceneo RTX PRO 6000, ceneo R9700 | Prices in Poland on 11 October 2026 |
| NVIDIA forum (price change), tech-insider | Rising prices of high-memory hardware |
| EuroHPC AI Factories, Beyond.pl | Where to fine-tune models away from your desk |
Addendum: the European gap and agent retention (02-MARKET.md)
| Source | What I took |
|---|---|
| cryptobriefing.com | press: Muse — 5 million downloads in the US in 22 days, about 700k daily users at the end of September 2026 (02-MARKET, 9. The European gap) |
| about.fb.com | Meta (company data): Muse from 8 September 2026, cloud virtual machine, availability in the US and Canada |
| techcrunch.com | press: Muse Glimmer, 10 August 2026 |
| venturebeat.com | press: Glimmer — Apache 2.0, about 30 bn parameters, 4-bit on a 24 GB GPU |
| heise.de | press: Siri AI (iOS 27, 14 September 2026) unavailable on iPhones in the EU (DMA) |
| aboutamazon.com | Amazon: list of Alexa+ countries — without Poland |
| androidheadlines.com | press: Gemini Spark unavailable in the EEA, Switzerland and the United Kingdom |