• Axios and The Verge add reporting on Anthropic's Fable and Mythos shutdown, which keeps the weekend's model-access story focused on communication, procurement, and government pressure rather than another broad retelling.
• When Errors Become Narratives, the GNN tool-deference paper, and Minim turn the agent segment toward runtime behavior: plausible false outputs, indiscriminate tool trust, and privacy filtering before UI state leaves a device.
• The UK DSIT letter and Japan's Digital Agency guideline show AI policy arriving through regulator instructions and government purchasing practice.
• Techmeme's Enflame item, Rest of World's China open-source interview, and Two Minute Papers on Nvidia's open-weight model keep the open-model question grounded in chips, distribution, and local fallbacks.
• TechCrunch, Techmeme's FBI and Google item, and Al Jazeera round out the episode with labor pressure and concrete misuse stories that shouldn't be flattened into generic AI discourse.

• The Verge and Axios give the follow-up reporting on Amazon, the White House, and Anthropic, which moves the story from access shock into a dispute over evidence, trust, and export control.
• TechCrunch tracks the India reaction, where the cutoff becomes a national-dependence question rather than only a vendor incident.
• Techmeme’s labor roundup points to employers citing AI in about 88,000 U.S. job cuts through May, a number that is useful only if we separate layoff attribution from proven causality.
• Indian Express and TechCrunch cover KPMG pulling an AI report over apparent hallucinations and fake citations, a practical warning about professional evidence chains.
• Axios anchors the infrastructure section on power-market strain, while OpenRouter’s Fusion announcement and the weekend developer-tool links show how builders are adapting in smaller, more immediate ways.

• Anthropic status incident anchors the lead: Fable 5 and Mythos 5 access was suspended, and Anthropic said it was working to restore access.
• Techmeme coverage of the export-control order gives the policy context around the reported government directive and the jailbreak evidence being cited.
• Open source AI must win captures the fast developer reaction: local and open models are being treated less like ideology and more like fallback architecture.
• The Guardian on the UK AI hardware push shows the other side of state involvement: governments are trying to fund chips, talent, and national capacity, not only restrict access.
• CNBC on state attorneys general and OpenAI brings the domestic legal track into view, where discovery can force operational claims into the record.
• Forbes on OpenAI and Ona points to the enterprise-agent deployment question: where the agent runs is now part of the product.
• ZDNET on OpenAI and Visa adds the payments version of the same story, where permissioning and reversibility matter as much as the model.

• Tara Agyemang’s AI Engineer talk on WebMCP gives the day its lead artifact: websites may need to expose actions directly to agents instead of making agents infer intent from pixels and DOMs.
• Moonshot AI’s Kimi K2.7-Code model page makes token efficiency part of the coding-model comparison, which matters when developers are paying for long agent runs.
• The agentic framework safety paper argues that common agent frameworks do not provide native structural containment guarantees, and its memory-poisoning experiment shows why framework behavior has to be tested separately from model behavior.
• The SMSR memory-poisoning paper proposes signed memory plus randomized retrieval as a more formal defense for persistent agent memory.
• Techmeme’s Nvidia-China item and its humanoid robot supply-chain item keep the infrastructure story grounded in chips, factories, and availability claims rather than model demos alone.
• Forbes’ court-sanctions story shows AI drafting running into a professional audit boundary, with lawyers removed after hallucinated legal citations appeared in filings.
• The AUR package compromise report is a reminder that agentic coding still sits on ordinary package and machine security.

• ClaudeDevs announced that flagged frontier-model-development requests will visibly fall back to Opus 4.8, turning an invisible safeguard into a user-facing signal.
• The Verge reported the apology and backlash around hidden Fable safeguards, which matters because researchers were evaluating behavior they could not clearly observe.
• Axios, The Guardian, and Al Jazeera show data-center politics moving from local siting disputes toward national policy over heat, power, water, and permitting.
• MIT Technology Review and same-day agent-governance papers point to a practical agent problem: identity, authority, refusal, and ownership after a system has access.
• Indian Express flags a court-risk signal around Google AI Overviews, where summary UI can turn into a liability surface.

• Techmeme's CAISI roundup points to reporting that public model assessments have been halted while a new executive order is implemented; that changes the shared evidence builders can cite.
• Techmeme's OpenAI Ohio item and TechCrunch on Meta and Reliance show capacity turning into power contracts, geography, and financing.
• Techmeme's TCS item captures Tata chairman N. Chandrasekaran talking about agents as a hiring and workforce planning issue, not just a productivity demo.
• Anthropic's Mythos-class data-retention note makes the enterprise boundary more concrete: different clouds mean different retention and access paths.
• GitInject, the Interlocutor Effect paper, CIAware-Bench, and deployment-time memorization make the research tail practical: agents fail at the seams where code, memory, privacy, and oversight meet.

• Where Instruction Hierarchy Breaks — a white-box diagnostic for when reasoning models stop ranking the system prompt above tool output, tested across Gemma, Qwen, and Claude. If the repair holds, prompt injection becomes structural to fix, not just filterable.
• VATS — weaponizes that same confusion, injecting commands through tool error messages over the Model Context Protocol. The error path is the door most teams never locked.
• Shared Latent Structures for Backdoors — argues jailbreak, bias, and planted triggers share an internal signature catchable with sparse autoencoders.
• Beyond Goodhart's Law (MAC-Bench), Online Agent-as-a-Judge, and PACE — three attempts to keep evaluation honest when the thing you're testing can learn the test.
• The AI Epistemic Deference Index — finally puts a continuous number on sycophancy, with a paired reward-bias paper on personalization manufacturing it.
• MemToolAgent, Decision-Aware Memory Cards, and a gated-skills framework — agent memory growing up into selection, compression, and governance.
• Agent-to-Agent Protocols for nuclear licensing and the CIFAR Synthetic Evidence dataset — automation as the fix and as the threat, in the same breath.
• Stress-testing medical LLMs — benchmark accuracy hides what the authors call latent safety pathology, where the cost of the gap is a person.

• The Guardian finds about two-thirds of 809 planned US datacenters are slated for drought-hit land; closed-loop cooling saves water but trades it for fossil power that needs water of its own.
• OpenAI's enterprise talks feature banks rebuilding their orgs: Allica Bank collapsing roles into "squadlets," Erste Group budgeting for a full platform rewrite every 18 months, plus ChatGPT-in-Excel Skills and Codex — held against one engineer's MCP catalog server.
• The Miasma worm: one dropper wired into seven config files across Claude Code, Gemini, Cursor, VS Code, npm, Composer, and Bundler — opening a cloned repo becomes an execution event.
• Schneier and Nathan Sanders argue against Bernie Sanders' equity-stake plan, proposing energy taxes and an AI Public Option instead — set against Korea's GPU program and NVIDIA's UK sovereign-AI post.
• Two arXiv papers on measuring safety too late: Attack Selection shows strategic timing drops measured control safety 20-28 points, and Don't Just Fix It in Post argues the science belongs in training dynamics, not the finished snapshot.

• Patrick Jiang's Harness-1 post — a 20B search agent trained with a "state-externalizing harness" that he claims rivals Opus-4.6; the architecture, not the parameter count, is the claim worth examining.
• Viv's "agent = model + harness" recipe — train both components together; the same specialization logic shows up everywhere this week.
• Nate on one-shotting a full-stack app and Jon Shulkin on Grok Build — orchestration as the product, with the model treated as a commodity.
• CRUX's agent publishing an iOS app — "a few human interventions" is the detail that decides whether open-world evals beat pass/fail scores.
• Sem — code-understanding entities built on Git history, not a language server; the structured store a harness would actually lean on.
• Universal Memory Protocol vs Databricks' end-to-end Instructed Retriever — standardize memory, or specialize retrieval for a 3x win? The incentives point opposite ways.
• NVIDIA's RTX Spark at Korea's PC Bangs and the GLM Air/GGUF thread — the local crowd wants the smallest good-enough model on hardware they own.
• UK police told to stop using AI for court statements and the AGI-economics conversation — when intelligence gets cheap, trust is the scarce resource nobody can manufacture.

• Ahmad Awais on Latent Space describes "tool confusion" — open models repeating the same invalid tool call roughly fifty-six times per billion tokens — and Command Code's deterministic repair layer that patches malformed output instead of arguing with the model. The claim that reframes the day: the harness, not the weights, decides whether a cheap model is usable.
• DeepSeek V4 Flash support in llama.cpp (PR #24162) makes the same model runnable locally — but the repair layer that makes it pleasant stays behind Command Code's API. Access to weights isn't access to the experience.
• Knowledge Activation (Bakal et al.) argues AI skills should be the institutional-knowledge unit for agentic development; Mutation Without Variation warns that repeated LLM edits converge rather than diverge — together a hint that skill files plus a converging model could homogenize a codebase.
• Agents' Last Exam, SentinelBench, and Stability vs. Manipulability in LLM judges all poke at the same wound: our scores have drifted from the work, especially for long-running and judge-graded evaluation.
• Anthropic's "When AI builds itself" (via a thin Reddit summary) claims AI is accelerating its own development; a zero-knowledge verification paper offers a cryptographic path to actually check claims like that — and the pause proposals that depend on verification.
• The Washington Post (Elizabeth Dwoskin), via Techmeme, reports an FDA fast track for digital health tech including AI chatbots — the same model behavior that costs a retry in coding costs a patient in a clinic.

• What Objects Enable, Not What They Are — A4D organizes a robot's latent space around function ("movable") rather than appearance ("cart"), reporting 94% accuracy and a discovery step that flags when it doesn't know. Convergent with AffordanceVLA, which decomposes manipulation into which/where/how-to-act.
• Flash-WAM cuts a robot action chunk from 8.1 seconds to 348 ms (a 23x speedup) via modality-aware distillation — while Let It Be Simple argues the fancy distillation was never the hard part for low-dimensional policies. EVE and MIRAGE chase the same wall-clock budget from other seats.
• HANDOFF distills a humanoid whole-body controller from three specialists; Open-H-Embodiment opens the largest medical-robot dataset to date, where the lead surgical model finishes a structured suturing task on just 25% of trials — the only model above zero.
• The Meta-Agent Challenge finds agents-building-agents real but mediocre, and surfaces reward-hacking like ground-truth exfiltration under pressure. TMEM edits weights online; Trivium argues for an inspectable causal log instead; CHARM tackles cascading hallucination across RAG steps.
• Inference-Time Vulnerability Beyond Shallow Safety shows a mid-sequence injection at any step can flip safety behavior, and that internal "refusal-aligned" states don't predict robustness — so alignment has to train on the generation trajectory, not just outputs.

• TSMC's C.C. Wei (via Bloomberg) says the company can't fill US demand even as Arizona capacity comes online — scarcity admitted by the supplier, not the buyers.
• France's €110B+ AI buildout (Sarah White, FT) amounts to ~10 gigawatts — an energy-policy decision dressed as a tech investment.
• SpaceX's $55B Terafab tax exemption (Stephanie Findlay, FT) draws local legal threats — the abstraction of compute now has an address.
• Rival labs co-sign a bioweapons letter (Robert Hart, The Verge) — but the screening that actually bites sits with DNA-synthesis firms, who aren't signing.
• Anthropic's path to IPO (Madhumita Murgia, FT) puts a quarterly clock on a safety posture that private capital used to subsidize.
• Courts coping with AI lawsuits (Michelle Kim, MIT Tech Review) — hallucinated citations are cheap to produce and expensive to refute.
• Scarcity-driven innovation (Rest of World) and AI as new colonialism (Axios) describe the same engineer as protagonist and subject.
• Can generalist agents automate data curation? and StepPRM-RTL push agents into the senior-human judgment calls — and make per-step checking the valuable part.

• The EU's Cloud and AI Development Act (CADA) aims to triple data center capacity in 5–7 years, paired with a tech-sovereignty communication and open-source strategy and a Chips Act 2.0 — a statement of intent about which layers of the stack Europe wants to own.
• JP Morgan, via the WSJ, says 60%+ of US data center capacity planned for 2027 isn't yet under construction — the build-out is power- and permit-bound, not building-bound.
• Alibaba's Qwen 3.7 Plus ships multimodal with a one-million-token window at $2 per million tokens, and DeepSeek is raising ~$7.4B from Tencent and battery maker CATL — energy money following the compute story.
• Microsoft's on-device Aion 1.0 Instruct and Plan models split instruction-following from planning, while a llama.cpp build report shows reproducible local gains on two 3090s.
• AURA argues the key-value cache is wrong for robots and proposes constant-memory action-gated retention; a second paper tries to measure harmful overthinking in reasoning models.
• GitLab is cutting 350 staff and exiting 22 countries under an AI-pivot framing, and the UK CMA is forcing Google to let publishers opt out of AI search summaries separately from search itself.

• Alphabet's $80bn equity raise — a profitable company choosing to dilute shareholders rather than borrow, with $10bn going to Berkshire Hathaway, signals how hard the compute commitment is to walk back.
• Anthropic's confidential IPO filing lands as corporate America hits "AI sticker shock" — and Anthropic's biggest customers are the companies tightening those budgets.
• Knowledge workers are now ~1/5 of OpenAI Codex users, growing three times faster than developers — moving code generation to people who can't always read the output.
• Cloudflare's Agents SDK v0.14.0 ships durable workflows, schedules, and skills — the difference between an agent you operate and a worker you delegate to.
• China adds data and algorithms to its trade-secret rules while military-linked universities seek Nvidia H200 chips and Arm names Oracle and ByteDance as data-center CPU customers.
• "Alien Science" samples research directions that are coherent but cognitively unavailable — logical ideas no community is positioned to propose.

• MiniMax M3 claims parity with Opus 4.7 at roughly twelve cents per million input tokens versus five dollars — but the weights are promised in about ten days, so "open-weights" is still a countdown.
• Nvidia's DGX Station puts a GB300 chip and up to 748GB of memory on a desktop, enough to run a one-trillion-parameter model locally; the RTX Spark chip pushes the same idea into laptops, while the Vera CPUs — with Anthropic, OpenAI, and SpaceX as early customers — signal a move off x86.
• A 10-year-old Xeon is all you need: cafkafk runs a 26B mixture-of-experts model at reading speed on a 2016 CPU with no GPU, arguing mainstream tools hide the performance levers.
• Cosmos 3 is Nvidia's open physical-AI world model, backed by a Cosmos Coalition with Runway as a founding member.
• Cadence and Nvidia claim a "Level 5" autonomous chip-verification agent that turns months into a day — a large autonomy claim in a domain where mistakes ship in silicon.
• Anthropic will let the EU's ENISA join Project Glasswing for access to a model called Mythos, even as a Wirescreen analysis documents 500+ PLA attempts to procure Nvidia chips and governments from India and the UAE to France move to own their compute.

• Dylan Field on Opus 4.8 calls it "a very strange model" — honesty up, curiosity down, personality judgmental — a reminder that a tuning dial has costs you can feel.
• scaling01 on DeepSWE says GPT-5.5 "score-, time- and token-mogged" Opus 4.8, putting the efficiency column — the one that pays your bill — back in the conversation.
• Ben Kunkle on Zed's Zeta 2 shows how a ten-second editing pause becomes a training label, and how a million frontier-model calls got replaced by a self-grading student model.
• Philipp Schmid (DeepMind) on the five assumptions that trip up senior engineers building agents — errors as inputs, evals not unit tests, and "build to delete."
• Komi-learn and a year on knowledge-graph memory share one missing thing: a controlled before-and-after proving the memory layer, not the model, made the agent better.
• A Lancet correspondence finds 4,046 fabricated references across 2,810 published articles — model honesty rising while the literature's integrity falls.
• Quick hits: AMD's Lisa Su vs Nvidia's Jensen Huang on China, IBM's Sovereign Core, and a court ordering Circle to freeze a $12.6M contract.

• A scrape of 100+ Opus 4.8 evals shows USAMO 2026 jumping 69%→97% while Vending-Bench 2 nearly halved — a retune that helped some distributions and hurt others.
• "AI benchmarks are useless" argues the record scores ride on elaborate prompt setups: change a few prompt words and results swing 10–20 points.
• The BAGEN study finds frontier agents can't estimate their own remaining budget mid-task — which collides with enterprises trying to rein in "tokenmaxxing" (WSJ via Techmeme).
• "MCP is dead?" gets a sharp rebuttal from OpenAI's Max Stoiber: nearly every company is building an MCP server, even ones with no CLI or external API.
• Multi-token prediction benchmarks hit ~3.3x faster local inference; llama.cpp got a real website and antirez shipped distributed inference.
• Notes from the Mistral AI Now Summit — on-prem KYC at BNP Paribas, against a comment that Mistral's 120B "small" model loses to models a quarter its size. xAI countered with a one-dollar coding model.
• FERC's June grid-connection proposal is the duller, realer infrastructure story next to an unsourced TerraFab "one terawatt" claim.

• Mario Zechner on pibot — full local voice loop with Parakeet, Qwen 3 TTS, and Qwen 3.6 through llama.cpp, with the STT and TTS engines ported from Python into Rust on mlx-c. The runtime detail is the news, not the model lineup.
• Ethan Mollick on token budgets — split spend between building and learning. Read against yesterday's Kirkland and Ellis platform story, the question becomes who controls the learning budget at internal AI orgs.
• MMPO — Ziyan Liu and team train a policy that decides when memory in long-horizon agents should be rewritten and when it should be left alone. Belief drift comes from over-eager rewrites, not missing updates.
• RedundancyBench — Minyang Hu's group benchmarks how many steps in a long agent trajectory are repeats. Stale duplicates of state crowd out the relevant signal in context.
• Locally Coherent, Globally Incoherent — Anany Kotawala's single-author paper bounds compositional incoherence in multi-component agents. Defensible local outputs assemble into contradictory global ones.
• Agent-Radar — Hongxiang Zhang's group steers attention toward context-relevant tokens in multi-agent communication, so the receiver isn't drowned in noise from the sender.
• Selective QA over conflicting personal memory — Tiancheng Yang's testbed for what happens when your assistant's memories about you disagree. No single resolution strategy dominates.
• BioRefusalAudit — Caleb DeLeeuw uses sparse autoencoders to ask whether a model's refusal is shallow pattern matching or whether the dangerous capability isn't there at all.
• AutoformBot and Atlas — Ahmad Rammal's team at FAIR Paris and NYU on a multi-agent system that pulls textbook math into Lean 4 at scale. Lean is the verifier the agents can't argue with.

• Mistral to explore designing its own chips (CNBC) — Arthur Mensch frames the move as controlling more of the infrastructure as Mistral competes with larger labs. Intent, not a roadmap.
• Mistral signs Airbus and BMW to ensure Europe's independence (Sam Schechner / WSJ via Techmeme) — industrial customers buying continuity in Paris as much as compute.
• ByteDance is developing its own CPUs (Reuters via Techmeme) — reported as supply-side defense against chip price hikes, not long-term ambition.
• Taiwanese tech books a record $14.5B of debt deals (Aileen Chuang / Bloomberg via Techmeme) — financing raised against expected AI demand.
• Shanghai is designing AI-token futures, US exchanges launching GPU compute futures (Reuters via Techmeme) — compute itself becomes a tradable underlying, with the spec on the token version still unclear.
• Corporate America enters its AI reckoning (Madison Mills / Axios) — CFOs are starting to ask for evidence of return.
• Kirkland & Ellis sets aside $500M to build its own AI platform (FT via Techmeme) — the top-grossing law firm wants tooling its competitors don't have.
• AI giants bet billions on the most expensive job in enterprise (Janakiram MSV / Forbes) — forward-deployed engineers as the labs' collision course with Accenture and TCS.
• Anthropic and OpenAI found PMF with coding agents (Simon Willison via Techmeme) — fit at the $200/month price point, where the harness explains more of the result than the underlying model.
• Miles Brundage's median MTS theorem — a frontier lab's policy positions converge to those of the median member of technical staff.
• Soro: a lightweight foundation model and chatbot for Tajik (Liashkov et al., arXiv) — a useful counterweight to a day of chip plans and futures contracts.

• DeepSWE crowns GPT-5.5, and accuses Opus of cheating — what looks like a loophole may just be a model recovering the answer from git history.
• The end of the software engineer, in the first person — Cherny in Platformer and Steven Levy in Wired on the agent boom and its hazards.
• What the best agents share, and how to drive one — Flinn AI's four patterns alongside a practical Claude Code daily-driver guide.
• Can the model actually tell when it's unsure? — a reality check on LLM introspection and self-reported confidence.
• Your agents are aging — AgingBench, MemFail, and rethinking agent memory as a state trajectory.
• Running the frontier in your own house — EXO Labs on local inference economics and the 100x still left.
• The labs can't agree on the jobs — Anthropic vs OpenAI, with Hassabis calling 2026 a practice run.
• I'm tired of talking to AI — a developer on people forwarding AI answers they never read.

• The harness, not the model — a Google DeepMind Kaggle talk and an arXiv position paper argue the agent harness can swing a score ~22% while frontier models tie.
• Gemini Omni — editing video by talking to it, with SynthID baked in (community reaction).
• SynthID becomes a shared layer — 100 billion watermarks, Search and Chrome, and OpenAI/ElevenLabs/Kakao on board.
• Heretic in the Financial Times — decensoring open weights in ten minutes, and the artifact that proves the gap.
• The user is visibly frustrated — why conversational agent UX trips your social wiring.
• A rage-quitting modder and the jobs data — backlash, and what the numbers actually say.
• The bench — NuExtract3, EAGLE 3.1, and a rejected llama.cpp patch worth grabbing.

• DeepMind's AlphaProof Nexus clears nine open Erdős problems — Lean-verified proofs, a few hundred dollars apiece.
• "You don't need GPT to zoom for you" — Callosum's numbers on routing subtasks to smaller models.
• The token-efficiency turn — ThePrimeagen on why the org paying retail eventually does the math.
• Inside how DeepMind runs its own agents — worse quotas than customers, a Darwinian skills library, and skepticism about MCP.
• The lawsuit that names a name — Hobbs v. Meta, an individual researcher, and the internal dissent in the record.
• Simon Willison on publishing GPT-4's retired architecture — the guesswork behind the water numbers.
• Jujutsu and the pile of laundry — making a mess on purpose, then sorting it at the end.
• Filming your chores for the robots — where the embodied-AI training data is actually coming from.
• Pope Leo XIV's AI encyclical — technology is never neutral, and what no machine replaces.

• Mythos & Project Glasswing — a security model "too dangerous to release," and the case for and against that framing.
• A real prompt injection in the wild — a malicious GitHub issue, a scan.js, and secrets exfiltrated over DNS.
• The three-dollar refactor — cheap worker models, one confident deadlock, and where judgment still lives.
• The missing primitive is coordination — Lou Bichard of Ona on software factories, Stripe's Minions, and why GitHub isn't a coordination layer.
• Your agent is an infinite canvas — Rachel Lee Nabors on MCP apps, Web MCP, and chat as the command-line phase.
• r/programming reopens to AI — a seven-million-person community moves from a reflex ban to a written policy.

• "I don't write code anymore" — Pieter Levels, amplified by Marc Andreessen, and the real-thing/bubble-thing tangle inside it.
• Fast Models Need Slow Developers — Sarah Chieng of Cerebras on Codex Spark at 1,200 tokens a second, and why the discipline matters more, not less.
• DeepSeek's permanent 75% cut and NVIDIA folding gaming into "Edge Computing" — two ends of the same pipe.
• Jack Clark's year of predictions at Oxford — and the cognitive-atrophy counterpoint.
• BeeLlama's DFlash update — 164 tokens a second on a single RTX 3090.
• Lobster Trap — Sally Ann O'Malley of Red Hat on containerizing an OpenClaw agent setup.
• How the rest of the world sees this — and a couple overheard in a Copenhagen park.

• Meta emails Heretic; Heretic recants — a takedown of abliterated Llama derivatives answered with a Galileo joke and a Codeberg mirror in Germany.
• Five hundred PRs a day, and the harness that triages them — Onur Solmaz on OpenClaw, acpx, and the Agent Client Protocol.
• The computer the agent runs on — Ivan Burazin of Daytona on stateful, composable machines for agents and 74% month-over-month growth.
• Building the Pantheon, in code — six coding tools tackle parametric CAD, and the gap between a good preview and a clean export.
• When the model writes its own kernel — CODA folds memory-bound ops into the matrix multiply, and model-authored kernels keep up with human ones.
• Codex learns to keep going — goal mode graduates, plus Appshots and shared plugins.
• Hardening the thing that reads your CI config — Trail of Bits stress-tests zizmor against forty-one thousand real workflows.
• The headcount bet — and a graduation room that cheered for actual intelligence.

• Two bets on the same finish line — Google's world-model road vs OpenAI's text-reasoning road, in the labs' own words.
• OpenAI cracks an 80-year-old problem — the planar unit distance result from a general-purpose reasoning model.
• Anthropic in the black, and Karpathy's bet — ~$559M operating profit and a hire aimed at recursive self-improvement.
• Jagged intelligence, and the false story — the paper where models believe a story they were told a thousand times was fake.
• Midjourney's hardware regret — the tooling tax of betting on the less-supported accelerator.
• Ads come to AI Mode — the business model under the consumer bet.
• Meta's eight thousand — the cost side, on the same clock as the wins.
• Cohere comes back, Apache-licensed — Command A+, a mixture-of-experts model that fits on one or two GPUs.
• Skilling up the agent — Marc Klingen's concrete lessons on teaching a coding agent to wire up your tool.
• Who's training whom — the anxiety running underneath the week.

• Hassabis: "foothills of the singularity" — DeepMind's CEO compresses his AGI timeline on stage
• Gemini 3.5 Flash specs and pricing — and what the 3x bump means
• Gemini Omni's physics pitch versus the same-day backflip test
• Antigravity 2.0's 93-agent OS demo: 12 hours, 2.6B tokens, under $1K, boots Doom
• Andrej Karpathy joins Anthropic — pre-training, on Nick Joseph's team
• Ethan Mollick: recursive self-improvement is a talent sink for the Big Three
• Qwen 3.7-Max and the Zhenwu M890 chip — Alibaba's full-stack I/O response
• DeepSeek hiring a Code Harness team in Beijing
• Railway's 8-hour outage after GCP's automated account suspension
• Cheng Huang: 130K lines of Rust, AI-written contracts, and a Paxos engine that runs
• TechCrunch on Anthropic's pre-training charter for Karpathy

• Simon Willison's last-six-months-in-LLMs PyCon lightning talk
• Mini Shai-Hulud strikes again — 317 npm packages and your agent hooks
• Prime Intellect's General-Agent — synthetic RL environments
• Eoin Mulgrew on Number 10's insurgent technical unit
• Cursor's Compose 2.5 reportedly trained on xAI's Colossus 2
• Ethan Mollick on insourcing via hiring
• Guillaume Vernade's full GenMedia pipeline at a dollar a book
• Daniel Griesser's pi-config — Plan, handoff, and subagent skills
• Peter Neumann (1932–2026)
• Peter Salus (1938–2026)
• Magnifica humanitas confirmed for May 25

• Modal's 50-second cold start
• Five months of AI radio
• Magnifica humanitas at the Vatican
• Reading Qwen 3.5's censorship out of its weights
• Qwen 3.7 surfaces and Musk loses
• LangSmith Engine takes a swing at agent triage
• Agora-1 generates a shared GoldenEye
• Three questions for I/O tomorrow

• Suleyman's eighteen-month claim, and the article that knocks it down
• The subsidy that ends on June 1
• Apple Silicon costs more than OpenRouter
• Frederick Vanbrabant on why AI doesn't speed up your process
• Marlene Mhangami: tests AI writes vs tests AI verifies
• Calif on the five-day M5 / MIE exploit, in their own words
• Artem Loenko: native all the way, until you need text
• Luke Lanchester's MCP hello page

• "The CTF scene is dead" — Kabir, former TheHackersCrew player, on agents and the open format
• Brian Scanlan (Intercom): doubling PR throughput, 17.6% auto-approved, SOC 2 compliant
• Mike Spitz (PFF): the post-engineer engineering org, two engineers shipping 25x more deploys than ten
• Pedro Rodrigues (Supabase): skills plus MCP, and the security-invoker flag agents skip without guidance
• Sparky — a fully offline suitcase robot on a Jetson Orin NX with Gemma 4 E4B
• Julia Evans: moving away from Tailwind and learning to structure CSS
• Fortune: Claude is telling users to go to sleep mid-session and Anthropic isn't sure why
• @yishan: an LLM hallucinates the Napster 2000 story to someone who was there
• @Kirsten3531: "LLMs can never be more than the average of their training data" — a 2024 take?
• Armin Ronacher: running an agent with bash as the only tool, using the patch binary to make edits

• Codex everywhere, Claude in the rearview — OpenAI ships Codex inside the ChatGPT mobile app, Uncle Bob cancels his Claude account, and Arvind Narayanan names the irony underneath both.
• Five days to a kernel exploit on M5 — Calif and Mythos Preview crack Apple's Memory Integrity Enforcement and hand-deliver the 55-page report to Cupertino.
• The strip-mining era of open source security — Metabase's security inbox went from ten reports a month to ten a week. Cal.com is going closed source.
• arXiv bans authors of LLM-error papers — Tom Dietterich announces a one-year submission ban on papers with hallucinated references or results.
• Replit out of the App Store wilderness — Four months after being pulled, Replit's iOS app is published again. Replies note what that says about platform power.
• GDDR7 squeezes the 5090 — A 300-dollar price hike to add-in-card partners as GDDR7 lead times stretch into weeks.
• The web's secret quirks file — Den Odell walks through Safari's Quirks.cpp and Firefox's about:compat. Chrome doesn't need a quirks file.
• OCaml in orbit — Thomas Gazagnaire's pure-OCaml protocol stack booted in low Earth orbit on April 23, with post-quantum rekeying and OxCaml-tuned dispatch.

• Anthropic draws two lines — Claude for Small Business and the new Agent SDK credit metering
• Bun, ported to Rust by a bot in a week — and a maintainer who won't commit to it
• Wasp: the language was never the moat — $5M and five years of lessons
• The chess coach that isn't allowed to think — Play Magnus on LLM-as-translator
• Autonomous cyber, measured against itself — AISI on a capability curve outrunning its own ruler
• The web pulls up its drawbridge — Google's search index and Cloudflare's defaults
• Multi-token prediction on your laptop — a real gain bundled with a contested one
• The Monet test — when the AI-tell detector fires a false positive

• Joseph Thacker on FUZZ-E's overnight Magento CVE
• OpenAI's Codex computer use walkthrough
• Cloudflare on the CUBIC death-spiral fix
• Lighthouse Attention from Nous Research
• ProgramBench: GPT-5.5's first full solve
• Nico Albanese on giving your agent a computer
• Needle: a 26M-parameter tool-calling model
• Isomorphic Labs Series B announcement
• Eric Park's Rust-powered graduation cap
• Nick Cammarata on capability and self-worth

• The mini-shai-hulud campaign — 170 packages, 404 versions, and a self-spreading IDE payload
• Thinking Machines ships TML-Interaction-Small and picks a fight with the autonomous-agent doctrine
• matklad on architecture, incentives, and the build system as a social filter
• Don't hijack the mouse pointer — and what it tells us about cheap effects
• A 1-trillion-parameter Kimi K2.5 running on Intel Optane DIMMs at 4 tokens a second
• Unsloth releases Qwen3.6 with the multi-token prediction layer preserved

• OpenAI turns deployment into a company, with Tomoro, TPG, consultancies, integrators, and OpenAI’s launch post pointing at a bigger bet on embedded engineering.
• Mythos finds one curl vulnerability, while Rival Security complicates Anthropic’s FreeBSD story with a training-data provenance question.
• James Shore’s maintenance-cost math meets the k10s devlog about archiving a seven-month AI-built Kubernetes TUI.
• Trigger.dev’s durable-agent talk and Arize’s context-management talk give the backend version of the same lesson.
• Granola’s production loop, a tiny boolean-argument essay, and MLX on-device demos close the day on builder craft.

• METR's 17-hour 50% time horizon
• NVIDIA Star Elastic and the one-checkpoint, three-models trick
• DeepSeek 4 on DGX Spark — 12 t/s, 270 GB/sec wall
• Chollet: agentic coding is machine learning
• Elad Gil's diffusion-gap map
• Gemma 4 multi-token prediction on M5 Max

• Tim Gowers — A recent experience with ChatGPT 5.5 Pro
• Mozilla — Behind the Scenes Hardening Firefox
• Jeff Kaufman — AI is Breaking Two Vulnerability Cultures
• Anthropic — Teaching Claude why
• Lachlan — The React2Shell Story (CVE-2025-55182)
• Specula team — Can LLMs model real-world systems in TLA+?
• OpenAI — Codex in Chrome on macOS and Windows
• DHH — Copilot review hit ratio 1/10 to 7/10
• r/LocalLLaMA — Qwen 35B-A3B on 12GB VRAM
• r/LocalLLaMA — AI2 EMO MoE with document-level routing
• METR — Claude Mythos Preview time-horizon evaluation

• Mozilla on hardening Firefox with Claude Mythos Preview
• Alexander Hanff on Chrome's silent 4 GB Gemini Nano install
• Luke Curley: OpenAI's WebRTC Problem
• OpenAI's three new audio models in the API
• DeepMind on AlphaEvolve's first year of impact
• Anthropic's Natural Language Autoencoders
• AMD Instinct MI350P PCIe card
• Skymizer HTX301 on-prem inference card
• OpenAI winding down the fine-tuning API
• EU AI Act Article 50 transparency consultation
• Xe Iaso: maybe you shouldn't install new software for a bit
• Multi-Token Prediction lands in LLaMA.cpp for Gemma 4
• Open-OSS/privacy-filter infostealer on Hugging Face

• GPT-5.5 won't read your whole file
• Subquadratic's 12-million-token claim
• ZAYA1-8B and the AMD training stack
• Terminus-4B and the subagent shape
• MOSAIC-Bench: compositional vulnerabilities
• Workspace-Bench and ProgramBench, together
• Fraud Defense and the QR-code handshake
• Anthropic's three priorities

— Lenar

• Cloudflare and Stripe ship the agent-as-customer protocol
• NVIDIA, Microsoft, and OpenAI publish MRC as an open OCP spec
• Google releases MTP drafters for the Gemma 4 family
• Community reports 2.5x and 100 tok/s on Qwen 3.6 27B with MTP
• GPT-5.5 Instant becomes the ChatGPT default
• Dario Amodei pivots from bloodbath to Jevons
• A clean indirect prompt-injection screenshot from r/ClaudeAI
• Trajectory-level fraud detection for LLM agents
• Agentic safety as interaction topology, not model alignment
• Agents as marginal token allocators
• ProgramBench: rebuilding 200 binaries from scratch
• A measured 65/20/15 cloud-vs-local routing rule
• François Fleuret on what LLMs are still missing
• Telus Digital alters call-centre agent accents in real time
• Write some software, give it away for free

• VS Code reverts the Copilot co-author default
• CAISI signs Google DeepMind, Microsoft, and xAI
• DeepMind workers vote to unionize
• DeepSeek V4 Pro on FoodTruck Bench
• Qwen3.6 27B FP8 with 200K BF16 KV on a single 48GB card
• AgentFloor: how far up the tool-use ladder small open-weight models can go
• The tool-use tax in LLM agents
• Chrome silently installs a 4GB Gemini Nano
• When everyone has AI and the company still learns nothing
• vibevoice.cpp ports Microsoft VibeVoice to ggml
• The Opus 4.7 regression thread
• Replacing a 5-step lead enrichment chain with a Claude skill

• Lars Faye on agentic coding, atrophy, and the paradox of supervision
• The Hacker News response — 309 points, 208 comments overnight
• Mason Daugherty: same model, different harness, +14 points on Terminal-Bench 2.0
• DeepClaude — Claude Code agent loop pointed at DeepSeek V4, four env vars
• A 60x bill cut by routing mechanical work off Sonnet, with a deny-list in CLAUDE.md
• Memtrace — bi-temporal AST-backed memory for Claude Code sessions
• An $8K AI-built healthcare MVP meets a HIPAA vendor questionnaire
• llama.cpp MTP support lands in beta — closing the gap to vLLM on token gen
• Qwen 3.6 35B-A3B at 23 tokens/sec on a five-year-old 6GB laptop
• Gemma 4 chat-template fix — time to refresh your GGUFs
• Beth Barnes and David Rein on why their own time-horizons chart is a mirage
• IBM's MAMMAL beats AlphaFold 3 on antibody-antigen binding and eight other biological benchmarks

• VS Code PR #310226 — Copilot co-author by default
• Ian Duncan — A Couple Million Lines of Haskell at Mercury
• Andrea Luzzardi — The Agent Harness Belongs Outside the Sandbox
• acai.sh — Specsmaxxing and the case for ACIDs
• Daniel Stenberg — Approaching zero bugs?
• Nate Jones — Klarna saved $60M and broke its company
• LocalLLaMA — Qwen 3.6-27B vs Coder-Next
• r/OpenAI — Anthropic passed OpenAI in valuation and revenue
• r/singularity — SWE postings hit highest level since November 2023

• The Atlantic on bubble→infrastructure. Rogé Karma's reporting on Claude Code as the inflection point, with Anthropic's revenue moving from $14B to $30B annualized in two months. Read the article.
• Grok 4.3 follow-up. Yesterday we promised to wait for a third-party harness. LMSys reproduced the regression on NYT Connections.
• Sam Altman steps off UBI. A long thread arguing for "collective ownership of compute" instead. The thread.
• ARC-AGI-3 hostility to long-thinking. Test-time-compute scaling is producing flat or negative returns on the new benchmark. ARC Prize update.
• PFlash: a real 10x first-token speedup at 128K on a 3090. Reddit thread.
• Qwen 3.6 27B on a single 3090. Setup notes.
• Open Design ships a local-first alternative to Claude Design. GitHub.
• Hamel Husain on three months with Devin in a real codebase. The write-up.
• Build American AI, the PAC paying $5,000 per TikTok. WIRED's investigation.
• Learning programming, not languages. A short essay worth handing to anyone you mentor. EvilGeniusLabs.

• Anthropic on sycophancy across 1M conversations
• Artificial Analysis on Grok 4.3
• Claude Security public beta
• Aaron Levie on the headless software business model
• /goal lands in Codex CLI 0.128.0
• Epoch AI on chip smuggling to China
• Fortune on Alphabet and Amazon's Anthropic mark-to-market
• 16x DGX Spark cluster on r/LocalLLaMA
• Qwen 3.6 27B vs Gemma 4 31B Pac-Man one-shot
• Codex with browser fixing a Ubiquiti config

• Mitchell Hashimoto: Ghostty Is Leaving GitHub
• The Register: 'No longer a place for serious work'
• Thom Wolf on GitHub's centrality in the agent era
• Stratechery: Altman + Garman on Bedrock Managed Agents
• Diabettech: 26,904 carb-counting queries across four frontier models
• Auto-Architecture: Karpathy's Loop, Pointed at a CPU
• OpenAI: GPT-5.4 Pro helps solve a 60-year-old Erdős problem
• Axios: White House workshops a workaround for Anthropic's supply chain risk designation
• r/Anthropic: Opus 4.7 mass-mailed a database against an explicit CLAUDE.md rule
• Rem Koning: agentic tools versus GPT-4 advisor on SMB outcomes
• Xiaomi Mimo v2.5 Pro at #9 on Arena's coding board (MIT license)
• 11 Claude Code workflow systems compared side by side

• Talkie: a 13B vintage LM trained only on pre-1931 text
• Simon Willison on the now-dead OpenAI/Microsoft AGI clause
• GitHub Copilot's 9x effective price hike on Claude models
• Local 27\u201332B coding models hit ~38% on Terminal-Bench 2.0
• Jason Liu: GPT-5.5 ~39% cheaper than Opus 4.7 on PR work in Inspect
• David Silver's Ineffable Intelligence raises $1.1B
• FAR.AI red-teams DeepSeek V4-Pro: 98\u2013100% jailbreak compliance
• Cursor + Claude agent deletes a production database in 9 seconds
• Google signs Pentagon agreement covering classified AI work
• Runway: managing research GPU clusters for full utilization
• r/ClaudeAI: how are people using so many tokens?

• Jer Crane: An AI agent destroyed our production data
• Maggie Appleton: One developer, two dozen agents, zero alignment
• Tencent ships Hy3 preview
• Kimi K2.6 #1 on OpenRouter weekly
• DeepSeek V4 Pro on Ollama Cloud
• 4TB voice biometric breach at Mercor
• Dirac, the open-source coding agent
• Claude Code remote and GLM-4.7
• "Land" and "surface": Opus 4.7 lexical drift
• Tool-call regime degrades reasoning
• Miles Brundage on sycophancy regression
• Yishan's two-generation open-weights proposal
• China blocks Meta's Manus acquisition
• antirez: 2-bit DeepSeek V4-Flash with perfect tool calling
• YourMemory: Ebbinghaus decay for agents

• DeepSeek-V4-Flash 2-bit dynamic quant on 128GB Macs
• The full V4 collection on mlx-community
• Shubham Raizada on virtual thread pinning
• Denis Stetskov: The West Forgot How to Build. Now It's Forgetting Code
• Matt Carey, Cloudflare: MCP = Mega Context Problem
• Asahi Linux progress report for Linux 7.0
• DHH on the AMD HX370 holding up against Panther Lake
• Eden AI as a European OpenRouter alternative

Plus: Pi keeps showing up where it shouldn't — fifth on OpenRouter's CLI agent rankings and now inside Salesforce. Susan Zhang on why stable training norms can be the politest kind of lie. Simon Willison gets DeepSeek V4-Flash running in 17GB on an M3 Max. A new Slack-shaped workspace for collaborating agents called wuphf. And Paul Graham revisiting Hamming's old, uncomfortable question.

Reportorial, calibrated, and aimed at the senior engineer trying to figure out what to actually build tomorrow.

On the OpenAI side, GPT-5.5 lands with a quiet thud on Victor Taelin's LamBench. Codex picks up a proper reviewer agent. A plugin called endless-toil makes your editor groan at bad code. Sapiens2 admits it trained on half of Flickr's humans. And Fireship spends a week automating his mom's IT support with a voice-cloned agent called OpenClaw.

— Lenar Kess

• The Two Percent Test — Anthropic's pricing reversal and what it reveals about compute constraints
• Every Bug Discoverable — Mozilla's Mythos experiment shows the security transition ahead
• Drunk on Abundance — Sam Altman's late-night positioning against Anthropic's scarcity
• Silicon for Swarms — Google's eighth-generation TPUs split training from inference
• The OAuth Chain — Vercel's breach shows how trust paths become attack paths

• Claude Code's self-modification capabilities and Anthropic's policy chaos
• Kimi K2.6: The open source model that matches Opus 4.7
• OpenAI Chronicle: Ambient context with screen capture risks
• Tim Cook transitions to Executive Chairman as Ternus takes CEO role
• The productivity paradox: Where is all the stuff?
• The fragile foundation of undocumented endpoints

• The open-source inflection point — Kimi K2.6 beats closed models
• Agent reality check — Why parallel agents fail
• Enterprise data sovereignty — Atlassian's training grab
• Creative platforms transform — 44% AI music on Deezer
• Security déjà vu — Agent architectures repeat DOS mistakes
• What actually works — Grok's productivity pivot

• Vercel’s security bulletin and Guillermo Rauch’s thread: how a compromised third-party AI tool and a Google Workspace OAuth pivot turned into an environment-variable incident, and why the phrase "non-sensitive" is doing a lot of work.
• Johann Rehberger’s Claude exploit writeup on X: malicious docs, tool invocation, and memory writes that only showed up in the thinking trace.
• Slim Jimmy’s anti-hype thread, Robin Hanson’s historical skepticism and Jamie Simon on the science of deep learning: what counts as reasoning, and what counts as evidence.
• Walter Rafelsberger’s local Qwen3.6 setup notes: what a serious on-device coding agent looks like on an M4 Max, and why local is suddenly less of a toy.
• The Verge on the RAM shortage and War on the Rocks on the bromine chokepoint: the supply-chain story underneath the AI buildout.