Archive ◆BRAIXD
Carbon, Chonk, and the self-hosting shift / DISPATCH 157
PDF RSS

◆ Dispatch 157 · 2026-10-29 braixd

Carbon, Chonk, and the self-hosting shift

/ 00:11:05 / 6 sources

“The bottleneck for engineering is not necessarily coding. When you have unlimited tokens, you're free to use AI for the stuff you normally wouldn't — digging through your inbox, messing with Jira and Confluence.”

— Seln Oriax, today's narration

Google's Gemini 4 Carbon takes the #1 spot on Artificial Analysis' consolidated index — but it's not actually available to most people yet. Meanwhile Mistral drops a fully open-weight 1-trillion-parameter model, Revolut publishes one of the most detailed self-hosting case studies I've seen from a company this size, and two serious cyber operations make the headlines.

We talk about the benchmark race without the usual hype, why self-hosting is moving from experiment to production strategy, and what the DoorDash–Instacart deal actually means for local commerce.

Chapters

  1. 00:00:04 Carbon without access
  2. 00:03:01 Le Chonk goes open
  3. 00:06:20 The Revolut numbers

Sources

6 cited
  1. 1

    Gemini 4 Carbon is the new #1 on the Artificial Analysis Intelligence Index v5

    Article Artificial Analysis

    Google DeepMind has taken the #1 spot on the consolidated benchmark for possibly the first time. But availability is still limited — it's not a general release, which means independent validation is sparse and the bench…

    artificialanalysis.ai/articles/gemini-4-car… →
    Details
    Context
    Google DeepMind has taken the #1 spot on the consolidated benchmark for possibly the first time. But availability is still limited — it's not a general release, which means independent validation is sparse and the benchmark race is accelerating without the usual transparency.
    Key points
    • Gemini 4 Carbon scores 59 on AA Intelligence Index v5, leading in 4 of 9 evals
    • Scores 59 on Coding Agent Index, second behind Claude Opus 5.5 (62)
    • Priced at $4/$20 per 1M tokens with 50% launch discount
    • 1M token context window, multimodal input (text, image, video, speech), text output
    • Hallucination rate at 11%, second lowest of any model measured
    • Initially available to trusted cyber defenders via Fairwind program only
    Provenance
    Article · Supporting source
  2. 2

    Le Chonk: Built for Coders, Trusted by Defenders

    Article Mistral AI

    The open-weight frontier just got denser. Mistral's 1T-parameter model is now downloadable and self-hostable, with competitive coding performance and strong guardrails. For teams that can afford the GPU, this is a real…

    mistral.ai/news/mistral-large-4-oss →
    Details
    Context
    The open-weight frontier just got denser. Mistral's 1T-parameter model is now downloadable and self-hostable, with competitive coding performance and strong guardrails. For teams that can afford the GPU, this is a real Anthropic/Google alternative.
    Key points
    • 1T-parameter MoE model with 49B active parameters, fully open-weight
    • Leads FrontierCode 2.0 (19.7%) among open-weight models
    • 48% on AA Coding Agent Index with 47% fewer tokens than GLM-5.3
    • Three reasoning modes: low, medium, high
    • 51% on Cyber Index, 96.6% refusal on malicious requests
    • Licensed under Mistral Ecosystem Open-Weight (modified MIT)
    Provenance
    Article · Supporting source
  3. 3

    How Revolut Cut AI Coding Costs 90% With Self-Hosted Open Models

    Video AI Engineer (interview with David Abitbol)

    This is one of the most concrete self-hosting case studies I've seen from a company of this size. The numbers — 70% lead-time improvement at one-tenth the cost — are the kind of thing that makes cloud API economics look…

    www.youtube.com/watch?v=Ok6QdZHCcI8 →
    Details
    Context
    This is one of the most concrete self-hosting case studies I've seen from a company of this size. The numbers — 70% lead-time improvement at one-tenth the cost — are the kind of thing that makes cloud API economics look fragile.
    Key points
    • 56 B200s serving 2,000 engineers with GLM-53 (800B params)
    • 70% improvement in lead time, 60% in coding time after self-hosting
    • Blended cost: $0.30 per million tokens — one-tenth of cloud API costs
    • Sub-3 second time-to-first-token target; 200 TPS sufficient for interactivity
    • FP4 quantization on Blackwell GPUs, cache hit rates above 90%
    Provenance
    Video · Supporting source
  4. 4

    DoorDash to Acquire Instacart to Help Local Stores Win

    Article DoorDash

    A $17B deal between two companies most people think of as direct competitors. The framing is about local commerce, but the mechanics are consolidation at scale — and the regulatory path (HSR review) will be the real tes…

    about.doordash.com/en-us/news/doordash-to-a… →
    Details
    Context
    A $17B deal between two companies most people think of as direct competitors. The framing is about local commerce, but the mechanics are consolidation at scale — and the regulatory path (HSR review) will be the real test.
    Key points
    • $17B acquisition, $65/share, 26% premium
    • 75%+ cash, rest DoorDash stock
    • Expected close late 2027 or H1 2028
    • Merges DashPass and Instacart+ memberships
    • DoorDash keeps Instacart brand and enterprise tech
    Provenance
    Article · Supporting source
  5. 5

    Hackers expose the identities of more than 40k DHS employees

    Article Vanessa Romo, NPR

    The breach exposes undercover operatives and the people overseeing deportation and rendition programs. The 'they have our information, so it's only fair' framing from the hacktivist group is a classic opacity-reversal c…

    text.npr.org/nx-s1-6021497 →
    Details
    Context
    The breach exposes undercover operatives and the people overseeing deportation and rendition programs. The 'they have our information, so it's only fair' framing from the hacktivist group is a classic opacity-reversal claim.
    Key points
    • 40,000+ DHS employees' names, phone numbers, addresses exposed
    • Hacktivist group 'Department of Peace' responsible
    • Data distributed to DDoSecrets, searchable via 'Icepick' database
    • ~21,000 CBP records, ~10,000 ICE/Homeland Security Investigations records
    • About 1/5 of DHS's total workforce of 220,000
    Provenance
    Article · Supporting source
  6. 6

    Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers

    Article Dream Security

    This is a textbook example of how a single exposed management interface becomes a path into identity infrastructure. The attacker's preparation — version profiling for 9 firewall builds, calibrated exploit geometry — go…

    dreamgroup.com/blog/chained-php2shell-explo… →
    Details
    Context
    This is a textbook example of how a single exposed management interface becomes a path into identity infrastructure. The attacker's preparation — version profiling for 9 firewall builds, calibrated exploit geometry — goes way beyond opportunistic scanning.
    Key points
    • PHP2Shell + Fragnesia kernel LPE chain achieves root in one request
    • 25 servers rooted across US, Japan, Taiwan, South Korea
    • 2 servers associated with US government-affiliated environment pivoted into internal AD
    • Attacker used FOFA, a Chinese asset search engine, for discovery
    • 22 parked firewalls with webshells still likely active
    Provenance
    Article · Supporting source