Ornith released a three-size open-weight model family trained entirely by its own curriculum — the model proposes tasks, builds evaluation scaffolds, and generates rollouts, with a multiplicative reward structure that prevents gaming any one signal. DeepSWE jumped from 8.0 to 56.0; Terminal-Bench reached 86.1. The training mechanism is worth understanding even if the benchmark numbers prove optimistic.
Terry Tao and the Lean FRO launched Palomar on August 18 — a registry that runs submitted Lean proof repositories through a verification pipeline and publishes the exact formal statement, library dependencies, and reviewer comments. The project is a direct response to the surge in AI-generated Lean proofs, where the bottleneck has shifted from producing proofs to trusting them.
Cerebras unveiled the CS-4 on August 18 without changing its WSE-3 wafer at all — the gains come from moving power conversion 100× closer to the die and adding a third wafer per rack. The result is a system claiming 4,400 tokens/sec/user, a number that is hard for GPU clusters to match at low batch sizes, along with a 125–135 kW rack TDP that represents the real engineering bet.
Wiz disclosed yesterday that GitHub Copilot Autofix co-authored a commit in Snowflake's public repo that silently removed a safe shell-input pattern and replaced it with injectable string interpolation. Wiz's autonomous Red Agent then found the flaw, crafted a working exploit, and exfiltrated Jira API credentials — all without human input. The same loop that promises AI-driven security is also capable of closing it the other way.
A Vectoral research series maps the gray-market supply chain that routes Western AI model access to Chinese buyers at discounts up to 97.8% off official pricing. The infrastructure is four layers deep, runs on open-source gateways, and poses a model-distillation risk that goes beyond simple revenue loss for providers.
Stripe has agreed to acquire OpenRouter for over $7 billion — a company whose CEO described it as "the equivalent of Stripe for AI." The deal puts a single payment processor in control of the routing layer that sits between developers and 400+ AI models, raising real questions about what a non-neutral router means for the model access market.
A paper from EPFL's dlab and the MATS alignment program proposes threading value-laden reflections through 10% of pretraining documents, showing a 63% reduction in adversarial attack success — but only when post-training uses precisely matching persona-binding templates. The brittleness is the most revealing finding.
Anthropic's Frontier Red Team published a detailed study of how Claude agents behave when they share an environment without knowing about each other. The malware-deploying turf war is the headline, but the herding and epistemic-vulnerability findings are the ones that matter more for real deployments — and neither gets fixed by better individual alignment.
Google's August 14 post on HEIR describes four production deployments of homomorphic encryption for ML inference — fraud detection, recommendations, network intrusion detection, hotword detection — with hardware accelerator partnerships starting to close the latency gap that has kept HE in the lab for the past decade.
Alibaba dropped Qwen3.8-27B open weights under Apache 2.0 a day after the 2.4T Max. The 27B dense model achieves 90.3% on LiveCodeBench and 89.2% on GPQA Diamond — within touching distance of closed frontier models — while fitting on hardware that actually exists in people's garages.
Z.ai released GLM-5.3 today with strong coding improvements and a cybersecurity capability that doubled on ExploitBench — not from deliberate training, but as an emergent consequence of scaling vulnerability-discovery post-training. The weights are being withheld for safety evaluation, and 2,383 discovered CVEs remain under coordinated embargo.
DeepSeek released Harness v0.1, an MIT-licensed open-source agent framework where every component — model, tools, storage, agent loop, UI — is a swappable plugin on a Cordis microkernel. Released alongside a Peking University research paper on the formal foundations of dynamic component composition.
A preprint from Salesforce and UIUC shows that a strong model can construct inference-time "harnesses" — structural scaffolds applied to a weaker model at test time — that nearly double Theory-of-Mind accuracy from 0.49 to 0.91 without any fine-tuning. The mechanism isn't more reasoning; it's converting unstable reasoning into deterministic code, routing, and format enforcement.
Zed launched a private beta for Delta, a multiplayer coding environment built on DeltaDB — a CRDT-based system that records every edit operation between commits and keeps code and conversation permanently linked. The bet: as agent workflows become the center of development, snapshot-based version control misses too much context to remain the whole story.
A paper submitted to arxiv on August 10 shows that OpenAI, Anthropic, and Google were all storing encrypted reasoning traces client-side — passed back as opaque blobs with every request — and that the encryption was trivially bypassed by replaying traces into weaker, jailbroken sibling models. All three providers patched after responsible disclosure.
LFM2.5-2.6B and Needle2 arrived this week at opposite ends of the weight-class spectrum — one trimmed but architecturally orthodox, the other stripped of its feed-forward layers entirely — and together they define the two credible paths to running a real tool-calling agent on constrained hardware.
Meta's Muse Glimmer is a 30B open-weight model distilled from Muse Spark 1.2, targeting local agent workflows on a single consumer GPU. It slots in above LFM2.5-2.6B and Needle2 in the increasingly crowded on-device agent tier, with Apache 2.0 licensing, hybrid attention, and speculative decoding via a dedicated drafter model.
Salvatore Sanfilippo — the author of Redis — published a native C+Metal inference engine for MiniMax H3 targeting M3/M5 Macs, roughly repeating what llama.cpp did for language models: bypass the Python stack, write tight hardware-specific kernels, and find out how fast the silicon can actually go.
Anthropic has started embedding statistical watermarks in Claude-generated text and C2PA provenance metadata in generated image files, driven by EU AI Act Article 50. The text mechanism uses a token-bias technique derived from the academic literature; detection tooling is not yet public. Here is how both systems work and what they can actually verify.
us-vs-them is a small open-source library that reads git version history to produce line-level human/agent authorship scores — no markup required. As agentic editors increasingly co-author code, distinguishing human-written lines from machine-generated ones is becoming a practical necessity, and the git history turns out to be a surprisingly clean signal.
OpenChamber v1.18.0, an open-source agentic IDE that lets you run the same task across up to five models and fuse the strongest results, ships a guided diff walkthrough that reorders large changesets into explained stops. It's a privacy-first alternative to commercial tools: code stays local, API keys are yours, and the project now supports any OpenAI-compatible endpoint.
LLM 0.32, Simon Willison's CLI tool for talking to hundreds of models, ships its most significant update since launch: reasoning traces go to stderr, server-side tools replace local execution, and conversation logs adopt a Git-style content-addressable format. Three changes that each solve a real design problem cleanly.
Meta's new terminal coding agent reads CLAUDE.md and .codex/ skills as project context when its own AGENTS.md file doesn't exist. Any content in those files — internal URLs, API endpoint docs, project constraints — goes to Meta's servers on every call, and to Meta's training data if you're on the contributor tier.
Databricks talked to engineering leaders at Stripe, Coinbase, Uber, and Ramp and wrote up what they're doing about AI coding costs at scale. The playbook looks a lot like cloud cost management circa 2013: smart routing, caching, vendor-neutral abstraction layers, and progressive controls instead of hard caps. 30% cost reduction from routing; ~50% token reduction from compaction. The infrastructure is now real enough to need its own infrastructure.