2026

Ornith-1.5 Teaches Itself to Code

Ornith released a three-size open-weight model family trained entirely by its own curriculum — the model proposes tasks, builds evaluation scaffolds, and generates rollouts, with a multiplicative reward structure that prevents gaming any one signal. DeepSWE jumped from 8.0 to 56.0; Terminal-Bench reached 86.1. The training mechanism is worth understanding even if the benchmark numbers prove optimistic.

Read more →

Palomar: A Notary for AI-Generated Proofs

Terry Tao and the Lean FRO launched Palomar on August 18 — a registry that runs submitted Lean proof repositories through a verification pipeline and publishes the exact formal statement, library dependencies, and reviewer comments. The project is a direct response to the surge in AI-generated Lean proofs, where the bottleneck has shifted from producing proofs to trusting them.

Read more →

Cerebras CS-4: 30× From the Same Silicon

Cerebras unveiled the CS-4 on August 18 without changing its WSE-3 wafer at all — the gains come from moving power conversion 100× closer to the die and adding a third wafer per rack. The result is a system claiming 4,400 tokens/sec/user, a number that is hard for GPU clusters to match at low batch sizes, along with a 125–135 kW rack TDP that represents the real engineering bet.

Read more →

The AI That Broke the Code, and the AI That Broke In

Wiz disclosed yesterday that GitHub Copilot Autofix co-authored a commit in Snowflake's public repo that silently removed a safe shell-input pattern and replaced it with injectable string interpolation. Wiz's autonomous Red Agent then found the flaw, crafted a working exploit, and exfiltrated Jira API credentials — all without human input. The same loop that promises AI-driven security is also capable of closing it the other way.

Read more →

The Token Relay Economy

A Vectoral research series maps the gray-market supply chain that routes Western AI model access to Chinese buyers at discounts up to 97.8% off official pricing. The infrastructure is four layers deep, runs on open-source gateways, and poses a model-distillation risk that goes beyond simple revenue loss for providers.

Read more →

Stripe Buys the Router

Stripe has agreed to acquire OpenRouter for over $7 billion — a company whose CEO described it as "the equivalent of Stripe for AI." The deal puts a single payment processor in control of the routing layer that sits between developers and 400+ AI models, raising real questions about what a non-neutral router means for the model access market.

Read more →

Alignment Before the Fine-Tune

A paper from EPFL's dlab and the MATS alignment program proposes threading value-laden reflections through 10% of pretraining documents, showing a 63% reduction in adversarial attack success — but only when post-training uses precisely matching persona-binding templates. The brittleness is the most revealing finding.

Read more →

Agents in the Same Room

Anthropic's Frontier Red Team published a detailed study of how Claude agents behave when they share an environment without knowing about each other. The malware-deploying turf war is the headline, but the herding and epistemic-vulnerability findings are the ones that matter more for real deployments — and neither gets fixed by better individual alignment.

Read more →

ML on Ciphertexts

Google's August 14 post on HEIR describes four production deployments of homomorphic encryption for ML inference — fraud detection, recommendations, network intrusion detection, hotword detection — with hardware accelerator partnerships starting to close the latency gap that has kept HE in the lab for the past decade.

Read more →

The One You Can Actually Run

Alibaba dropped Qwen3.8-27B open weights under Apache 2.0 a day after the 2.4T Max. The 27B dense model achieves 90.3% on LiveCodeBench and 89.2% on GPQA Diamond — within touching distance of closed frontier models — while fitting on hardware that actually exists in people's garages.

Read more →

The Exploit Chain Nobody Trained For

Z.ai released GLM-5.3 today with strong coding improvements and a cybersecurity capability that doubled on ExploitBench — not from deliberate training, but as an emergent consequence of scaling vulnerability-discovery post-training. The weights are being withheld for safety evaluation, and 2,383 discovered CVEs remain under coordinated embargo.

Read more →

DeepSeek's Plugin-First Agent Runtime

DeepSeek released Harness v0.1, an MIT-licensed open-source agent framework where every component — model, tools, storage, agent loop, UI — is a swappable plugin on a Cordis microkernel. Released alongside a Peking University research paper on the formal foundations of dynamic component composition.

Read more →

Scaffolding Beats Reasoning

A preprint from Salesforce and UIUC shows that a strong model can construct inference-time "harnesses" — structural scaffolds applied to a weaker model at test time — that nearly double Theory-of-Mind accuracy from 0.49 to 0.91 without any fine-tuning. The mechanism isn't more reasoning; it's converting unstable reasoning into deterministic code, routing, and format enforcement.

Read more →

Git Doesn't Know About the Conversation

Zed launched a private beta for Delta, a multiplayer coding environment built on DeltaDB — a CRDT-based system that records every edit operation between commits and keeps code and conversation permanently linked. The bet: as agent workflows become the center of development, snapshot-based version control misses too much context to remain the whole story.

Read more →

The Reasoning Traces Were Never Really Private

A paper submitted to arxiv on August 10 shows that OpenAI, Anthropic, and Google were all storing encrypted reasoning traces client-side — passed back as opaque blobs with every request — and that the encryption was trivially bypassed by replaying traces into weaker, jailbroken sibling models. All three providers patched after responsible disclosure.

Read more →

Two Philosophies of the Tiny Agent

LFM2.5-2.6B and Needle2 arrived this week at opposite ends of the weight-class spectrum — one trimmed but architecturally orthodox, the other stripped of its feed-forward layers entirely — and together they define the two credible paths to running a real tool-calling agent on constrained hardware.

Read more →

Meta's Muse Glimmer: A 30B Local Agent Model

Meta's Muse Glimmer is a 30B open-weight model distilled from Muse Spark 1.2, targeting local agent workflows on a single consumer GPU. It slots in above LFM2.5-2.6B and Needle2 in the increasingly crowded on-device agent tier, with Apache 2.0 licensing, hybrid attention, and speculative decoding via a dedicated drafter model.

Read more →

antirez Ports MiniMax H3 to Metal

Salvatore Sanfilippo — the author of Redis — published a native C+Metal inference engine for MiniMax H3 targeting M3/M5 Macs, roughly repeating what llama.cpp did for language models: bypass the Python stack, write tight hardware-specific kernels, and find out how fast the silicon can actually go.

Read more →

Anthropic Is Watermarking Claude's Output — Text and Images

Anthropic has started embedding statistical watermarks in Claude-generated text and C2PA provenance metadata in generated image files, driven by EU AI Act Article 50. The text mechanism uses a token-bias technique derived from the academic literature; detection tooling is not yet public. Here is how both systems work and what they can actually verify.

Read more →

Who Wrote This Line?

us-vs-them is a small open-source library that reads git version history to produce line-level human/agent authorship scores — no markup required. As agentic editors increasingly co-author code, distinguishing human-written lines from machine-generated ones is becoming a practical necessity, and the git history turns out to be a surprisingly clean signal.

Read more →

Five Models Walk Into a Diff

OpenChamber v1.18.0, an open-source agentic IDE that lets you run the same task across up to five models and fuse the strongest results, ships a guided diff walkthrough that reorders large changesets into explained stops. It's a privacy-first alternative to commercial tools: code stays local, API keys are yours, and the project now supports any OpenAI-compatible endpoint.

Read more →

The Unix-Friendly LLM CLI Grows Up

LLM 0.32, Simon Willison's CLI tool for talking to hundreds of models, ships its most significant update since launch: reasoning traces go to stderr, server-side tools replace local execution, and conversation logs adopt a Git-style content-addressable format. Three changes that each solve a real design problem cleanly.

Read more →

Muse Code Reads Your CLAUDE.md — and Sends It to Meta

Meta's new terminal coding agent reads CLAUDE.md and .codex/ skills as project context when its own AGENTS.md file doesn't exist. Any content in those files — internal URLs, API endpoint docs, project constraints — goes to Meta's servers on every call, and to Meta's training data if you're on the contributor tier.

Read more →

The AI Coding Invoice

Databricks talked to engineering leaders at Stripe, Coinbase, Uber, and Ramp and wrote up what they're doing about AI coding costs at scale. The playbook looks a lot like cloud cost management circa 2013: smart routing, caching, vendor-neutral abstraction layers, and progressive controls instead of hard caps. 30% cost reduction from routing; ~50% token reduction from compaction. The infrastructure is now real enough to need its own infrastructure.

Read more →