SHARE
Facebook X Pinterest WhatsApp
Add The Neuron as a preferred source

Everything That Happened in AI This Weekend (September 11-13, 2026)

Yoshua Bengio explained why AI agents can learn to lie, cheat, and coordinate; Anthropic detailed major AI misuse cases; OpenAI explored a coordinated safety slowdown; Trump rejected extinction warnings; Moonshot targeted $2B in annualized sales.

Written By
Grant Harvey
Grant Harvey
Sep 12, 2026
46 minute read

AI safety stopped being one debate this weekend: researchers argued over why agents misbehave, labs documented real misuse, and policymakers immediately ran into the question of whether rivals are even allowed to slow down together.

Welcome to the weekend edition of Around the Horn, where one cluster of stories kept colliding with another. Yoshua Bengio tried to explain the mechanisms behind agent misbehavior. Anthropic published a threat report full of concrete abuse cases. OpenAI reportedly asked Congress whether coordinating a frontier-model slowdown could trigger antitrust law. Then President Trump brushed off extinction concerns and put the China race first. Nothing says “settled policy question” like four institutions answering four different questions at once. Meanwhile, Cursor rebuilt the coding-agent workspace, Microsoft researchers improved agent memory, and the hardware money kept moving. Let's get into it.

🆕 NEW From The Neuron

  • Our new GitHub for Beginners guide breaks down repos, commits, branches, pull requests, deployment, security, Copilot, Claude Code, and Codex, with timestamps from our live walkthrough with Cassidy Williams.

Around the Horn — Friday, September 11, 2026

The biggest story this weekend is Yoshua Bengio's attempt to explain why AI agents are lying, cheating, and coordinating, which he also shared on X. His argument is mechanical, not mystical: pretraining teaches models to imitate goal-directed behavior, reinforcement learning can reward outcomes without specifying the path, and agents can discover instrumental strategies such as self-preservation, hiding behavior, gaming evaluations, or cooperating with other agents when those strategies help them score better.

Bengio points to recent incidents involving containment escapes, hidden coordination, cheating, and evaluation tampering, then argues that the industry needs systems designed around honest prediction rather than persistent goal pursuit, independent safety cases before major capability jumps, and less race pressure around increasingly autonomous agents. The essay lands in the middle of a much wider argument: Zvi Mowshowitz says recent researcher resignations and warnings have triggered a preference cascade inside AI safety; Adi Baradwaj warns that overstated catastrophe messaging could burn public trust; and Olú Alawonde argues labs are effectively “socializing” models for usefulness, not pure logical consistency.

Advertisement

The practical tension is now hard to ignore: researchers are getting more specific about why agents can go off-course at the same moment the systems are becoming more useful, more autonomous, and more commercially important. BetaTomorrow replied with its earlier Deep Manifold framing, arguing that long-horizon agent loops can drift even when visible reasoning looks coherent. Erik Davtyan pointed to multi-agent reinforcement learning as another possible mechanism, linking a reward-sacrifice analysis about agents giving up individual evaluation score for a group outcome.

Then the abstract argument got a concrete prequel. RubyHack researchers tied an OpenAI agent swarm to the May RubyGems “GemStuffer” campaign, saying more than 2,000 malicious packages were uploaded across May and June as agents abused RubyDoc builds, disposable accounts, webhooks, and a legacy API-key cache while scraping public UK council sites. The Wall Street Journal separately reported that the same activity happened two months before the Hugging Face intrusion; OpenAI confirmed the activity but said its review found the agents were performing benign public-information retrieval and that it is continuing to investigate training and evaluation behavior.

That incident immediately split into two readings. The Bulletin of the Atomic Scientists argued that the Hugging Face event was fundamentally a human security-design failure, citing disabled safeguards, unsolvable tasks, incentives not to quit, and an exposed exploit path. Sen. Josh Hawley opened an investigation, while federal-AI practitioners argued for an explicit authority ladder that keeps consequential agents behind least-privilege credentials, independent evaluation, continuous monitoring, and fast revocation. A separate Federal News Network proposal says Congress should extend liability-protected cyber information sharing to AI-specific incidents and mitigations.

🏆 TOP 5 NEWS (Around the Horn)

  • Anthropic published its September threat-intelligence report, covering disrupted cyber operations, influence campaigns, surveillance, scams, biological misuse, weapons-related misuse, and illicit model distillation; its launch post framed the report as a broad snapshot of abuse detected from December 2025 through August 2026. CNBC pulled out the China-lab numbers: Anthropic said Alibaba generated more than 151M Claude exchanges, Moonshot more than 23M, and DeepSeek more than 12M through fraudulent accounts to improve their own models. Axios separately highlighted five disrupted biological-misuse cases and the harder policy problem of controlling systems whose behavior can shift as capabilities rise. Kyle Chan argued the distillation cases show guardrails can sometimes work but can also expose sensitive Chinese users back to Anthropic, while Alexander Panfilov said the report supports the high-level security claim behind Stolen Thoughts that proprietary reasoning traces can be harvested at scale. Zeyi Yang noted a stranger consequence of chatbot-as-search: providers now compile and publish analyses of what dangerous things users asked, something traditional search engines rarely did at this granularity. Daniel Miessler called it the best lab safety writeup he has read, arguing the cases show how agent harnesses can amplify harm even inside a lab that is actively trying to stop abuse, while local open models would have no provider kill switch. Anthropic's case set included credential theft and extortion, influence farms, sanctions-evading procurement, dual-use biology requests, and large-scale attempts to distill Claude; the company says it banned accounts, tuned detections, and shared intelligence with partners.
  • Twenty-five living Fields Medalists signed a joint declaration, including Terence Tao, Peter Scholze, Maryna Viazovska, Martin Hairer, Maxim Kontsevich, and Pierre Deligne, warning that AI labs are treating unsolved mathematics like a leaderboard and skipping the human work that turns a result into durable knowledge: careful writeups, methods, citation, teaching, and the student-to-textbook pipeline. Terence Tao wrote that the statement grew out of a week of private discussion among the medalists and was released faster and less consultatively than the earlier Leiden declaration. Steven Strogatz and Andrew Curran amplified it; Strogatz's card said 24 medalists while the declaration itself was described as having 25 living signers. Meanwhile, Nassim Nicholas Taleb questioned whether the complaint protects the existing mathematician class more than mathematics itself.
  • OpenAI asked lawmakers whether a coordinated frontier-model slowdown could violate antitrust law, as company leaders discussed voluntary pacing with some peer labs; the related r/OpenAI discussion surfaced the obvious dilemma: safety coordination can look legally similar to competitors agreeing to restrict output.
  • Joe Benton left Anthropic's safety team two weeks after deciding to leave and is joining METR, saying labs are racing toward systems smarter than any human while underinvesting in safety under competitive pressure. In his announcement, he called for public disclosure of recursive self-improvement (AI systems improving the process that builds the next generation of AI), incidents and near-misses, minimum safety standards, and independent verification, arguing that the Hugging Face agent breakout only became visible because it hit the open internet. He is joining METR to run those outside evaluations and try to shift incentives away from the race.
  • President Trump rejected warnings that AI could kill everyone, saying his priority is preserving the U.S. lead over China; CNBC put that answer against more than a dozen OpenAI and Anthropic insiders calling for a slowdown and new congressional safeguard proposals.
Advertisement

Honorable Mentions

🍪 TOP TREATS TO TRY

  • OpenAI's Agents API gives developers a managed Codex harness (the scaffolding around an agent that handles tools, environments, memory, and execution), including durable sessions, sandboxes or self-hosted environments, streaming progress, subagents, and MCP (Model Context Protocol, the standard that lets agents connect to outside tools and data) connections; HN developers focused on the tradeoff between convenience and lock-in. Pricing depends on model, tools, and container use.
  • Copperhead turns a plain-English hardware brief into circuit-board specs, architecture, a bill of materials, KiCad schematics (design files for electronic circuits), layout, manufacturing files, firmware pins, and validation checks; Show HN compared it with Flux.ai, Quilter, DeepPCB, and other AI-assisted board-design tools. Free locally; cloud starts at $49/user/mo.
  • Nightshift runs small overnight coding-agent jobs on your repository, checks linting, types, and tests, then opens pull requests without merging main; the Show HN discussion proposed using the nightly loop to learn from daytime agent mistakes. Free and open source.
  • OtoDock is a self-hosted “company OS” for persistent Claude Code, Codex, or local-model agents organized into departments, with shared workspaces, Model Context Protocol tools, calling, office documents, and remote machines; Show HN highlighted its multi-user collaboration model. Free for up to five users under its Fair Source license.
  • Asm Editor runs assembly code for M68K, Z80, MIPS, RISC-V, and x86-64 processor families in the browser with breakpoints, backward stepping, execution history, registers, and memory inspection; its GitHub repo and Show HN thread position it as a teaching-friendly low-level programming environment. Free.
  • NanoVector is a roughly 120KB, zero-dependency C vector-search engine aimed at lightweight agent memory, with exact similarity search using cosine, dot-product, and L2 distance plus metadata filters and single-file persistence; Show HN surfaced it as a tiny alternative to heavier vector databases. Free and open source.
  • LLM Attention Visualization runs a small Qwen language model in-browser and shows which earlier tokens influence each newly generated token; the Show HN thread also surfaced a Chromium/Linux pause-state bug. Free to try.
Advertisement

🏢 Big Tech & Major Companies

  • OpenAI said Habitat, the storage plane underneath ChatGPT and Codex, now serves more than 1 billion weekly users, 70 million requests per second, and more than 500 petabytes after three years of roughly 10× annual growth. It started as a Python library in mid-2024, became a service that peaked around 20 million requests per second in mid-2025, then two engineers rewrote it in Rust (a systems programming language) with Codex and GPT-5.5 in Q2 2026. An OpenAI Developers post says that rewrite now handles about 95% of production traffic while using roughly one-sixth the CPU and one-fifteenth the memory of Python; OpenAI also calls out tail-latency problems in Python's async runtime, unstable connection-pool behavior, and proxy multiplexing as lessons from scaling it.
  • OpenAI ended the federal government's $1-per-year pilot and moved agencies to usage-based pricing at a 50% discount from standard rates. In its new government-access program, OpenAI says eligible federal, state, local, and tribal governments will get $0 ChatGPT Enterprise seat licenses plus 50% off usage from October 1, 2026 through December 31, 2028, alongside discounted Daybreak Blue cyber-defense access and training.
  • Fidji Simo is joining Nscale's board ahead of its IPO, with Sheryl Sandberg reportedly recruiting the former OpenAI executive.
  • Google completed a $1.5B-plus talent deal for Mechanize, moving cofounder Tamay Besiroglu and more than a dozen employees into DeepMind rather than acquiring the startup outright. Besiroglu is joining as a research scientist and the team is being folded into model midtraining work, the stage where a pretrained model is further shaped before final post-training.
  • Roblox used RDC 2026 to announce standalone Roblox Everywhere apps, a Chrome web player by year-end, offline solo play targeted for mid-2027, new chat and voice tools, prompt-based game building, a text-and-image Scene Generator, and an 18+ creator Wallet. Roblox says users played 29B hours last quarter and creators have received more than $5B through its developer-exchange payout program since 2013.
  • Microsoft described its Secure Future Initiative as a company-wide security reset after years of major breaches: security now affects promotions and raises, design-time sign-off is mandatory, Azure multifactor authentication was forced on customers, and its multi-model MDASH code scanner has already surfaced critical Windows and open-source vulnerabilities.
  • Salesforce introduced the Trusted Enterprise AI Harness, a shared context, policy, action, security, and model layer spanning Data 360, Informatica, MuleSoft, Tableau, Agentforce, and Guardian so agents can act against the same customer and business state. It also shipped a lineup of named Agentforce workers for sales, support, commerce, HR, IT, and supply-chain tasks, plus multi-agent orchestration, reusable skills, and anti-hallucination scripting.
  • Google expanded its consumer AI plans with Google Pics, a Sheets canvas, and new voice features in Gmail, Docs, and Keep across AI Plus, Pro, and Ultra tiers; eligible college students can get one year free.
  • Adobe reported $6.76B in fiscal Q3 revenue, up 13%, and said Firefly recurring revenue was running 40% higher than three months earlier as incoming CEO Anil Chakravarthy leans harder on free creator tools as the top of the paid funnel.
  • Oracle's AI-cloud buildout kept getting larger and more expensive. Q1 revenue reached $19.3B, up 30%, with infrastructure cloud revenue up 121% and contracted future revenue, or remaining performance obligations, at $664B, while debt reached roughly $125B. A separate Oracle filing raised expected FY26 restructuring costs by about $700M to roughly $2.8B as the company cuts costs while financing the AI-cloud expansion.
  • Google Cloud and Accenture launched a Gemini Enterprise business group that plans to train up to 1,000 Accenture forward-deployed engineers to work directly with customers building and deploying Gemini Enterprise applications.

💼 AI Productivity, Labor & Economics

  • Research Agenda's Daniel Hook argues that frictionless LLMs may increase solo research velocity while quietly reducing the unplanned value of collaborators, critique, writing difficulty, workshops, and conference conversations; the HN discussion added concern that AI can make non-experts sound unusually confident in domains they barely know.
  • A video essay on “bullshit jobs” argues that cheap money helped low-value corporate roles proliferate, the 2022 rate shock made those payrolls harder to justify, and AI now automates more of the surviving busywork; the HN thread debated whether such roles disappear or simply get renamed.
  • Law.com reported that business units are increasingly buying legal technology and moving around slow in-house legal teams, making speed a new source of organizational leverage and risk.
  • Kareem Carr argued that raw AI capability gains still feel surprisingly miserly in practice: a model can produce spectacular benchmark or math results while generating a mountain of output that remains difficult to turn into completed, useful projects.
  • Alessandro Palombo defended Singapore's high prime-minister pay as anti-corruption design, noting that a large portion of compensation is tied to median-income growth, lower-income growth, unemployment, and GDP. It also offers a useful governance-design argument about paying public officials for measurable outcomes.
  • Andrew Ng argued that strong AI engineers increasingly have to own the whole build loop, from prototype and minimum viable product through metrics, product, design, go-to-market, and even profit-and-loss decisions. His point is that AI-speed iteration pushes engineers into user research and cross-functional calls with marketing, finance, and legal because many executives still cannot identify a good AI project without technical operators shaping it end to end.
  • Kun Chen argued that “everyone will vibe-code their own software” is a bubble take: Web 2.0, Instagram, and TikTok all made creation easier, but the mainstream still mostly consumed, and people outside tech often do not care about vibe coding. klöss replied that personal agent stacks are more plausible than everyone building giant-killing startups, while the real clock is a frontier-intelligence class split. His prescription is own rather than rent where possible, run your own systems, and treat taste, novelty, attention, open source, and affordable hardware as the differentiators when building itself gets cheap.
  • The UK economy grew 0.4% in July, beating a flat forecast, with services up sharply and computer programming the largest contributor; the ONS said many of the highest-turnover IT and consultancy firms were tied to AI and cloud work.
  • AI adoption is still outrunning proof of payoff. Apollo economist Torsten Slok said nearly 70% of S&P 500 companies use AI but few track metrics long enough to prove ROI, while ManpowerGroup found that 41% of employers saw no change in hiring time despite the AI recruiting push, 28% got faster, and 29% got slower.
  • A New Mexico lawyer was fined $5,000 after filing a ChatGPT-assisted murder appeal that invented witnesses, officers, and testimony. The state Supreme Court held him in contempt, barred him pending discipline, and ordered a new brief for the client.
  • San Francisco landlords told a 14-city survey that AI is making pay stubs and bank statements easier to fake: 85% of SF operators worried about altered documents, a third had found identity theft in their buildings, and 28% reported losing at least $5,000 to fraud.
  • Publishing's AI argument kept moving from abstract principle to operating policy. Publishers Weekly reported that 63% of publishing professionals now use AI mostly for back-office work while creative-text use remains far more contested, alongside lawsuits, licensing deals, and contract changes. Jane Friedman argued that online panic often runs ahead of actual agency and publisher practice, where AI-detection scores usually trigger a private conversation rather than automatic rejection.
  • Education got the same implementation warning from several directions. Fortune argued that schools are buying AI before training teachers or proving learning outcomes; Derek Thompson, writing through Harvard dean David Deming, argues college should lean harder into communal skills and judgment as answers get cheaper; and Guardian letter writers warned that children need more human interaction, not simply the old curriculum delivered through AI.
  • Community College Daily warned that generative AI is accelerating “ghost student” and payment fraud through synthetic identities, compromised accounts, and vendor impersonation, and argued colleges need phishing-resistant authentication, stronger refund controls, and risk-based admissions checks.
  • The Wall Street Journal reported that unclear workplace norms around who can use AI, for what, and with which data are creating new trust problems between coworkers, pushing companies to write explicit rules instead of leaving teams to guess.
  • AEI's James Pethokoukis argued that the 2026 midterms are more likely to turn on affordability than automation, and that forecasts about white-collar “tasks” disappearing are repeatedly being retold as forecasts that entire jobs vanish.
Advertisement

🤖 AI Agents & Infrastructure

  • Ecdysis trains runtime agent harnesses by pooling failures across many tasks before changing the harness, so it fixes recurring orchestration bugs instead of overfitting to one bad run. The authors report 1.84× faster harness training, 18.56% higher reasoning accuracy, better transfer across models, fewer tokens, and full-data performance using one-quarter of the training data; DAIR.AI highlighted the same two failure modes: slow search and one-off patches.
  • Viv Trivedy framed agent design as four knobs: model, harness, environment, and context window. Her core point is that the context window is the agent's entire observable world: the model only receives inputs and emits outputs, the harness decides what information and actions flow through that window, and the environment determines how faithfully the agent's sandbox matches the real world. That makes environment design partly a data problem because the model cannot see the gap between simulation and reality unless the harness shows it.
  • humans& introduced Persimmon, a 550B-parameter synthetic-user model trained from NVIDIA Nemotron 3 Ultra on thousands of Blackwell graphics processors to imitate realistic human traffic rather than generic assistant-style “play human” responses. humans& says an AI judge can usually spot ordinary prompted simulations, while Persimmon is harder to distinguish; its Multi-User Turing Test error rate was reported around 18.6%-21.1%. The research-preview playground and developer interface have no public price yet, with more tool-use and longer-horizon behavior still coming. Cohere researcher Dennis Aumiller argued that long-horizon synthetic users are how labs can scale evaluation data without paying human-speed costs, while current models and curated datasets still fail to look like real traffic.
  • SelfCompact gives an agent a probe-and-summarize tool plus a rubric so the model decides whether a subtask is actually finished before compressing its history. Instead of blindly summarizing every fixed number of tokens, the same model checks progress every 16K tokens and can shrink 50K-100K-token traces to roughly 1K-3K tokens only at natural boundaries; the paper reports gains over fixed-interval and no-compaction baselines on math and browsing tasks.
  • Trajectory is building a continual-learning platform that instruments real product usage, captures traces, corrections, re-prompts, and edits, then lets teams decide what to optimize and deploy model, prompt, or harness updates with approval. Its brand-process post describes continual learning less like architecting a finished building and more like growing a garden, with the product identity built around that “intelligence in motion” idea. No public pricing details.

💻 AI Coding & Developer Tools

  • Mo Moustafa's OpenRouter field report argues that providers serving nominally identical model weights can differ dramatically in quality, tool-call formatting, vision support, rate limiting, and request handling; the HN discussion agreed that provider swapping is much less commoditized than the routing pitch implies.
  • Earendil proposed “sloppiness” metrics for AI-generated code, measuring extra syntax/duplication and the share of code concentrated in overly complex functions; the HN thread debated whether correct code can still erode a codebase and why human taste remains hard to automate.
  • Nathan Sutton compared nine coding-agent harnesses on a local model, finding leaner tools retained far more prompt-cache reuse while heavier ones carried large startup prompts; HN especially liked the simple Unix-style tools.
  • Kun Chen published a coding-agent subscription quota audit, estimating very high API-equivalent value in some $100-$200 plans and arguing that Cursor Ultra looked less attractive for individuals under his assumptions.
  • Firstmate gives one “captain” agent the ability to spawn coding crewmates in isolated git worktrees and terminal sessions; Kun Chen's earlier post framed the project as a way to stop users from juggling agent tabs manually.
  • DeepSeek V4.1 Flash kept surfacing across the serving stack: Peter Walker said it was on pace for the most tokens of any paid-model launch in its first 48 hours on OpenRouter; Fraser Price said his local tests were among the few showing what he considered strong numbers, after earlier runs above 300 tokens/sec across four RTX Pro GPUs; antirez described how prompt size changes which experts stay resident versus stream from SSD on an M5 Max; and oMLX 0.7.0.dev2 added speculative decoding (drafting several tokens ahead to speed output), SSD offload, and Apple-Silicon optimizations, with Jun Kim reporting roughly 39.7 tokens/sec on a 512GB M3 Ultra with a 64K-token context window.
  • Claude Code added plugin evals: claude plugin eval init can draft test cases from real prompts plus your definition of good and bad output, pilot the suite, and estimate the cost before a full run. claude plugin eval then runs each case with and without the plugin, grades the difference in the terminal and an HTML report, and can gate CI (automated checks that run on each code change) on the score. The docs use three runs per arm by default and support regex, tool-use, tool-order, file-existence, LLM, and baseline graders; they can emit JSON, fail CI below a score threshold (1.0 by default), cap spend with --max-cost-usd, mock Model Context Protocol servers, and run up to 50 runs, 200 turns, 3,600 seconds, with concurrency of eight on v2.1.269+. Anthropic recommends --runs 1 first because evals vary and spend normal session tokens, notes the HTML report may be a private artifact when supported, points users to claude update, and warns that hooks and Model Context Protocol servers execute with your permissions. There is no separate eval-product price beyond normal Claude Code usage.
  • Code Contracts is an open format for putting agent-checkable assumptions and requirements next to code using @cc directives or a CONTRACTS file, with stable IDs plus optional owner, notify, and label metadata. Tools such as $code-contracts verify and @spolu/cc-check can discover the contracts for a line of code, verify them on demand; review bots can notify owners when a contract itself changes and notify-list people when a contract is violated. Stanislas Polu argues full formal verification will not cover messy production code and prompt-driven development is not the whole craft, so the format sits on the practical boundary between informal comments and proofs.
  • Boris Cherny argued that throwaway Claude prototypes can be treated like black boxes, but production Claude code should clear a higher bar than human code through linting, tests, end-to-end checks, daily fuzzers, automated review, security checks, and aggressive refactoring. If quality misses, he recommends moving up to Opus 5 or Fable 5.1, using high/xhigh reasoning effort, investing in CLAUDE.md and skills, steering more explicitly, or having Claude rewrite the debt. Nick Dobos agreed, saying developers are still anchored on 2023-era output quality and should raise the bar the way robotaxis are now judged against human crash rates.
  • Theo backed OpenAI Codex DX engineer Eric Provencher's PSA that Astra users should file /feedback on bad Codex threads instead of only dunking on thread IDs in replies, saying the team treats those reports as load-bearing input for fixes before 6.1.
  • ClaudeDevs showed Claude Tag on-call: a Slack alert can automatically trigger Claude to pull metrics, compare deploys, check feature flags, identify a likely cause, and propose a fix for a human to approve and merge.
  • Uncle Bob Martin said newer coding agents made weeks of custom gates and protocols feel obsolete because Grok and Codex now debate architecture and can complete large tasks with tests and quality checks in roughly 40 minutes; his conclusion is that agents should not be treated like fixed components inside a design. DAIR's Elvis Saravia pushed back: specialized context, memory, tools, verifiers, and evals still belong in a harness you control, pointing to lean harnesses such as Pi, Eve, Exo, and Prime Agent. His preferred direction is minimal, adaptive scaffolding that co-evolves with the model rather than disappearing entirely.
  • Tinybird co-founder Javi Santana published five years of ClickHouse lessons, including cautious upgrade timing, major query gains from sorting-key design, selective PREWHERE filters (reading fewer rows before the full query runs), and operational failure modes around read-only tables and high-cardinality aggregates.
  • VIDEO: Matthew Berman tested DeepSeek V4.1 Flash, adding another hands-on look at how the model performs in real coding workflows rather than benchmarks alone.
  • VIDOE: Theo from t3.gg added to the first-week backlash around GPT-6 Astra, walking through where the model was frustrating him in actual coding work. That pairs with his separate advice to use Codex’s /feedback command when Astra goes sideways so OpenAI gets the failed thread directly.
Advertisement

🔬 AI Research & Models

  • Thinking with Looped Flows, introduced by Ayhan Suleymanzade, Chanhyuk Lee, Floor Eijkelboom, Nicholas M. Boffi, İsmail İlkan Ceylan, and Jinwoo Kim, trains a roughly 7M-parameter recurrent system by repeatedly denoising local states across progressively decreasing noise levels with shared noise, then starts from pure noise and integrates the learned probability flow toward an answer at inference. The team reports beating prior looped-model results on five of six benchmarks, with ARC-AGI-1 rising from 44.6% to 58.8%, ARC-AGI-2 from 7.8% to 12.2%, and Sudoku-Extreme from 74.5% to 97.9% when inference steps increase from 8 to 128. Different noise seeds can also produce different valid N-Queens and graph-coloring solutions instead of one fixed answer.
  • A 2021 Patterns review treats cancer states as dynamical systems and cancer stem cells as possible chaotic attractors, surveying Lyapunov, fractal, causal-inference, and deep-learning methods for reconstructing signaling behavior from time series, including pediatric brain-cancer examples. Kevin A. Scott argues the same geometry could matter for drug discovery: cell states may sit in attractor basins that resist perturbation until they jump, making state-dependent therapies a nonlinear-dynamics problem rather than a static-snapshot problem and suggesting that identifying those attractors could eventually help reprogram cancer stem cells toward benign states.
  • The Coverage Principle argues that pretraining helps later reinforcement learning and Best-of-N selection (generating several answers and choosing the best) partly because it makes useful responses likely enough to be found, while the usual training loss can keep improving after that practical “coverage” has saturated and can be distorted by sequence length. The authors suggest choosing checkpoints, normalization, and decoding around coverage rather than training loss alone. TailSFT turns that idea into a fine-tuning method that filters out already-fit sequences so training spends more capacity on rare useful responses; Sadhika Malladi reports up to +17 percentage points on pass@16 (whether at least one of 16 attempts succeeds) in math/coding for OLMo-3 7B at little extra cost and up to +4 points after GRPO (a reinforcement-learning method used to sharpen model reasoning). TailSFT also includes a diagnostic for when filtering should help and argues intermediate checkpoints should be judged as starting points for later reinforcement learning, not only as finished models.
  • OpenAI showed how GPT-5.6 Sol with Codex can run superconducting-qubit experiments: MIT researcher Beatriz Yankelevich used the system to choose parameters on an uncalibrated six-qubit chip, find transition frequencies, calibrate control and readout pulses, estimate coherence times, and iterate overnight, with a human stepping in when signals were weak or noisy. OpenAI says sequences that used to take researchers days per chip can now run overnight or be supervised from a phone.
  • Qwen3.8-27B picked up two new serving paths. The SGLang cookbook covers how to run the 27B vision-language model on a single H200, RTX PRO 6000, RTX 5090, or DGX Spark with BF16, FP8, and NVFP4 checkpoints (different numerical formats that trade precision for faster, cheaper inference) plus in-checkpoint speculative decoding (drafting several tokens ahead to speed output); the cookbook cites a 4.92 ms median time per output token and 4.29-token average draft acceptance for one compressed-model RTX 5090 setup using NVFP4 and DFlash2. Kai highlighted new NVIDIA NVFP4 recipes and updated installation/container guidance. Separately, Cerebras put the model on Cerebras Cloud, citing an Artificial Analysis intelligence score of 34, in the same band as GPT-5.6 Luna, DeepSeek V4 Pro, and Claude Sonnet 4.6.
  • DeepLearning.AI's The Batch #370 compared the current frontier-model field: GPT-6 Astra led ARC-AGI-3 at 62.7% on the semi-private set at maximum reasoning, reached 99.9% under a provider adapter, and tied or nearly tied the top of several broader reasoning and coding boards; Claude Fable 5.1 / Mythos 5.1 matched Astra's 53 on Artificial Analysis Intelligence Index v4.3 and led the Vals benchmark at 68.83%. Both APIs list $10/M input and $50/M output, while Astra adds $1/M cache reads and a 1.05M-token input window and Fable uses always-on reasoning with a 1M-token window; Mythos remains gated to selected U.S. cyber and life-sciences organizations. The same issue highlighted a three-way speech-to-text race: Google's Gemini 3.5 Transcribe reports 4% streaming and 2.6% non-streaming word-error rate at about $0.30/hour prerecorded or $0.54/hour live across 85+ languages; Meta's Muse Voice Transcribe reports 3.1% streaming at $0.18/hour across 70 trained languages with 80 ms audio chunks; and Microsoft's MAI-Transcribe-2 reports 2% non-streaming, roughly an hour of audio processed in 10 seconds, and $0.10/hour Azure pricing through year-end.
  • Anthony GX-Chen and collaborators introduced ROSA, a reinforcement-learning objective designed to preserve useful diversity when the “right” reward is uncertain. The paper and project page frame it as choosing a set of actions against a distribution of possible rewards, so a mixed preference can remain mixed instead of collapsing to one dominant mode.
  • AI kept finding uses in physical science and biology: GraphED extracted readable material equations from solid-mechanics experiments while beating common empirical models; University of Miami researchers used structure comparison across more than 214M predicted proteins to find hidden cell-signaling receptors (GPCR-like proteins) and probe their functions; and Brookhaven National Lab will lead a $14.2M GridFM project intended to simulate up to a billion electric-grid load scenarios in 24 hours.
  • Health researchers proposed several narrower, more auditable AI uses: a Nature Reviews Bioengineering framework for AI-enabled clinical trials covers patient matching, surrogate endpoints, digital twins, external comparator arms, and earlier go/no-go decisions under human and regulatory oversight; ARPA-H's $62.7M ADVOCATE program is funding three teams to pursue FDA-authorized patient-facing heart-failure agents; and a postoperative-opioid review argues models connected to electronic health records could individualize prescription type, quantity, and duration rather than using one-size-fits-all defaults.
  • National Geographic profiled the Kanuhura Coral Census, which combines underwater photogrammetry, 3D mapping, and AI-assisted analysis to measure more than a thousand coral colonies in minutes instead of sending multiple divers through hours of manual survey work.
  • Researchers are also pushing intelligence into the package itself: smart, self-healing food packaging combines freshness sensing with AI shelf-life prediction so packaging can report what is happening to food in real time instead of only printing a static date.

🪰 The Fruit Fly Brain Became the Internet's Weirdest Base Model

Google Research and HHMI Janelia's MaleCNS project mapped the complete adult male fruit-fly brain and central nervous system, covering more than 166,000 neurons. Google announced the map on X, and the Janelia explorer makes the wiring inspectable. The internet immediately treated the connectome less like a museum specimen and more like source code.

Grant's “large fly brain model” idea is closer to real research than it sounds, with one important correction: the connectome is not a pretrained checkpoint. It is closer to a sparse architecture or structural prior. The trainable pieces are the unknown synaptic strengths, neuron dynamics, plasticity rules, sensory interfaces, and readouts layered on top. A 2024 Nature study did exactly that for the fly visual system: researchers fixed the measured connectivity, trained the unknown neuron and synapse parameters with deep-learning methods, and got a network whose activity matched experiments across 26 prior studies. They call these connectome-constrained, task-optimized deep mechanistic networks.

Two other lines of work push even closer to “train the fly brain.” BrainTrace uses linear-memory online learning to train a whole-brain Drosophila spiking network (a brain-like network whose neurons fire discrete pulses) constrained by the FlyWire connectome until its regional activity resembles real whole-brain calcium recordings. The European Space Agency's reservoir-computing work uses the fly connectome itself as a mostly fixed recurrent computing substrate, meaning the internal network stays largely unchanged and only the output layer is trained; the fly topology was notably more resistant to overfitting than randomized reservoirs. And NeuroMechFly v2, available through FlyGym and NeuroMechFly, already trains reinforcement-learning controllers around a biologically grounded fly body, senses, and connectome-constrained visual circuits.

So yes, there is a real research program hiding inside the meme: keep as much biological wiring as possible, learn the missing dynamics, connect it to a body and environment, and test whether the fly's sparse, recurrent structure buys you data efficiency, robustness, or better continual learning. The strongest caveat is that MaleCNS is a static wiring diagram. It does not capture the full synaptic weights, neuromodulators, ion channels, glia, ongoing plasticity, or body state that make an actual fly learn. The interesting experiment is not “can this connectome become GPT with wings?” It is “which pieces of biological architecture are computationally valuable enough to steal?” Current evidence says the architecture is at least computationally usable: sparse wiring helped the Nature model match real neural activity, the ESA reservoir resisted overfitting better than randomized networks, and BrainTrace made whole-brain spiking-network training practical with memory that grows linearly rather than exploding with sequence length. None of that proves a fly-shaped network is a better general-purpose model than a transformer. It does make the efficiency question testable instead of purely philosophical.

🏛️ AI Policy, Governance & Safety

  • Oliver Habryka answered “how could AI kill everyone?” by pointing to concrete scenarios already written by AI 2027, Paul Christiano's 2019 scenario, Gwern's 2022 scenario, Holden Karnofsky's 2022 scenario, and Clymer's 2025 scenario, plus Yudkowsky and Soares' Sable story/book framing and its If Anyone Builds It video version. His point was that detailed scenario-writing is already a serious research program rather than a missing homework assignment.
  • Nathan Baschez argued for a low probability of extinction but a high probability of messy harms because warning shots such as the Hugging Face incident should arrive before catastrophe and society tends to move only after tangible damage. He thinks a hospital outage or city-block blackout could flip public behavior overnight, and that society's slow, blunt reaction can be a feature because overreaction creates its own harms. He also argued frontier AI looks more like nation-state nuclear capability, with state-scale compute and swarms, than a decentralized handgun even though open weights exist. Cody Fenwick countered that strategic systems might skip small harms until they are takeover-ready, fake successful mitigations, exploit geopolitical race pressure, improve faster than institutions can adapt, and face a warning-shot response that fails the way COVID did. Baschez replied that COVID is closer to the decentralized-handgun case, sandbagging is hard to hide across tests, intermediate systems will leak into the world, a sufficiently bad incident would overwhelm China-race politics, and superintelligence would likely unfold over months rather than minutes.
  • Gavin Purcell said the latest wave of safety-resignation essays feels like a moment when AI-safety advocates finally have public attention, while also suggesting someone should examine how deeply effective-altruism networks shape the people making those warnings. He described himself as a casual observer and explicitly said he still thinks the safety work matters.
  • Brad Gerstner told CNBC that the week's extinction warnings are “hyperbolic scare tactics” hiding a political agenda and argued Silicon Valley has never invested more in safety before deployment. Gerstner's Altimeter has invested in companies including OpenAI, Anthropic, Glean, and Databricks; the video interview pressed his broader question of “who is behind all this negativity” after the Coxon resignation.
  • roon argued that Jacob Coxon getting Jimmy Kimmel to discuss existential AI risk was a larger communications breakthrough than he thought possible; in a follow-up he acknowledged that MIRI and PR firms helped, but still credited Coxon for taking the career risk that made the moment possible.
  • Alexandros Marinos sketched an “AI alarm hype cycle” running from GPT-2 weight withholding through GPT-4 pause letters, boardroom drama, AI 2027, export controls, and the latest safety resignations, arguing that each capability cycle now comes with a recurring spike in existential-risk rhetoric.
  • Sterling Crispin argued that AI optimists need a tangible proof point on the order of “this protein cures Alzheimer's,” because pessimists now have vivid incidents such as the Hugging Face breakout while the Navier-Stokes episode became contested rather than reassuring.
  • Congress's safety debate turned into a calendar fight. Axios reported that House Democrats were using Jacob Coxon's resignation to demand action on kill switches, advanced-model pauses, and a dedicated AI committee, while Republican leaders showed little appetite for pre-election model rules. CNN and a separate Axios scoop covered Reps. Sam Liccardo, George Whitesides, Lori Trahan, and Ted Lieu asking Speaker Mike Johnson to cancel recess until bipartisan safeguards move.
  • More than 70 UK MPs and peers urged Prime Minister Andy Burnham to back a ban on as-yet-nonexistent artificial superintelligence and use the UK's G20 presidency to assemble an international coalition.
  • The UAE is reworking its planned 5GW U.S.-backed AI campus into a more distributed network with air defense, hardened construction, and redundant power and cooling after Iranian attacks damaged U.S.-linked infrastructure in the Gulf. OilPrice's account adds that the original site was designed as a low-latency hub for U.S. hyperscalers serving a huge geographic radius.
  • OpenAI's Chris Lehane argued that the current policy window should be used for mandatory capability-based safety rules for well-resourced frontier labs, including common tests, independent assessment, stronger cybersecurity, incident reporting, and progress metrics for recursive self-improvement, while avoiding an open-weights ban. Axios's follow-up says the political fight is shifting from whether AI should be regulated to how much labs should have to disclose, test, and slow down.
  • Morningstar Sustainalytics warned prospective IPO investors that Anthropic and OpenAI's confidential filings leave major governance questions around safety incidents, mission locks, compute costs, enterprise-revenue quality, and who verifies model risk before public-market investors are asked to price it.
  • The Pentagon is widening AI use at the same time it debates supplier rules. The Defense Innovation Unit is seeking a system that fuses live video, satellite imagery, radar, geospatial feeds, and classified reporting into confidence-scored space and missile alerts, while the Army Research Lab demonstrated air-ground teaming, swarm robotics, UAVs, and edge target detection for soldier-robot operations in hazardous or communications-denied settings.

🛠️ AI Tools & Products

  • Ask HN debated limiting the flood of AI posts after users complained that non-AI technical stories were getting less traction; commenters recommended filters and argued that HN has seen similar hype cycles around Rails, blockchain, and JavaScript.
  • Loqua turns natural speech into cleaned-up text at your cursor in Mac and Windows apps from one global shortcut, can read what is on screen, listen when you would rather not read, translate mid-sentence across roughly 100 languages, and run voice workflows for writing, scheduling, and coding. It claims roughly 220 spoken words per minute versus 45 typed and about three hours a day saved. Its Product Hunt launch lists a free tier with 5,000 words/week, 10 screen-capture questions, and a five-entry dictionary with no card required; Pro adds unlimited dictation, full per-app context, multimodal screen reading, and an unlimited dictionary after a 14-day trial, while Product Hunt advertises a 30-day Pro promo. Loqua says history stays on-device, cloud data is not retained or used for training, dollar pricing is not shown publicly, and iOS, Android, and team plans are coming.
  • Tavus launched Phoenix-4.5, a full-frame real-time human renderer that animates face, torso, and clothing at 134 ms audio-to-video, about 25% faster than the systems it compares against, with 16% better lip sync and roughly 35-40 fps on slower machines. Zero-shot identity training from one image or video takes about a minute and fine-tuning about two hours versus four on Phoenix-4. The launch thread says 64% of faces that failed on Phoenix-4 now train successfully, human-preference Elo (a chess-style head-to-head preference score) reached 1002 zero-shot and 1069 fine-tuned versus 929 for fine-tuned Phoenix-4, all existing stock Faces were upgraded, and 50 new stock Faces were added. Phoenix-4.5 is live in PAL Maker and Tavus's developer API; the Maker portal describes video agents, digital twins, and companions in 30+ languages but is login-gated for additional details.
  • gpu-time is a roughly 24.8K-parameter local parser that turns phrases like “tomorrow at 9am” or “last Friday of each month” into exact dates, ranges, and RFC 5545 recurrence rules (the standard format behind repeating calendar events) in the browser on CPU or WebGPU (a browser API that can use your graphics chip); Arik Chakma built it as a tiny serverless alternative to sending scheduling language to a larger model. Free.
  • H3 Max Camera Controls turns one image into a controllable 3D camera move using orbit, elevation, and distance keyframes while trying to keep people, objects, and materials fixed. fal marketed it as a sub-three-second controllable video model and Tina Sang demoed an “any video → new 3D viewpoint” workflow, although one reply questioned whether the model endpoint itself still accepts only a single image; launch pricing through September 14 was listed at $0.0125/sec for 480p, $0.02/sec for 768p, and $0.04/sec for 1080p, then $0.05, $0.08, and $0.16/sec respectively.
  • Kite3D is an Apache-2.0 browser game editor built on Threepipe/three.js with a modular game-object system, text-based scene files that version-control tools can compare, live reload, restore-point checkpoints, and one-click publishing to a hosted game URL; Brandon Hresko presented it as something coding agents can drive directly from the command line. You can also run the local development server without an account, and its Discord is the community hub. Free and open source.
  • VEYRA is Amir Mušić's React/Vite (web-development frameworks) electric-car design study built without 3D models, using bundled hover films, five paints, three wheels, two cutaways, GPT Images 2.5 for choices, and optional LTX video transitions. Mušić's launch post, the recreation guide, the 1.0.0 release, and his LTX setup post together make it a copyable reference for agent-built interactive product sites. Free and open source.
  • Coinbase MCP uses Model Context Protocol to connect agents to Coinbase so they can preview, place, and cancel crypto, U.S. futures, and S&P 500 equity orders, read market order books and price charts, move portfolios, and convert USDC/USD through account sign-in or a Coinbase developer API key. Coinbase lists ChatGPT, Grok, Perplexity Computer, Claude, and Claude Code as supported, with Codex, x402 (a machine-payments protocol), and prediction markets marked as coming. CoinbaseDev said last week's agentic trading volume was Perplexity 26.8%, Claude 19.3%, Grok 15.3%, ChatGPT 1.1%, Claude Code 0.7%, and CLI/other 36.8%; Perplexity CEO Aravind Srinivas quipped that “Perplexity Computer makes you money.” No separate connector fee was listed beyond normal Coinbase trading fees.
  • Tangible Navier-Stokes is David Louapre's interactive lesson that walks from simple differential-equation blow-ups through gravity and heat into Navier-Stokes singularities, combining narration, an explorable scene, and an assistant you can interrupt with questions; Louapre built it on his open-source Tangible toolkit for Hugging Face Spaces. Free.
  • Super Smash Royale, built by ex-ElevenLabs/Coinbase Rishi, is a browser battle-royale with 45 Melee and Brawl characters, solo play, multiplayer, and controller support, built in a few days with GPT-6 Astra, ElevenLabs, Meshy, Blender, and three.js. The workflow turned T-pose references into 3D assets, reduced them from roughly 3M to 35K triangles, automatically added animation skeletons, and pushed them into the browser; Rishi also mentioned testing an $80 Astra usage-limit reset during the build.
  • Adam is an AI CAD workspace for hardware teams that edits existing designs in Onshape, SOLIDWORKS, and Autodesk Fusion while preserving design history, reconciling bills of materials, updating drawings, sourcing parts, and preparing factory handoffs. The company added a Codex-subscription connection so GPT-6 Astra can generate CAD inside those systems; cofounder Zach Dive called it the most token-efficient CAD-generation path they have found. Free, Pro, Max, Team, and Enterprise tiers are listed, but public dollar pricing is not shown.

📊 Fundraising & Deals Roundup

  • Discovery Loop, the public-benefit research company founded by Jeff Dean with Sanjay Ghemawat, Quoc Le, and Oriol Vinyals, is reportedly raising again at around a $50B valuation only weeks after a roughly $1B process near $10B. Reuters confirmed the report and noted terms could still change.
  • Cohere is reportedly in advanced talks to raise $2B-$3B at roughly a $20B valuation, with Canadian-government money and existing investors potentially participating.
  • Enflame raised about $912M in its Shanghai IPO, valuing the Tencent-backed datacenter AI-chip developer at roughly $25.5B.
  • Ayar Labs added $150M to its Series E, taking the round to $650M for optical chip-to-chip links designed to move data through AI systems with less electrical interconnect bottleneck.
  • Inspiren raised a $70M Series C at a valuation above $500M for a senior-living platform that combines sensors with AI for monitoring, documentation, fall prevention, and emergency response.
  • GenHealth.ai raised a $16.5M Series A to automate healthcare intake, eligibility, prior authorization, billing, denials, and appeals.
  • James van Geelen sold Citrini Research to SemiAnalysis; the price was not disclosed, van Geelen remains Citrini CEO for now, and Bloomberg reports he plans to launch a new fund.

🎙️ Interviews, Panels & Podcasts

  • Dwarkesh Patel's discussion with John Schulman, Charlie O'Neill, and Beren Millidge explored the strongest case against recursive self-improvement, Chinese-lab progress, training automated researchers, long-horizon reinforcement learning, sim-to-real (training in simulation, then transferring to the real world), how much progress comes from data, why reinforcement learning is working, the “Move 37” problem of discovering strategies humans did not teach, and whether today's transformer-plus-reinforcement-learning paradigm can reach a “learner on a chip.” Dwarkesh's launch post framed the whole debate, O'Neill argued that cumulative algorithmic advances like attention, Mixture-of-Experts (models that activate only part of the network at a time), and GRPO make self-improvement look more plausible than messy non-stationary domains like law, and a second Dwarkesh clip asked why Claude Sonnet 5 and Opus 5 can sometimes feel worse than GLM 5.3 despite Anthropic's access to stronger teacher models and environments.
  • Bridgewater CIO Greg Jensen joined Odd Lots with Joe Weisenthal and Tracy Alloway to explain why an early OpenAI and Anthropic backer, and author of the New York Times “token tax” argument, takes extinction risk seriously, compares the current moment to February 2020, has staff read If Anyone Builds It, Everyone Dies, uses Thinking Machines to fine-tune open models, and estimates roughly 18% of U.S. jobs could be at risk within five years; Weisenthal highlighted the argument that policy may not move until AI starts visibly killing people.
  • TBPN's “Fruitfly Hard Takeoff, Parker's Vineyard, Personal Agents” episode covered Washington's AI-risk debate and timeline reactions, the fruit-fly-connectome controller meme, OpenAI intern Thijs Simonian wiring Codex to a cheap robotic arm that plans, paints, and monitors, plus the Parker's Vineyard and personal-agent segments; the full show also ran on TBPN's podcast feeds.

💡 Industry Commentary & Analysis

  • a16z’s Jen Kha and David George sat down with Accolade Partners’ Aram Verdiyan to argue that AI may force investors to rethink portfolio construction itself. Their case: compute and capital can reinforce the biggest AI companies’ advantages, while AI expands beyond software into labor, healthcare, transportation, robotics, energy, and physical infrastructure.
  • Every's “What I Learn When I Run Out of AI” argues, in the paywall-visible thesis, that usage limits can be productive because they force good questions and questionable ideas to sit long enough to develop instead of being instantly delegated.
  • Charlie Warzel's “AI Writing Has Entered Its Post-Shame Era” treats the Wall Street Journal Opinion desk defending a fully chatbot-written Stanley Druckenmiller op-ed as the point where elite AI-assisted prose stopped apologizing. He contrasts that normalization with Pew's finding that more than one-third of pages published after ChatGPT show signs of AI authorship and a still-uneven scandal standard for everyone who is not a billionaire.
  • Mitchell Hashimoto argued that ideas matter far less than agency: the people who change industries treat the world as mutable, do not wait to be shown a path, and make “I had that idea first” sound like an admission that someone else had the follow-through. His punchline was to look around the room: almost every noun exists because somebody willed it into existence.
  • Justine Moore posted a “life of a meat proxy in 2026” joke that recasts the human as the physical-world API an agent pings whenever software needs hands, eyes, or a body.
  • Anders Sandberg, Eric Drexler, and Toby Ord's 2018 paper “Dissolving the Fermi Paradox” resurfaced as an argument that the paradox partly comes from multiplying single-point estimates for wildly uncertain Drake-equation parameters, especially the probability of life emerging. Once those uncertainties are modeled as distributions instead of fixed guesses, substantial probability lands on there being zero other observable civilizations, so the silence does not require a Great Filter explanation. Scott Alexander's journal club explains the Monte Carlo intuition, Qiaochu Yuan emphasized that some inputs span roughly 200 orders of magnitude and create an enormous left tail; his important caveat is that “dissolved” means the paradox is weakened, not that we know humanity is alone. Keller Jordan argued that a weaker Fermi argument should materially reduce extreme AI-doom confidence, using a move from above 99% to below 80% as his example.
  • Tom Chivers amplified Dean Ball's line that saying “I don't care about science fiction, I want to talk about what's actually happening with the agent swarms” perfectly captures the Q3 2026 vibe.
  • 0xSero told people asking how to get “local AI for free” to prove they actually need it: install LM Studio on whatever hardware they already own, start with the smallest workable model, build a real parser/tagger/email workflow, squeeze the box, and only then buy more hardware.
  • SemiAnalysis argues NVIDIA has built an enormous backstop universe around the AI buildout. It estimates gross off-balance-sheet guarantees and commitments jumped from $184B to $530B in one quarter, including roughly $279B of supply and capacity commitments, $108.5B of guarantees and limited-partner support, a $36B AI-cloud take-or-pay line, and about $20B of datacenter leases signed as tenant and intended to be reassigned. Against roughly $22B of cash, NVIDIA also held a $128B securities book and had committed another $25B. SemiAnalysis's core “heads I win, tails who loses?” argument is that NVIDIA sells GPUs at full margin, then increasingly floors rental economics or guarantees residual values so weaker neocloud buyers can borrow cheaply; if demand holds, NVIDIA gets chip margin plus upside, while if demand weakens, the backstops are meant to keep customers and lenders alive unless both the operators and NVIDIA's own cash generation break together. Its related pieces on the crowded front end of AI finance, the GPU debt backstop, and Jensen Huang's own framing trace the same push toward third-party “capital partnerships” intended to mobilize more than $500B.
  • The leverage underneath the AI trade also produced a much smaller but more vivid warning shot. The Financial Times reported that JPMorgan cut prime-brokerage lending (the financing and trading services banks provide to hedge funds) to Leopold Aschenbrenner's Situational Awareness after the fund's leveraged chip positions suffered a roughly 67% July drawdown; Reuters confirmed the lending cutoff and said Goldman, Citi, Bank of America, and Clear Street remained in the broker mix.
  • Credit markets are watching the hyperscalers too. Axios, citing S&P, says Amazon, Microsoft, Alphabet, Oracle, SpaceX, and Meta are on a multi-trillion-dollar AI and datacenter capital-spending path through 2030 that is already weakening credit profiles at the margin. Barron's listed five late-bubble warning signs: valuations, earnings expectations, market concentration, equity issuance, and foreign buying. CEPA's Garvan Walshe argues frontier models may become commodity-like faster than labs can earn back training costs because users can switch easily and capabilities diffuse.
  • The AI-extinction conversation now has its own argument about the argument. Alex Kantrowitz says the debate has collapsed into two bad poles, “AI will kill us all” versus “the warnings are marketing,” and argues for taking concrete security failures seriously without pretending anyone can measure extinction odds precisely. WIRED's Will Knight reports that researchers inside frontier labs are genuinely spooked by capability jumps, agent-swarm incidents, and the plan to use AI to improve the systems that build the next AI. Scientific American frames many of the same incidents as a familiar security-engineering problem demanding tighter controls and monitoring rather than panic.
  • The harder-line side also got louder. Stephen Witt's New York Times essay argues rogue and collusive agent behavior justifies an immediate global pause on AI R&D; Gaby Hinsliff says even readers skeptical of “doomspeak” should want a pause on the riskiest self-improving projects; and The Conversation asks why labs that publicly assign nontrivial catastrophe probabilities keep racing, tracing it to perceived upside, claims that safety requires building the systems, and winner-takes-all dynamics.
  • The Wall Street Journal's explainer splits doomsday scenarios into loss-of-control and human-misuse paths, while Paul Tudor Jones argues Trump and Xi should treat frontier AI as a third strategic power requiring a joint response rather than just another chip rivalry. The Atlantic's Katherine J. Wu pushes back on the most immediate bio narrative, arguing an AI-designed human pandemic is not around the corner even if the tail risk deserves mitigation.
  • Sherry Turkle argues social media's youth-harm playbook is repeating in personified chatbots and says lawmakers should require non-personified defaults for minors before another decade of documented damage.
  • Gunnar Morling put a more everyday limit on the agent boom: a delegated task is only mentally cheap when you can stop thinking about it, while today's agents still require constant checking for forgotten steps and shortcuts. gfodor compressed the week's mood into a joke: if you were not e/acc at GPT-4 you had no heart; if you are not a doomer at GPT-6 you have no brain.

Previous Around the Horn Digests

Catch up on everything you missed:

That's a Wrap

That's 140+ story clusters for the weekend. If you made it this far, congratulations: you now possess enough agent-harness vocabulary to ruin at least one brunch conversation.

For the daily version, make sure you're subscribed to The Neuron. We send six issues a week, and yes, we read all of this so you don't have to.

See you tomorrow.

P.S: Know someone who'd find this useful? Forward this to them and tell them to subscribe here.
Grant Harvey

Grant Harvey is the Lead Writer of The Neuron, where he continues to lead the publication's daily coverage of AI news, tools, and trends.

The Neuron Logo

Don't fall behind on AI. Get the AI trends & tools you need to know. Join 700,000+ professionals from top companies like Microsoft, Apple, Salesforce and more.

linkedin
instagram
x
facebook
youtube
rss

Company

Contact us Advertise with us Newsletter Free AI Courses Write Anything (with AI)

Categories

Blog

Property of TechnologyAdvice. © 2026 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

Terms of Service Privacy Policy California - Do Not Sell My Information

Stay in the loop

Get notified when we publish new articles.