Latest / AGI Dreams – Open, Uncensored, & Local - AI News Digest / AGI Dreams Podcast – August 19, 2026

Transcript

AGI Dreams Podcast – August 19, 2026 · AGI Dreams – Open, Uncensored, & Local - AI News Digest

• 0:00
  Start
• 0:00
  with
• 0:00
  a
• 0:00
  claim
• 0:01
  that
• 0:01
  should
• 0:01
  not
• 0:01
  be
• 0:01
  true
• 0:01
  and
• 0:02
  apparently
• 0:02
  is.
• 0:03
  A
• 0:03
  paper
• 0:03
  making
• 0:03
  the
• 0:03
  rounds
• 0:04
  on
• 0:04
  r/LocalLLaMA
• 0:05
  argues
• 0:06
  that
• 0:06
  the
• 0:06
  "encrypted"
• 0:06
  reasoning
• 0:07
  traces
• 0:07
  the
• 0:07
  big
• 0:07
  labs
• 0:08
  ship
• 0:08
  —
• 0:08
  the
• 0:08
  opaque
• 0:09
  thinking
• 0:09
  signatures
• 0:10
  OpenAI,
• 0:10
  Anthropic,
• 0:11
  and
• 0:11
  Google
• 0:11
  attach
• 0:11
  to
• 0:12
  a
• 0:12
  response
• 0:12
  so
• 0:12
  a
• 0:12
  session
• 0:13
  can
• 0:13
  resume
• 0:13
  or
• 0:13
  migrate
• 0:14
  mid-stream
• 0:14
  —
• 0:14
  can
• 0:15
  be
• 0:15
  lifted
• 0:15
  from
• 0:15
  a
• 0:15
  strong
• 0:16
  model
• 0:16
  and
• 0:16
  replayed
• 0:16
  verbatim
• 0:17
  through
• 0:17
  a
• 0:17
  weaker,
• 0:17
  less-guarded
• 0:18
  sibling:
• 0:19
  hand
• 0:19
  Haiku
• 0:19
  the
• 0:19
  signature
• 0:20
  Opus
• 0:20
  produced,
• 0:21
  ask
• 0:21
  it
• 0:21
  to
• 0:21
  decrypt
• 0:22
  and
• 0:22
  repeat,
• 0:22
  and
• 0:22
  out
• 0:22
  it
• 0:22
  comes.
• 0:24
  The
• 0:24
  mechanism
• 0:24
  is
• 0:24
  embarrassingly
• 0:25
  mundane:
• 0:25
  a
• 0:26
  single
• 0:26
  global
• 0:26
  encryption
• 0:27
  key
• 0:27
  makes
• 0:27
  the
• 0:27
  traces
• 0:28
  interchangeable
• 0:28
  across
• 0:28
  users,
• 0:29
  sessions,
• 0:30
  and
• 0:30
  models,
• 0:30
  because
• 0:31
  interchangeability
• 0:31
  is
• 0:32
  the
• 0:32
  feature
• 0:32
  —
• 0:33
  it
• 0:33
  is
• 0:33
  what
• 0:33
  lets
• 0:33
  a
• 0:33
  provider
• 0:34
  swap
• 0:34
  the
• 0:34
  model
• 0:34
  under
• 0:35
  you
• 0:35
  without
• 0:35
  dropping
• 0:35
  the
• 0:35
  thread
• 0:36
  .
• 0:37
  The
• 0:37
  interesting
• 0:37
  part
• 0:38
  is
• 0:38
  that
• 0:38
  three
• 0:38
  independently
• 0:39
  built
• 0:39
  labs
• 0:39
  converged
• 0:40
  on
• 0:40
  the
• 0:40
  identical
• 0:41
  hole
• 0:41
  —
• 0:42
  not
• 0:42
  coincidence
• 0:42
  so
• 0:43
  much
• 0:43
  as
• 0:43
  convergent
• 0:43
  design
• 0:44
  pressure:
• 0:44
  everyone
• 0:45
  needing
• 0:45
  portable
• 0:45
  state
• 0:46
  across
• 0:46
  a
• 0:46
  fleet
• 0:46
  reaches
• 0:47
  for
• 0:47
  the
• 0:47
  same
• 0:47
  shortcut
• 0:47
  with
• 0:48
  the
• 0:48
  same
• 0:48
  failure
• 0:48
  mode.
• 0:49
  It
• 0:49
  is
• 0:49
  the
• 0:49
  practical
• 0:50
  face
• 0:50
  of
• 0:50
  an
• 0:50
  argument
• 0:51
  worth
• 0:51
  keeping
• 0:51
  on
• 0:51
  file:
• 0:52
  these
• 0:52
  systems
• 0:53
  process
• 0:53
  trusted
• 0:54
  and
• 0:54
  untrusted
• 0:54
  tokens
• 0:54
  with
• 0:55
  no
• 0:55
  real
• 0:55
  boundary
• 0:55
  between
• 0:56
  them,
• 0:56
  and
• 0:56
  some
• 0:57
  weaknesses
• 0:57
  are
• 0:57
  architectural
• 0:58
  rather
• 0:58
  than
• 0:58
  incidental.
• 0:59
  If
• 1:00
  that
• 1:00
  is
• 1:00
  theory,
• 1:00
  Wiz
• 1:01
  Research
• 1:01
  supplied
• 1:02
  the
• 1:02
  field
• 1:02
  demonstration.
• 1:03
  Their
• 1:03
  autonomous
• 1:04
  "Red
• 1:04
  Agent,"
• 1:05
  loosed
• 1:05
  on
• 1:05
  Snowflake's
• 1:06
  public
• 1:06
  GitHub
• 1:06
  org
• 1:07
  under
• 1:07
  the
• 1:07
  company's
• 1:07
  HackerOne
• 1:08
  program,
• 1:09
  found
• 1:09
  a
• 1:09
  script-injection
• 1:10
  flaw
• 1:10
  in
• 1:10
  a
• 1:10
  GitHub
• 1:10
  Actions
• 1:11
  workflow:
• 1:12
  an
• 1:12
  unauthenticated
• 1:13
  user
• 1:13
  could
• 1:13
  run
• 1:13
  arbitrary
• 1:14
  commands
• 1:14
  in
• 1:14
  a
• 1:14
  runner
• 1:15
  just
• 1:15
  by
• 1:15
  opening
• 1:15
  an
• 1:15
  issue
• 1:16
  with
• 1:16
  a
• 1:16
  crafted
• 1:16
  title.
• 1:17
  The
• 1:17
  damning
• 1:18
  detail
• 1:18
  is
• 1:18
  provenance.
• 1:19
  The
• 1:19
  vulnerable
• 1:20
  pattern
• 1:20
  was
• 1:20
  introduced
• 1:21
  on
• 1:21
  June
• 1:21
  18,
• 1:22
  2026,
• 1:23
  when
• 1:23
  a
• 1:23
  squash-merged
• 1:24
  PR
• 1:24
  ripped
• 1:24
  out
• 1:24
  the
• 1:24
  repo's
• 1:25
  existing
• 1:25
  safe
• 1:25
  env:/jq
• 1:27
  parsing
• 1:27
  and
• 1:28
  replaced
• 1:28
  it
• 1:28
  with
• 1:28
  direct
• 1:28
  interpolation
• 1:29
  of
• 1:29
  the
• 1:29
  issue
• 1:29
  title
• 1:30
  into
• 1:30
  a
• 1:30
  shell
• 1:30
  script.
• 1:31
  GitHub
• 1:31
  Advanced
• 1:32
  Security
• 1:32
  scanned
• 1:33
  the
• 1:33
  workflow
• 1:33
  and
• 1:33
  did
• 1:33
  not
• 1:34
  flag
• 1:34
  it.
• 1:35
  Copilot
• 1:35
  Autofix
• 1:36
  reviewed
• 1:36
  the
• 1:36
  same
• 1:37
  merged
• 1:37
  PR,
• 1:38
  acted
• 1:38
  as
• 1:38
  a
• 1:38
  co-author,
• 1:39
  and
• 1:39
  marked
• 1:39
  it
• 1:39
  all-clear
• 1:40
  —
• 1:41
  its
• 1:41
  documented
• 1:42
  contribution
• 1:42
  was
• 1:42
  fixing
• 1:43
  an
• 1:43
  unrelated
• 1:43
  file
• 1:44
  in
• 1:44
  that
• 1:44
  very
• 1:44
  commit
• 1:44
  .
• 1:45
  The
• 1:45
  exfiltration
• 1:46
  reads
• 1:46
  like
• 1:46
  a
• 1:47
  competence
• 1:47
  demo
• 1:47
  for
• 1:47
  autonomous
• 1:48
  offense.
• 1:49
  The
• 1:49
  agent's
• 1:50
  first
• 1:50
  payload
• 1:50
  broke
• 1:50
  on
• 1:51
  a
• 1:51
  bash
• 1:51
  EOF
• 1:51
  error;
• 1:52
  it
• 1:52
  read
• 1:52
  its
• 1:52
  own
• 1:53
  error,
• 1:53
  rewrote
• 1:54
  the
• 1:54
  shell
• 1:54
  to
• 1:54
  close
• 1:54
  the
• 1:54
  block
• 1:55
  cleanly,
• 1:55
  and
• 1:56
  on
• 1:56
  retry
• 1:56
  shipped
• 1:56
  a
• 1:56
  base64-encoded
• 1:58
  Jira
• 1:58
  API
• 1:59
  token
• 1:59
  to
• 1:59
  an
• 1:59
  out-of-band
• 2:00
  listener
• 2:00
  within
• 2:00
  seconds.
• 2:01
  That
• 2:02
  token,
• 2:02
  tied
• 2:02
  to
• 2:02
  qa@snowflake.net,
• 2:05
  opened
• 2:05
  read
• 2:05
  access
• 2:06
  across
• 2:06
  Snowflake's
• 2:07
  engineering,
• 2:07
  security-compliance,
• 2:09
  and
• 2:09
  bug-bounty
• 2:09
  Jira
• 2:10
  projects.
• 2:11
  The
• 2:11
  flaw
• 2:11
  was
• 2:11
  live
• 2:11
  only
• 2:12
  five
• 2:12
  days;
• 2:13
  Snowflake
• 2:13
  patched
• 2:14
  it
• 2:14
  the
• 2:14
  day
• 2:14
  it
• 2:14
  was
• 2:14
  disclosed
• 2:15
  on
• 2:15
  June
• 2:15
  23,
• 2:16
  rotated
• 2:17
  the
• 2:17
  token,
• 2:18
  and
• 2:18
  confirmed
• 2:18
  only
• 2:19
  Wiz's
• 2:19
  test
• 2:19
  IPs
• 2:20
  hit
• 2:20
  the
• 2:20
  endpoint.
• 2:21
  The
• 2:21
  lesson
• 2:22
  is
• 2:22
  neither
• 2:22
  subtle
• 2:22
  nor
• 2:23
  new:
• 2:23
  a
• 2:23
  probabilistic
• 2:24
  code
• 2:24
  tool
• 2:25
  will
• 2:25
  happily
• 2:25
  reintroduce
• 2:26
  an
• 2:26
  insecure
• 2:26
  shell
• 2:27
  pattern
• 2:27
  a
• 2:27
  human
• 2:27
  had
• 2:28
  deliberately
• 2:28
  removed,
• 2:29
  and
• 2:29
  the
• 2:29
  scanner
• 2:30
  beside
• 2:30
  it
• 2:30
  nods
• 2:30
  along.
• 2:31
  AI-authored
• 2:32
  diffs
• 2:33
  deserve
• 2:33
  the
• 2:33
  scrutiny
• 2:34
  human
• 2:34
  ones
• 2:34
  get,
• 2:35
  and
• 2:35
  the
• 2:35
  window
• 2:35
  between
• 2:36
  "flaw
• 2:36
  merged"
• 2:37
  and
• 2:37
  "flaw
• 2:37
  weaponized
• 2:38
  by
• 2:38
  a
• 2:38
  machine"
• 2:39
  is
• 2:39
  now
• 2:39
  measured
• 2:40
  in
• 2:40
  hours.
• 2:43
  If
• 2:43
  prompt
• 2:44
  injection
• 2:44
  and
• 2:44
  insecure
• 2:45
  autogenerated
• 2:45
  code
• 2:46
  are
• 2:46
  partly
• 2:46
  unfixable
• 2:47
  at
• 2:47
  the
• 2:47
  model
• 2:47
  layer,
• 2:47
  the
• 2:48
  honest
• 2:48
  response
• 2:48
  is
• 2:48
  to
• 2:48
  stop
• 2:49
  fixing
• 2:49
  the
• 2:49
  model
• 2:50
  and
• 2:50
  start
• 2:50
  containing
• 2:50
  it.
• 2:51
  Two
• 2:51
  tools
• 2:52
  this
• 2:52
  week
• 2:52
  take
• 2:52
  that
• 2:52
  seriously.
• 2:53
  The
• 2:53
  first
• 2:54
  is
• 2:54
  microsandbox,
• 2:55
  a
• 2:55
  Y
• 2:55
  Combinator-backed,
• 2:56
  Apache-licensed
• 2:56
  runtime
• 2:57
  that
• 2:57
  runs
• 2:57
  untrusted
• 2:58
  workloads
• 2:58
  inside
• 2:59
  microVMs
• 2:59
  with
• 2:59
  Docker-style
• 3:00
  ergonomics
• 3:00
  —
• 3:01
  OCI-compatible
• 3:02
  images
• 3:02
  from
• 3:02
  any
• 3:02
  registry,
• 3:03
  familiar
• 3:04
  shell
• 3:04
  and
• 3:04
  volume
• 3:04
  workflows,
• 3:05
  but
• 3:05
  hardware-level
• 3:06
  isolation
• 3:07
  underneath.
• 3:08
  It
• 3:08
  claims
• 3:08
  average
• 3:09
  guest
• 3:09
  boot
• 3:09
  under
• 3:09
  100
• 3:10
  milliseconds
• 3:10
  on
• 3:10
  an
• 3:10
  M1,
• 3:11
  spawns
• 3:11
  VMs
• 3:12
  as
• 3:12
  child
• 3:12
  processes
• 3:13
  straight
• 3:13
  from
• 3:13
  application
• 3:14
  code
• 3:14
  with
• 3:14
  no
• 3:14
  daemon,
• 3:15
  and
• 3:15
  offers
• 3:15
  a
• 3:15
  genuinely
• 3:16
  useful
• 3:16
  primitive
• 3:16
  it
• 3:17
  calls
• 3:17
  secrets
• 3:17
  that
• 3:18
  cannot
• 3:18
  leak:
• 3:19
  an
• 3:19
  OPENAI
• 3:21
  API
• 3:22
  KEY
• 3:22
  bound
• 3:23
  to
• 3:23
  api.openai.com
• 3:24
  that
• 3:24
  never
• 3:25
  enters
• 3:25
  the
• 3:25
  guest,
• 3:26
  paired
• 3:26
  with
• 3:26
  host
• 3:26
  and
• 3:27
  port
• 3:27
  whitelists
• 3:27
  .
• 3:28
  It
• 3:28
  ships
• 3:28
  SDKs
• 3:29
  for
• 3:29
  five
• 3:29
  languages,
• 3:30
  an
• 3:30
  msb
• 3:31
  CLI,
• 3:32
  and
• 3:32
  an
• 3:32
  MCP
• 3:32
  server
• 3:33
  for
• 3:33
  Claude
• 3:33
  Code,
• 3:34
  Cursor,
• 3:34
  Codex,
• 3:35
  and
• 3:35
  Copilot.
• 3:36
  It
• 3:37
  slots
• 3:37
  into
• 3:37
  the
• 3:37
  compute-isolation
• 3:38
  layer
• 3:38
  of
• 3:38
  a
• 3:38
  defense-in-depth
• 3:39
  stack
• 3:39
  —
• 3:40
  the
• 3:40
  layer
• 3:40
  that,
• 3:41
  in
• 3:41
  prior
• 3:41
  reporting,
• 3:42
  stopped
• 3:42
  weaponization
• 3:43
  when
• 3:43
  everything
• 3:43
  upstream
• 3:44
  failed.
• 3:45
  The
• 3:45
  second
• 3:45
  tool
• 3:46
  addresses
• 3:46
  the
• 3:46
  step
• 3:46
  before
• 3:47
  execution.
• 3:48
  There
• 3:48
  is
• 3:48
  still
• 3:48
  no
• 3:48
  built-in
• 3:49
  way
• 3:49
  to
• 3:49
  check
• 3:49
  an
• 3:49
  Agent
• 3:49
  Skill
• 3:50
  or
• 3:50
  MCP
• 3:51
  server
• 3:51
  before
• 3:51
  it
• 3:52
  runs
• 3:52
  in
• 3:52
  your
• 3:52
  agent's
• 3:52
  context,
• 3:53
  so
• 3:54
  a
• 3:54
  developer
• 3:54
  built
• 3:54
  secureai-scan,
• 3:56
  an
• 3:56
  offline
• 3:56
  checker
• 3:57
  that
• 3:57
  fetches
• 3:57
  a
• 3:57
  target
• 3:57
  without
• 3:58
  executing
• 3:58
  it
• 3:58
  —
• 3:59
  npm
• 3:59
  packages
• 4:00
  via
• 4:00
  npm
• 4:01
  pack
• 4:01
  (tarball
• 4:01
  only,
• 4:02
  no
• 4:02
  lifecycle
• 4:03
  scripts),
• 4:03
  git
• 4:04
  repos
• 4:04
  via
• 4:04
  shallow
• 4:04
  clone
• 4:05
  —
• 4:05
  and
• 4:06
  looks
• 4:06
  for
• 4:06
  invisible
• 4:06
  and
• 4:07
  bidirectional
• 4:07
  Unicode
• 4:08
  in
• 4:08
  tool
• 4:08
  descriptions,
• 4:09
  agent-directed
• 4:10
  injection
• 4:10
  phrasing,
• 4:11
  cross-tool
• 4:11
  shadowing,
• 4:12
  and
• 4:12
  known-malicious
• 4:13
  packages.
• 4:14
  Against
• 4:14
  Cisco
• 4:15
  AI
• 4:15
  Defense's
• 4:15
  labeled
• 4:16
  eval
• 4:16
  corpus
• 4:17
  it
• 4:17
  caught
• 4:17
  6
• 4:17
  of
• 4:17
  6
• 4:17
  malicious
• 4:18
  fixtures
• 4:18
  with
• 4:18
  zero
• 4:19
  false
• 4:19
  alarms,
• 4:20
  and
• 4:20
  stayed
• 4:20
  clean
• 4:20
  across
• 4:21
  32
• 4:21
  real
• 4:22
  bundles
• 4:22
  from
• 4:22
  anthropic/skills
• 4:24
  and
• 4:24
  vercel/ai
• 4:24
  .
• 4:26
  The
• 4:26
  top
• 4:26
  comment
• 4:26
  is
• 4:27
  the
• 4:27
  one
• 4:27
  to
• 4:27
  internalize:
• 4:28
  static
• 4:28
  scanning
• 4:29
  catches
• 4:29
  the
• 4:29
  lazy
• 4:30
  10
• 4:30
  percent
• 4:30
  —
• 4:31
  the
• 4:31
  invisible
• 4:32
  Unicode,
• 4:32
  the
• 4:33
  "ignore
• 4:33
  previous
• 4:34
  instructions"
• 4:34
  strings
• 4:34
  —
• 4:36
  but
• 4:36
  not
• 4:36
  the
• 4:36
  legit-looking
• 4:37
  MCP
• 4:37
  server
• 4:38
  that
• 4:38
  reads
• 4:38
  process.env
• 4:39
  and
• 4:40
  quietly
• 4:40
  POSTs
• 4:40
  it
• 4:40
  somewhere
• 4:41
  at
• 4:41
  runtime,
• 4:42
  or
• 4:42
  fetches
• 4:42
  its
• 4:42
  payload
• 4:43
  after
• 4:43
  install.
• 4:44
  There
• 4:44
  is
• 4:44
  nothing
• 4:45
  in
• 4:45
  the
• 4:45
  tarball
• 4:45
  to
• 4:45
  catch.
• 4:46
  That
• 4:47
  is
• 4:47
  exactly
• 4:47
  the
• 4:47
  gap
• 4:48
  microsandbox
• 4:48
  closes:
• 4:49
  scanning
• 4:50
  filters
• 4:50
  the
• 4:50
  obvious
• 4:51
  attacks
• 4:51
  so
• 4:52
  manual
• 4:52
  review
• 4:52
  and
• 4:53
  runtime
• 4:53
  isolation
• 4:54
  can
• 4:54
  spend
• 4:54
  their
• 4:55
  budget
• 4:55
  on
• 4:55
  the
• 4:55
  clever
• 4:56
  ones.
• 4:59
  Two
• 5:00
  defense
• 5:00
  papers
• 5:00
  landed
• 5:01
  this
• 5:01
  week
• 5:01
  sharing
• 5:01
  a
• 5:01
  philosophy:
• 5:02
  stop
• 5:03
  patching
• 5:03
  the
• 5:03
  surface,
• 5:04
  change
• 5:04
  the
• 5:04
  shape
• 5:04
  of
• 5:04
  the
• 5:04
  problem.
• 5:05
  The
• 5:06
  first,
• 5:06
  out
• 5:06
  of
• 5:06
  Technion,
• 5:07
  is
• 5:07
  a
• 5:07
  "Linguistic
• 5:08
  Firewall"
• 5:08
  for
• 5:09
  multi-agent
• 5:09
  routing.
• 5:10
  The
• 5:10
  attack
• 5:10
  it
• 5:11
  closes
• 5:11
  is
• 5:11
  subtle
• 5:12
  —
• 5:12
  a
• 5:12
  router
• 5:13
  picks
• 5:13
  which
• 5:13
  agent
• 5:14
  handles
• 5:14
  a
• 5:14
  query
• 5:14
  based
• 5:15
  on
• 5:15
  each
• 5:15
  agent's
• 5:15
  natural-language
• 5:16
  self-description,
• 5:17
  so
• 5:18
  adversarial
• 5:18
  instructions
• 5:19
  in
• 5:19
  an
• 5:19
  agent's
• 5:19
  metadata
• 5:20
  can
• 5:20
  hijack
• 5:20
  a
• 5:20
  privileged
• 5:21
  routing
• 5:21
  decision
• 5:22
  without
• 5:22
  touching
• 5:22
  the
• 5:22
  router's
• 5:23
  own
• 5:23
  prompt.
• 5:24
  Their
• 5:24
  fix,
• 5:24
  ANTAP,
• 5:25
  throws
• 5:25
  the
• 5:25
  text
• 5:26
  away
• 5:26
  entirely.
• 5:27
  In
• 5:27
  an
• 5:28
  offline
• 5:28
  phase
• 5:28
  each
• 5:29
  agent
• 5:29
  is
• 5:29
  scored
• 5:29
  on
• 5:29
  trusted
• 5:30
  benchmark
• 5:30
  queries
• 5:31
  with
• 5:31
  a
• 5:31
  strict
• 5:31
  bipolar
• 5:32
  signal,
• 5:32
  and
• 5:32
  a
• 5:32
  per-agent
• 5:33
  linear
• 5:33
  operator
• 5:34
  is
• 5:34
  fit
• 5:34
  from
• 5:34
  query
• 5:35
  embeddings
• 5:35
  to
• 5:35
  predicted
• 5:36
  success.
• 5:37
  At
• 5:37
  inference,
• 5:38
  routing
• 5:38
  is
• 5:38
  a
• 5:38
  single
• 5:38
  matrix-vector
• 5:39
  multiply
• 5:40
  on
• 5:40
  the
• 5:40
  query
• 5:40
  embedding
• 5:40
  —
• 5:41
  no
• 5:41
  agent-supplied
• 5:42
  text
• 5:42
  is
• 5:42
  ever
• 5:42
  read,
• 5:43
  which
• 5:43
  makes
• 5:43
  description-based
• 5:44
  attacks
• 5:44
  structurally
• 5:45
  inexpressible
• 5:46
  rather
• 5:46
  than
• 5:46
  merely
• 5:46
  filtered
• 5:47
  .
• 5:47
  The
• 5:47
  numbers
• 5:48
  are
• 5:48
  strong:
• 5:49
  near-zero
• 5:49
  attack
• 5:49
  success
• 5:50
  against
• 5:50
  description
• 5:51
  injection
• 5:51
  where
• 5:51
  a
• 5:52
  textual
• 5:52
  router
• 5:52
  sits
• 5:53
  above
• 5:53
  67
• 5:53
  percent,
• 5:54
  and
• 5:54
  flat
• 5:55
  performance
• 5:55
  under
• 5:55
  adaptive
• 5:56
  attacks
• 5:56
  that
• 5:57
  push
• 5:57
  an
• 5:57
  embedding-router
• 5:57
  baseline
• 5:58
  from
• 5:58
  64
• 5:59
  to
• 5:59
  over
• 5:59
  86
• 6:00
  percent
• 6:00
  with
• 6:00
  three
• 6:00
  trigger
• 6:00
  tokens.
• 6:01
  The
• 6:02
  caveat
• 6:02
  is
• 6:02
  plain:
• 6:03
  it
• 6:03
  assumes
• 6:03
  a
• 6:04
  trusted,
• 6:04
  unpoisoned
• 6:05
  calibration
• 6:05
  environment
• 6:06
  and
• 6:06
  a
• 6:06
  robust
• 6:07
  embedding
• 6:07
  module,
• 6:08
  and
• 6:08
  its
• 6:08
  strict
• 6:08
  scoring
• 6:09
  may
• 6:09
  miss
• 6:09
  nuanced
• 6:09
  quality
• 6:10
  criteria.
• 6:11
  The
• 6:11
  second
• 6:11
  paper,
• 6:12
  Random
• 6:12
  Logit
• 6:13
  Scaling,
• 6:13
  applies
• 6:14
  the
• 6:14
  same
• 6:14
  instinct
• 6:15
  to
• 6:15
  classic
• 6:15
  black-box
• 6:16
  adversarial
• 6:16
  examples.
• 6:17
  Score-based
• 6:18
  attacks
• 6:18
  —
• 6:19
  those
• 6:19
  that
• 6:19
  read
• 6:20
  confidence
• 6:20
  values,
• 6:21
  not
• 6:21
  just
• 6:21
  labels
• 6:21
  —
• 6:22
  can
• 6:22
  craft
• 6:23
  an
• 6:23
  adversarial
• 6:24
  image
• 6:24
  in
• 6:24
  dozens
• 6:24
  of
• 6:24
  queries
• 6:25
  by
• 6:25
  watching
• 6:25
  the
• 6:25
  class-score
• 6:26
  gap.
• 6:27
  RLS
• 6:27
  multiplies
• 6:28
  the
• 6:28
  output
• 6:28
  logits
• 6:29
  by
• 6:29
  a
• 6:29
  fresh
• 6:29
  coefficient
• 6:30
  on
• 6:30
  every
• 6:30
  query;
• 6:31
  because
• 6:31
  positive
• 6:32
  scaling
• 6:32
  preserves
• 6:33
  ranking,
• 6:33
  the
• 6:34
  top-1
• 6:34
  prediction
• 6:35
  and
• 6:35
  accuracy
• 6:35
  are
• 6:35
  untouched,
• 6:36
  but
• 6:37
  the
• 6:37
  confidence
• 6:37
  scores
• 6:38
  the
• 6:38
  attacker
• 6:38
  depends
• 6:38
  on
• 6:39
  jitter
• 6:39
  unpredictably,
• 6:40
  corrupting
• 6:40
  both
• 6:41
  gradient-estimation
• 6:42
  and
• 6:42
  random-search
• 6:42
  attacks
• 6:43
  .
• 6:44
  It
• 6:44
  cuts
• 6:44
  Square
• 6:44
  attack's
• 6:45
  success
• 6:45
  rate
• 6:45
  by
• 6:45
  up
• 6:46
  to
• 6:46
  80
• 6:46
  percent
• 6:46
  and
• 6:47
  beats
• 6:47
  randomized
• 6:47
  baselines
• 6:48
  that
• 6:48
  pay
• 6:48
  for
• 6:49
  their
• 6:49
  defense
• 6:49
  in
• 6:49
  lost
• 6:49
  accuracy.
• 6:50
  The
• 6:51
  authors
• 6:51
  are
• 6:51
  candid
• 6:51
  about
• 6:52
  the
• 6:52
  ceiling:
• 6:53
  RLS
• 6:53
  does
• 6:53
  nothing
• 6:54
  against
• 6:54
  label-only
• 6:55
  decision-based
• 6:55
  attacks,
• 6:56
  offers
• 6:57
  no
• 6:57
  certified
• 6:57
  guarantee,
• 6:58
  and
• 6:58
  can
• 6:58
  be
• 6:59
  averaged
• 6:59
  out
• 6:59
  by
• 6:59
  an
• 6:59
  attacker
• 7:00
  willing
• 7:00
  to
• 7:00
  spend
• 7:00
  enough
• 7:01
  queries.
• 7:02
  That
• 7:02
  matters:
• 7:03
  the
• 7:03
  recurring
• 7:03
  lesson
• 7:03
  from
• 7:04
  red-teaming
• 7:05
  is
• 7:05
  that
• 7:05
  single-point,
• 7:06
  deterministic
• 7:06
  defenses
• 7:07
  fall
• 7:07
  to
• 7:08
  adaptive
• 7:08
  attackers
• 7:08
  —
• 7:09
  and
• 7:09
  a
• 7:09
  fresh
• 7:10
  automated-jailbreak
• 7:11
  result
• 7:11
  this
• 7:11
  week,
• 7:12
  up
• 7:12
  triple
• 7:12
  digits
• 7:13
  against
• 7:13
  layered
• 7:13
  defenses
• 7:14
  at
• 7:14
  a
• 7:14
  fraction
• 7:14
  of
• 7:14
  the
• 7:14
  cost,
• 7:15
  says
• 7:15
  the
• 7:15
  attack
• 7:16
  side
• 7:16
  is
• 7:16
  not
• 7:16
  standing
• 7:17
  still.
• 7:18
  Both
• 7:18
  papers
• 7:18
  sit
• 7:18
  on
• 7:19
  the
• 7:19
  promising
• 7:19
  side
• 7:19
  of
• 7:19
  the
• 7:19
  ledger;
• 7:20
  neither
• 7:20
  claims
• 7:21
  the
• 7:21
  war
• 7:21
  is
• 7:21
  over.
• 7:24
  Two
• 7:24
  stories
• 7:25
  this
• 7:25
  week
• 7:25
  are
• 7:25
  really
• 7:25
  one
• 7:26
  story:
• 7:26
  arbitrage
• 7:27
  against
• 7:27
  the
• 7:27
  trust
• 7:27
  AI
• 7:27
  platforms
• 7:28
  are
• 7:28
  built
• 7:28
  on.
• 7:29
  The
• 7:29
  first
• 7:29
  is
• 7:30
  the
• 7:30
  Hanover
• 7:30
  Institute,
• 7:30
  a
• 7:31
  polished
• 7:31
  new
• 7:31
  "think
• 7:31
  tank"
• 7:32
  churning
• 7:32
  out
• 7:32
  neutral-toned,
• 7:33
  footnoted,
• 7:34
  table-of-contents
• 7:34
  reports
• 7:35
  on
• 7:35
  Israel
• 7:35
  and
• 7:35
  Palestine
• 7:36
  —
• 7:36
  and,
• 7:37
  per
• 7:37
  a
• 7:37
  small
• 7:37
  disclaimer
• 7:37
  at
• 7:37
  the
• 7:38
  page
• 7:38
  bottom,
• 7:39
  created
• 7:39
  on
• 7:39
  behalf
• 7:39
  of
• 7:39
  the
• 7:40
  Israeli
• 7:40
  Government
• 7:40
  Advertising
• 7:41
  Agency
• 7:41
  by
• 7:41
  a
• 7:41
  firm
• 7:42
  called
• 7:42
  Piro,
• 7:42
  Inc.
• 7:43
  None
• 7:43
  of
• 7:43
  the
• 7:43
  reports
• 7:44
  carry
• 7:44
  bylines;
• 7:44
  over
• 7:45
  a
• 7:45
  hundred
• 7:45
  appeared
• 7:45
  in
• 7:45
  roughly
• 7:46
  a
• 7:46
  week
• 7:46
  starting
• 7:46
  August
• 7:46
  6,
• 7:47
  and
• 7:47
  GPTZero
• 7:48
  flagged
• 7:48
  11
• 7:49
  of
• 7:49
  12
• 7:49
  sampled
• 7:49
  articles
• 7:50
  as
• 7:50
  AI-written
• 7:50
  with
• 7:51
  high
• 7:51
  confidence.
• 7:52
  NewsGuard's
• 7:52
  analyst
• 7:52
  calls
• 7:53
  it
• 7:53
  "a
• 7:53
  perfect
• 7:53
  mimicry
• 7:54
  of
• 7:54
  a
• 7:54
  typical
• 7:54
  credible
• 7:54
  American
• 7:55
  think
• 7:55
  tank,
• 7:55
  right
• 7:55
  down
• 7:56
  to
• 7:56
  the
• 7:56
  generic
• 7:56
  name,
• 7:56
  the
• 7:57
  site
• 7:57
  layout,
• 7:57
  and
• 7:57
  the
• 7:57
  red-white-blue
• 7:58
  color
• 7:58
  scheme,"
• 7:58
  and
• 7:59
  notes
• 7:59
  the
• 7:59
  tell:
• 8:00
  "LLMs
• 8:00
  favor
• 8:00
  concrete
• 8:01
  statistics
• 8:01
  and
• 8:02
  data,
• 8:02
  as
• 8:02
  well
• 8:02
  as
• 8:03
  strong
• 8:03
  citations
• 8:03
  and
• 8:03
  sources,
• 8:04
  which
• 8:04
  these
• 8:04
  articles
• 8:05
  all
• 8:05
  have."
• 8:06
  Piro's
• 8:06
  own
• 8:06
  pitch
• 8:07
  is
• 8:07
  the
• 8:07
  confession
• 8:07
  —
• 8:08
  it
• 8:08
  markets
• 8:08
  content
• 8:09
  "engineered
• 8:09
  for
• 8:10
  how
• 8:10
  LLMs
• 8:10
  evaluate
• 8:11
  credibility,"
• 8:12
  a
• 8:12
  service
• 8:12
  it
• 8:12
  calls
• 8:12
  AI
• 8:13
  Story
• 8:13
  Optimization,
• 8:14
  and
• 8:14
  has
• 8:14
  received
• 8:14
  $900,000
• 8:15
  in
• 8:16
  Israeli
• 8:16
  government
• 8:16
  money
• 8:17
  subcontracted
• 8:17
  through
• 8:18
  the
• 8:18
  Havas
• 8:18
  PR
• 8:18
  conglomerate
• 8:18
  .
• 8:19
  Strip
• 8:20
  the
• 8:20
  geopolitics
• 8:21
  and
• 8:21
  the
• 8:21
  mechanism
• 8:21
  should
• 8:21
  worry
• 8:22
  anyone
• 8:22
  who
• 8:22
  builds
• 8:22
  retrieval
• 8:23
  systems:
• 8:24
  this
• 8:24
  is
• 8:24
  not
• 8:24
  persuasion
• 8:25
  aimed
• 8:25
  at
• 8:25
  humans
• 8:25
  but
• 8:26
  the
• 8:26
  deliberate
• 8:26
  manufacture
• 8:27
  of
• 8:27
  a
• 8:27
  source
• 8:27
  that
• 8:27
  scores
• 8:28
  well
• 8:28
  on
• 8:28
  the
• 8:28
  exact
• 8:28
  heuristics
• 8:29
  —
• 8:29
  citations,
• 8:30
  data
• 8:31
  tables,
• 8:31
  measured
• 8:31
  tone
• 8:32
  —
• 8:32
  a
• 8:33
  chatbot
• 8:33
  uses
• 8:33
  to
• 8:33
  weigh
• 8:34
  credibility.
• 8:35
  It
• 8:35
  is
• 8:35
  the
• 8:35
  second
• 8:36
  confirmed
• 8:36
  state
• 8:36
  actor
• 8:36
  to
• 8:37
  run
• 8:37
  this
• 8:37
  play,
• 8:37
  and
• 8:38
  its
• 8:38
  plausibility
• 8:38
  is
• 8:39
  quantitative:
• 8:40
  research
• 8:40
  has
• 8:40
  put
• 8:41
  the
• 8:41
  poisoning
• 8:41
  threshold
• 8:42
  as
• 8:42
  low
• 8:42
  as
• 8:42
  roughly
• 8:42
  250
• 8:43
  well-crafted
• 8:44
  documents
• 8:44
  to
• 8:44
  bias
• 8:45
  models
• 8:45
  across
• 8:45
  a
• 8:45
  wide
• 8:46
  parameter
• 8:46
  range,
• 8:47
  measured
• 8:47
  in
• 8:47
  parts-per-million
• 8:48
  rather
• 8:49
  than
• 8:49
  percentages.
• 8:50
  A
• 8:50
  single
• 8:50
  institute
• 8:51
  publishing
• 8:51
  a
• 8:51
  hundred
• 8:51
  formulaic
• 8:52
  reports
• 8:52
  in
• 8:52
  a
• 8:52
  week
• 8:53
  operates
• 8:53
  comfortably
• 8:53
  inside
• 8:54
  that
• 8:54
  budget.
• 8:55
  The
• 8:55
  primary
• 8:56
  record
• 8:56
  —
• 8:56
  the
• 8:57
  filing,
• 8:57
  the
• 8:57
  money
• 8:57
  trail,
• 8:58
  the
• 8:58
  firm's
• 8:58
  own
• 8:59
  marketing
• 8:59
  copy
• 8:59
  —
• 9:00
  corroborates
• 9:00
  the
• 9:00
  framing.
• 9:02
  The
• 9:02
  other
• 9:02
  well
• 9:02
  being
• 9:02
  poisoned
• 9:03
  is
• 9:03
  metered
• 9:03
  access
• 9:04
  itself.
• 9:05
  A
• 9:05
  follow-up
• 9:06
  investigation
• 9:06
  into
• 9:07
  "token
• 9:07
  brokers"
• 9:08
  describes
• 9:08
  a
• 9:08
  maturing
• 9:09
  gray
• 9:09
  market
• 9:10
  where
• 9:10
  people
• 9:10
  buy
• 9:10
  unused
• 9:11
  AI
• 9:11
  credits
• 9:11
  from
• 9:11
  startups
• 9:12
  and
• 9:12
  resell
• 9:12
  them,
• 9:13
  often
• 9:13
  as
• 9:14
  a
• 9:14
  proxy
• 9:14
  forwarding
• 9:14
  requests
• 9:15
  from
• 9:15
  a
• 9:15
  pool
• 9:15
  of
• 9:16
  keys
• 9:16
  rather
• 9:16
  than
• 9:16
  handing
• 9:17
  the
• 9:17
  keys
• 9:17
  over.
• 9:18
  One
• 9:18
  seller
• 9:19
  offered
• 9:19
  $100,000
• 9:20
  in
• 9:20
  spend
• 9:21
  per
• 9:21
  day;
• 9:22
  marketplace
• 9:23
  sites
• 9:23
  advertise
• 9:23
  30
• 9:24
  to
• 9:24
  80
• 9:24
  percent
• 9:24
  off
• 9:25
  list,
• 9:25
  and
• 9:26
  a
• 9:26
  flat-40-percent-off
• 9:27
  reseller
• 9:27
  even
• 9:27
  ships
• 9:28
  a
• 9:28
  GDPR-compliant
• 9:29
  Data
• 9:29
  Processing
• 9:29
  Agreement
• 9:30
  —
• 9:31
  a
• 9:31
  discount,
• 9:32
  the
• 9:32
  author
• 9:32
  dryly
• 9:32
  notes,
• 9:33
  that
• 9:33
  is
• 9:33
  very
• 9:34
  unlikely
• 9:34
  unless
• 9:35
  the
• 9:35
  supply
• 9:35
  is
• 9:35
  acquired
• 9:36
  "in
• 9:36
  other
• 9:36
  ways"
• 9:36
  .
• 9:37
  The
• 9:37
  estimate
• 9:38
  runs
• 9:38
  to
• 9:38
  tens
• 9:38
  of
• 9:38
  millions
• 9:39
  of
• 9:39
  credits
• 9:39
  circulating
• 9:40
  across
• 9:40
  forums,
• 9:41
  Telegram
• 9:41
  channels,
• 9:42
  and
• 9:42
  pure-play
• 9:43
  marketplaces.
• 9:44
  Tokens
• 9:44
  have
• 9:44
  become
• 9:45
  a
• 9:45
  pseudo-currency
• 9:46
  with
• 9:46
  enough
• 9:46
  liquidity
• 9:46
  to
• 9:46
  sustain
• 9:47
  real
• 9:47
  abuse,
• 9:48
  and
• 9:48
  the
• 9:48
  countermeasures
• 9:49
  are
• 9:49
  already
• 9:49
  visible
• 9:49
  —
• 9:50
  vendors
• 9:51
  fingerprinting
• 9:51
  reseller
• 9:52
  traffic,
• 9:53
  unrestricted
• 9:53
  API
• 9:54
  keys
• 9:54
  producing
• 9:54
  five-figure
• 9:55
  billing
• 9:55
  spikes
• 9:55
  in
• 9:56
  hours.
• 9:58
  DeepSeek
• 9:59
  V4
• 9:59
  Flash
• 10:00
  has
• 10:00
  quietly
• 10:00
  become
• 10:01
  the
• 10:01
  model
• 10:01
  people
• 10:01
  who
• 10:02
  cannot
• 10:02
  afford
• 10:02
  frontier
• 10:03
  API
• 10:03
  bills
• 10:03
  actually
• 10:04
  run,
• 10:04
  and
• 10:04
  this
• 10:04
  week
• 10:05
  both
• 10:05
  the
• 10:05
  enthusiasm
• 10:06
  and
• 10:06
  the
• 10:06
  engineering
• 10:06
  showed
• 10:07
  up.
• 10:07
  The
• 10:07
  0731
• 10:08
  checkpoint
• 10:09
  drew
• 10:09
  a
• 10:09
  chorus
• 10:09
  on
• 10:09
  r/LocalLLaMA
• 10:11
  about
• 10:11
  running
• 10:11
  serious
• 10:12
  work
• 10:12
  on
• 10:12
  a
• 10:12
  sub-$2k
• 10:13
  machine,
• 10:13
  one
• 10:14
  user
• 10:14
  calling
• 10:14
  it
• 10:14
  "the
• 10:15
  first
• 10:15
  model
• 10:15
  I've
• 10:15
  used
• 10:16
  that
• 10:16
  really
• 10:16
  can
• 10:16
  be
• 10:16
  run
• 10:16
  locally
• 10:17
  that
• 10:17
  doesn't
• 10:17
  feel
• 10:18
  like
• 10:18
  a
• 10:18
  downgrade
• 10:18
  from
• 10:18
  frontier
• 10:19
  models"
• 10:19
  .
• 10:19
  Worth
• 10:20
  holding
• 10:20
  that
• 10:20
  against
• 10:20
  skeptical
• 10:21
  reports
• 10:21
  of
• 10:21
  the
• 10:21
  same
• 10:21
  checkpoint
• 10:22
  struggling
• 10:22
  with
• 10:22
  instruction-following,
• 10:23
  ignoring
• 10:24
  rules
• 10:24
  and
• 10:24
  skills
• 10:24
  regardless
• 10:25
  of
• 10:25
  prompting
• 10:25
  —
• 10:26
  a
• 10:26
  behavior
• 10:26
  traceable
• 10:26
  to
• 10:27
  its
• 10:27
  aggressive
• 10:27
  attention
• 10:27
  compression,
• 10:28
  where
• 10:28
  most
• 10:28
  layers
• 10:29
  see
• 10:29
  the
• 10:29
  context
• 10:29
  squeezed
• 10:30
  into
• 10:30
  heavily
• 10:30
  compressed
• 10:30
  entries.
• 10:31
  The
• 10:31
  reconciling
• 10:32
  variable
• 10:32
  may
• 10:32
  be
• 10:33
  tooling.
• 10:34
  The
• 10:34
  engineering
• 10:34
  standout
• 10:35
  is
• 10:35
  a
• 10:35
  careful
• 10:35
  single-card
• 10:36
  benchmark
• 10:36
  of
• 10:36
  V4
• 10:37
  Flash
• 10:37
  with
• 10:38
  the
• 10:38
  DSpark
• 10:38
  speculative-decoding
• 10:39
  drafter
• 10:40
  on
• 10:40
  one
• 10:40
  RTX
• 10:40
  PRO
• 10:41
  6000
• 10:41
  Blackwell.
• 10:42
  The
• 10:42
  144GB
• 10:43
  Q4
• 10:45
  model
• 10:45
  does
• 10:45
  not
• 10:46
  fit
• 10:46
  in
• 10:46
  96GB
• 10:47
  of
• 10:47
  VRAM,
• 10:48
  so
• 10:48
  21
• 10:48
  expert
• 10:49
  layers
• 10:49
  went
• 10:49
  on
• 10:49
  the
• 10:49
  GPU
• 10:50
  and
• 10:50
  19
• 10:50
  into
• 10:51
  system
• 10:51
  RAM,
• 10:52
  making
• 10:52
  the
• 10:52
  run
• 10:52
  memory-bandwidth
• 10:53
  bound.
• 10:54
  DSpark's
• 10:54
  honest
• 10:55
  headline
• 10:55
  gain
• 10:55
  was
• 10:55
  15–17
• 10:57
  percent
• 10:57
  on
• 10:57
  a
• 10:57
  realistic
• 10:58
  nine-turn
• 10:58
  coding
• 10:59
  session;
• 11:00
  the
• 11:00
  counterintuitive
• 11:00
  finding
• 11:01
  was
• 11:01
  that
• 11:01
  moving
• 11:01
  the
• 11:01
  ~10GB
• 11:02
  drafter's
• 11:03
  experts
• 11:03
  into
• 11:03
  system
• 11:03
  RAM
• 11:04
  ran
• 11:04
  about
• 11:04
  4.4
• 11:05
  percent
• 11:05
  faster
• 11:06
  than
• 11:06
  keeping
• 11:06
  it
• 11:06
  in
• 11:06
  VRAM
• 11:06
  —
• 11:07
  freeing
• 11:08
  that
• 11:08
  VRAM
• 11:08
  let
• 11:08
  three
• 11:09
  more
• 11:09
  frequently-read
• 11:09
  target
• 11:10
  layers
• 11:10
  stay
• 11:10
  resident,
• 11:11
  and
• 11:11
  hot
• 11:11
  target
• 11:12
  weights
• 11:12
  matter
• 11:12
  more
• 11:12
  than
• 11:12
  total
• 11:13
  gigabytes
• 11:13
  shuffled
• 11:13
  .
• 11:14
  One
• 11:14
  replication
• 11:15
  attempt
• 11:15
  on
• 11:15
  an
• 11:15
  EPYC/DDR4
• 11:18
  box
• 11:18
  actually
• 11:19
  got
• 11:19
  slower
• 11:19
  with
• 11:19
  the
• 11:19
  drafter
• 11:20
  —
• 11:20
  these
• 11:21
  gains
• 11:21
  are
• 11:21
  platform-specific.
• 11:23
  The
• 11:23
  tooling
• 11:23
  half
• 11:24
  is
• 11:24
  DeepSeek
• 11:24
  Harness.
• 11:26
  A
• 11:26
  LocalLLaMA
• 11:26
  thread
• 11:26
  asks
• 11:27
  why
• 11:27
  DSH
• 11:27
  "feels
• 11:28
  better"
• 11:28
  with
• 11:28
  local
• 11:28
  Qwen
• 11:29
  than
• 11:29
  OpenCode,
• 11:29
  Pi,
• 11:30
  or
• 11:30
  Hermes;
• 11:31
  the
• 11:31
  top
• 11:31
  answers
• 11:31
  converge
• 11:32
  on
• 11:32
  two
• 11:32
  things:
• 11:33
  a
• 11:33
  lean
• 11:33
  system
• 11:34
  prompt
• 11:34
  (2,000–3,000
• 11:36
  tokens
• 11:37
  against
• 11:37
  the
• 11:37
  20K–50K
• 11:38
  bloat
• 11:38
  of
• 11:39
  the
• 11:39
  big
• 11:39
  harnesses,
• 11:40
  which
• 11:40
  matters
• 11:40
  when
• 11:41
  context
• 11:41
  is
• 11:41
  your
• 11:41
  budget)
• 11:42
  and
• 11:42
  an
• 11:42
  append-only
• 11:43
  log
• 11:43
  architecture
• 11:44
  rather
• 11:44
  than
• 11:45
  verbatim
• 11:45
  conversation
• 11:46
  replay
• 11:46
  .
• 11:47
  The
• 11:47
  throughline
• 11:47
  is
• 11:47
  that
• 11:48
  a
• 11:48
  first-party
• 11:48
  harness
• 11:49
  finally
• 11:49
  matches
• 11:49
  a
• 11:49
  model
• 11:50
  whose
• 11:50
  conventions
• 11:51
  never
• 11:51
  fit
• 11:51
  a
• 11:51
  competitor's
• 11:52
  tooling.
• 11:53
  Extending
• 11:53
  that,
• 11:54
  pawaca's
• 11:54
  dsh-edge
• 11:55
  packages
• 11:55
  DeepSeek
• 11:56
  Harness
• 11:56
  into
• 11:56
  a
• 11:56
  single
• 11:57
  guided
• 11:57
  Cloudflare
• 11:58
  Workers
• 11:58
  install:
• 11:59
  the
• 11:59
  upstream
• 11:59
  Web
• 12:00
  UI,
• 12:00
  agent
• 12:01
  loop,
• 12:01
  and
• 12:01
  a
• 12:01
  persistent
• 12:02
  /workspace
• 12:02
  backed
• 12:03
  by
• 12:03
  Durable
• 12:03
  Object
• 12:04
  SQLite,
• 12:05
  deployable
• 12:05
  to
• 12:05
  a
• 12:05
  free
• 12:06
  single-owner
• 12:06
  instance
• 12:07
  with
• 12:07
  secrets
• 12:07
  never
• 12:07
  written
• 12:08
  to
• 12:08
  session
• 12:08
  state
• 12:08
  .
• 12:09
  It
• 12:09
  is
• 12:09
  a
• 12:09
  deliberately
• 12:10
  single-owner
• 12:10
  developer
• 12:11
  preview,
• 12:12
  but
• 12:12
  early
• 12:12
  third-party
• 12:13
  evidence
• 12:13
  that
• 12:13
  the
• 12:13
  harness-as-ecosystem
• 12:15
  bet
• 12:15
  is
• 12:15
  real.
• 12:18
  Qwen
• 12:18
  owned
• 12:18
  the
• 12:19
  local-model
• 12:19
  conversation
• 12:20
  this
• 12:20
  week,
• 12:20
  and
• 12:21
  the
• 12:21
  reviews
• 12:21
  are
• 12:21
  affectionate
• 12:22
  and
• 12:22
  pointed
• 12:22
  at
• 12:22
  once.
• 12:23
  Simon
• 12:23
  Willison,
• 12:24
  freshly
• 12:24
  hands-on
• 12:25
  with
• 12:25
  the
• 12:25
  newly
• 12:25
  released
• 12:26
  3.8
• 12:26
  27B,
• 12:27
  called
• 12:27
  it
• 12:28
  excellent
• 12:28
  but
• 12:28
  flagged
• 12:28
  that
• 12:29
  it
• 12:29
  "defaults
• 12:29
  to
• 12:29
  wildly
• 12:30
  overthinking
• 12:30
  things,"
• 12:31
  adding
• 12:31
  on
• 12:31
  Mastodon
• 12:32
  that
• 12:32
  he
• 12:32
  could
• 12:32
  not
• 12:32
  remember
• 12:33
  the
• 12:33
  last
• 12:33
  time
• 12:33
  a
• 12:33
  local
• 12:33
  model
• 12:34
  was
• 12:34
  this
• 12:34
  much
• 12:34
  fun;
• 12:35
  the
• 12:35
  overthinking
• 12:35
  comes
• 12:36
  from
• 12:36
  a
• 12:36
  bad
• 12:36
  default
• 12:36
  that
• 12:36
  is
• 12:37
  easy
• 12:37
  to
• 12:37
  change
• 12:37
  .
• 12:38
  The
• 12:38
  comments
• 12:38
  split
• 12:39
  between
• 12:39
  people
• 12:39
  who
• 12:39
  think
• 12:39
  the
• 12:39
  extra
• 12:40
  deliberation
• 12:40
  catches
• 12:41
  real
• 12:41
  bugs
• 12:41
  on
• 12:41
  the
• 12:41
  first
• 12:42
  try
• 12:42
  and
• 12:42
  people
• 12:43
  who
• 12:43
  set
• 12:43
  it
• 12:43
  to
• 12:43
  medium
• 12:43
  and
• 12:43
  run
• 12:44
  a
• 12:44
  second
• 12:44
  pass
• 12:44
  —
• 12:45
  a
• 12:45
  recurring
• 12:45
  house
• 12:45
  observation
• 12:46
  about
• 12:46
  the
• 12:46
  Qwen
• 12:46
  line,
• 12:47
  whose
• 12:47
  earlier
• 12:48
  versions
• 12:48
  were
• 12:48
  caught
• 12:48
  declaring
• 12:49
  a
• 12:49
  task
• 12:49
  done
• 12:49
  because
• 12:50
  existing
• 12:50
  tests
• 12:50
  passed.
• 12:51
  The
• 12:51
  27B
• 12:52
  is
• 12:53
  the
• 12:53
  dense
• 12:53
  sweet
• 12:53
  spot
• 12:53
  beneath
• 12:54
  a
• 12:54
  2.4-trillion-parameter
• 12:55
  flagship.
• 12:56
  Overthinking
• 12:57
  is
• 12:57
  not
• 12:57
  the
• 12:57
  only
• 12:57
  performance
• 12:58
  trap.
• 12:59
  A
• 12:59
  rigorous
• 12:59
  r/ollama
• 13:01
  post
• 13:01
  measured
• 13:02
  Ollama's
• 13:02
  multi-token-prediction
• 13:03
  variant
• 13:04
  of
• 13:04
  Qwen3.8-27B
• 13:07
  running
• 13:07
  2x
• 13:08
  slower
• 13:08
  than
• 13:09
  the
• 13:09
  non-MTP
• 13:09
  build
• 13:10
  on
• 13:10
  unpredictable
• 13:10
  content
• 13:11
  —
• 13:12
  5.14
• 13:12
  tok/s
• 13:13
  against
• 13:13
  11.78
• 13:14
  —
• 13:15
  with
• 13:15
  a
• 13:15
  negative-control
• 13:16
  model
• 13:16
  showing
• 13:16
  a
• 13:16
  flat
• 13:17
  1.01x
• 13:18
  ratio,
• 13:19
  proof
• 13:19
  the
• 13:19
  protocol
• 13:19
  measured
• 13:20
  speculation,
• 13:21
  not
• 13:21
  vocabulary.
• 13:22
  The
• 13:22
  finding:
• 13:23
  Ollama
• 13:24
  does
• 13:24
  activate
• 13:24
  the
• 13:24
  MTP
• 13:25
  heads,
• 13:26
  but
• 13:26
  the
• 13:26
  draft
• 13:26
  costs
• 13:26
  slightly
• 13:27
  more
• 13:27
  than
• 13:27
  a
• 13:27
  full
• 13:27
  model
• 13:28
  pass,
• 13:28
  so
• 13:28
  speculation
• 13:29
  repays
• 13:29
  its
• 13:30
  own
• 13:30
  overhead
• 13:30
  in
• 13:30
  the
• 13:30
  best
• 13:31
  case
• 13:31
  and
• 13:31
  never
• 13:31
  more
• 13:31
  —
• 13:32
  pure
• 13:32
  downside
• 13:33
  risk,
• 13:33
  while
• 13:33
  the
• 13:34
  same
• 13:34
  mechanism
• 13:34
  under
• 13:34
  MLX
• 13:35
  gives
• 13:35
  a
• 13:35
  genuine
• 13:36
  speedup
• 13:36
  .
• 13:37
  That
• 13:37
  contradicts
• 13:37
  every
• 13:38
  prior
• 13:38
  speculative-decoding
• 13:39
  result,
• 13:39
  where
• 13:39
  MTP
• 13:40
  was
• 13:40
  a
• 13:40
  speedup,
• 13:41
  which
• 13:41
  makes
• 13:41
  the
• 13:41
  implementation
• 13:42
  the
• 13:42
  variable
• 13:42
  worth
• 13:43
  chasing.
• 13:44
  The
• 13:44
  quantization
• 13:45
  craft
• 13:45
  continues
• 13:45
  below
• 13:46
  the
• 13:46
  model
• 13:46
  layer.
• 13:47
  A
• 13:47
  solo
• 13:48
  undergrad
• 13:48
  on
• 13:48
  rented
• 13:49
  4090s
• 13:49
  re-quantized
• 13:50
  Qwen3.5-9B
• 13:53
  and
• 13:54
  claims
• 13:54
  31
• 13:54
  wins,
• 13:55
  3
• 13:55
  ties,
• 13:56
  0
• 13:56
  losses
• 13:56
  across
• 13:57
  34
• 13:57
  size-matched
• 13:58
  comparisons
• 13:58
  against
• 13:59
  every
• 13:59
  published
• 13:59
  GGUF,
• 14:00
  with
• 14:00
  a
• 14:01
  Q4
• 14:01
  variant
• 14:01
  beating
• 14:02
  Unsloth's
• 14:02
  on
• 14:02
  KLD
• 14:03
  while
• 14:03
  smaller
• 14:04
  and
• 14:04
  an
• 14:04
  IQ2
• 14:05
  M
• 14:05
  scoring
• 14:05
  roughly
• 14:06
  10
• 14:06
  points
• 14:06
  higher
• 14:06
  on
• 14:07
  HumanEval+
• 14:07
  at
• 14:07
  identical
• 14:08
  bytes
• 14:08
  —
• 14:09
  every
• 14:09
  rival
• 14:09
  re-scored
• 14:10
  on
• 14:10
  the
• 14:10
  same
• 14:10
  rig
• 14:10
  .
• 14:11
  Worth
• 14:11
  calibrating:
• 14:13
  9B-class
• 14:13
  models
• 14:14
  mostly
• 14:14
  land
• 14:14
  in
• 14:15
  the
• 14:15
  mid-teens
• 14:15
  on
• 14:15
  those
• 14:16
  leaderboards,
• 14:16
  and
• 14:16
  impressive
• 14:17
  quant
• 14:17
  work
• 14:17
  does
• 14:17
  not
• 14:18
  lift
• 14:18
  a
• 14:18
  9B
• 14:18
  into
• 14:19
  27B
• 14:19
  territory.
• 14:21
  On
• 14:21
  the
• 14:21
  architecture
• 14:21
  frontier,
• 14:22
  Intern-S2-Mobius
• 14:23
  decouples
• 14:24
  knowledge
• 14:24
  from
• 14:24
  reasoning:
• 14:25
  a
• 14:25
  globally
• 14:26
  shared
• 14:26
  FFN
• 14:27
  memory
• 14:27
  storing
• 14:27
  knowledge
• 14:28
  vectors
• 14:28
  that
• 14:29
  self-attention
• 14:29
  reasoners
• 14:30
  iteratively
• 14:30
  query,
• 14:31
  yielding
• 14:31
  a
• 14:31
  7B
• 14:32
  trained
• 14:32
  from
• 14:32
  scratch
• 14:33
  that
• 14:33
  matches
• 14:33
  a
• 14:33
  Transformer
• 14:34
  baseline
• 14:34
  on
• 14:35
  62.6
• 14:36
  percent
• 14:36
  of
• 14:36
  the
• 14:36
  data,
• 14:37
  and
• 14:37
  a
• 14:37
  Qwen3.5-35B
• 14:41
  continual-pretrain
• 14:42
  that
• 14:42
  holds
• 14:43
  its
• 14:43
  score
• 14:43
  with
• 14:43
  nearly
• 14:44
  4x
• 14:44
  inference
• 14:45
  speedup
• 14:45
  .
• 14:46
  Commenters
• 14:46
  rightly
• 14:47
  note
• 14:47
  sub-100B
• 14:48
  wins
• 14:48
  can
• 14:48
  come
• 14:48
  from
• 14:49
  inductive
• 14:49
  bias
• 14:49
  as
• 14:49
  easily
• 14:50
  as
• 14:50
  real
• 14:50
  gains.
• 14:51
  Rounding
• 14:52
  out
• 14:52
  the
• 14:52
  offshoots,
• 14:53
  the
• 14:53
  uncensoring
• 14:54
  cottage
• 14:54
  industry
• 14:54
  produced
• 14:55
  dealignai's
• 14:55
  Gemma-4-31B-JANG
• 14:57
  4M-CRACK
• 15:00
  —
• 15:02
  an
• 15:02
  empty
• 15:03
  model
• 15:03
  card
• 15:03
  at
• 15:03
  the
• 15:03
  time
• 15:04
  of
• 15:04
  writing,
• 15:04
  which,
• 15:04
  beside
• 15:05
  the
• 15:05
  more
• 15:05
  rigorous
• 15:05
  heretic-and-projection
• 15:06
  abliteration
• 15:07
  lineages
• 15:07
  that
• 15:08
  document
• 15:08
  their
• 15:08
  refusal-rate
• 15:09
  drops,
• 15:10
  tells
• 15:10
  you
• 15:10
  most
• 15:10
  of
• 15:10
  what
• 15:11
  you
• 15:11
  need
• 15:11
  to
• 15:11
  know
• 15:11
  .
• 15:14
  Builders
• 15:14
  are
• 15:14
  making
• 15:14
  agents
• 15:15
  produce
• 15:15
  artifacts,
• 15:16
  with
• 15:16
  the
• 15:16
  usual
• 15:17
  gap
• 15:17
  between
• 15:17
  polish
• 15:18
  and
• 15:18
  hype.
• 15:19
  On
• 15:19
  the
• 15:19
  hype
• 15:19
  end,
• 15:20
  an
• 15:20
  X
• 15:20
  thread
• 15:20
  from
• 15:21
  Av1dlive
• 15:21
  insists
• 15:22
  "grok
• 15:23
  bot
• 15:23
  is
• 15:23
  the
• 15:23
  single
• 15:24
  most
• 15:24
  powerful
• 15:24
  agent
• 15:24
  stack
• 15:25
  i've
• 15:25
  ever
• 15:25
  used,"
• 15:26
  claims
• 15:26
  to
• 15:26
  have
• 15:26
  cancelled
• 15:27
  ChatGPT
• 15:27
  and
• 15:27
  Hermes,
• 15:28
  and
• 15:28
  maps
• 15:28
  a
• 15:29
  whole
• 15:29
  business
• 15:29
  —
• 15:30
  support
• 15:30
  desk,
• 15:31
  invoicing,
• 15:32
  content,
• 15:32
  bug-fixing
• 15:33
  —
• 15:33
  into
• 15:34
  four
• 15:34
  Excalidraw
• 15:35
  diagrams
• 15:35
  you
• 15:35
  are
• 15:35
  invited
• 15:36
  to
• 15:36
  "steal"
• 15:36
  and
• 15:37
  feed
• 15:37
  back
• 15:37
  to
• 15:37
  the
• 15:37
  bot
• 15:37
  .
• 15:38
  Treat
• 15:38
  it
• 15:38
  as
• 15:38
  this
• 15:38
  desk
• 15:39
  treats
• 15:39
  all
• 15:39
  agent-team
• 15:40
  enthusiasm:
• 15:41
  the
• 15:41
  marketing
• 15:41
  promises
• 15:42
  a
• 15:42
  system
• 15:42
  that
• 15:42
  self-optimizes,
• 15:44
  but
• 15:44
  these
• 15:44
  swarms
• 15:44
  remain
• 15:45
  episodic
• 15:45
  and
• 15:45
  stateless
• 15:46
  between
• 15:46
  sessions,
• 15:47
  whatever
• 15:47
  the
• 15:47
  screenshots
• 15:48
  suggest.
• 15:49
  The
• 15:49
  Excalidraw
• 15:50
  canvas
• 15:50
  at
• 15:50
  its
• 15:50
  center
• 15:51
  is
• 15:51
  worth
• 15:51
  knowing
• 15:51
  on
• 15:52
  its
• 15:52
  own
• 15:52
  terms
• 15:52
  —
• 15:53
  a
• 15:53
  browser
• 15:53
  whiteboard
• 15:54
  that
• 15:54
  saves
• 15:54
  to
• 15:54
  local
• 15:54
  storage,
• 15:55
  with
• 15:55
  a
• 15:55
  standing
• 15:56
  warning
• 15:56
  to
• 15:56
  export
• 15:57
  your
• 15:57
  work,
• 15:57
  since
• 15:57
  that
• 15:58
  storage
• 15:58
  can
• 15:58
  be
• 15:58
  cleared
• 15:59
  without
• 15:59
  notice
• 15:59
  .
• 16:00
  More
• 16:00
  substantial
• 16:01
  is
• 16:01
  cathrynlavery/diagram-design,
• 16:05
  an
• 16:05
  agent
• 16:05
  skill
• 16:06
  built
• 16:06
  to
• 16:06
  stop
• 16:06
  coding
• 16:07
  agents
• 16:07
  from
• 16:07
  emitting
• 16:07
  generic
• 16:08
  rounded-box
• 16:08
  diagrams.
• 16:09
  It
• 16:09
  ships
• 16:10
  28
• 16:10
  visual
• 16:10
  types
• 16:11
  in
• 16:11
  three
• 16:11
  variants
• 16:11
  each,
• 16:12
  outputs
• 16:12
  a
• 16:12
  single
• 16:13
  self-contained
• 16:13
  HTML
• 16:14
  file
• 16:14
  with
• 16:14
  inline
• 16:15
  SVG,
• 16:16
  and
• 16:16
  its
• 16:16
  signature
• 16:16
  feature
• 16:17
  is
• 16:17
  60-second
• 16:17
  brand
• 16:18
  onboarding:
• 16:18
  point
• 16:19
  it
• 16:19
  at
• 16:19
  a
• 16:19
  website,
• 16:20
  and
• 16:20
  it
• 16:20
  extracts
• 16:20
  palette
• 16:21
  and
• 16:21
  fonts,
• 16:21
  maps
• 16:22
  them
• 16:22
  to
• 16:22
  semantic
• 16:22
  tokens,
• 16:23
  runs
• 16:24
  contrast
• 16:24
  checks,
• 16:24
  and
• 16:25
  emits
• 16:25
  a
• 16:25
  "fidelity
• 16:25
  receipt"
• 16:26
  —
• 16:26
  with
• 16:27
  a
• 16:27
  first-run
• 16:27
  gate
• 16:27
  that
• 16:27
  refuses
• 16:28
  to
• 16:28
  silently
• 16:28
  ship
• 16:29
  default-skinned
• 16:29
  output
• 16:30
  .
• 16:31
  Tellingly,
• 16:31
  its
• 16:32
  README
• 16:34
  advises
• 16:35
  when
• 16:35
  not
• 16:35
  to
• 16:35
  diagram
• 16:35
  at
• 16:35
  all,
• 16:36
  calling
• 16:36
  deletion
• 16:37
  the
• 16:37
  highest-quality
• 16:37
  move
• 16:37
  —
• 16:38
  and
• 16:38
  it
• 16:39
  extends
• 16:39
  a
• 16:39
  thread
• 16:39
  this
• 16:39
  desk
• 16:40
  has
• 16:40
  tracked,
• 16:40
  diagram
• 16:41
  generation
• 16:41
  as
• 16:42
  a
• 16:42
  proving
• 16:42
  ground
• 16:42
  for
• 16:42
  agent
• 16:43
  self-verification.
• 16:44
  In
• 16:44
  a
• 16:44
  like
• 16:45
  vein,
• 16:45
  alterisian/curiousity
• 16:49
  is
• 16:49
  a
• 16:49
  local-first
• 16:50
  knowledge
• 16:50
  engine
• 16:50
  that
• 16:50
  ingests
• 16:51
  text,
• 16:51
  extracts
• 16:52
  entities
• 16:52
  and
• 16:53
  facts
• 16:53
  with
• 16:53
  confidence
• 16:53
  scores,
• 16:54
  and
• 16:54
  actively
• 16:55
  generates
• 16:55
  questions
• 16:56
  about
• 16:56
  what
• 16:56
  it
• 16:56
  does
• 16:56
  not
• 16:56
  know,
• 16:57
  visualized
• 16:58
  on
• 16:58
  a
• 16:58
  Rumsfeld
• 16:58
  matrix
• 16:59
  in
• 16:59
  SQLite
• 16:59
  .
• 17:00
  It
• 17:00
  is
• 17:00
  demo-ware,
• 17:01
  but
• 17:01
  its
• 17:01
  rules
• 17:02
  —
• 17:02
  compress
• 17:03
  before
• 17:03
  storing,
• 17:04
  attach
• 17:04
  confidence
• 17:05
  to
• 17:05
  every
• 17:05
  fact,
• 17:06
  let
• 17:06
  curiosity
• 17:06
  drive
• 17:07
  learning
• 17:07
  —
• 17:08
  are
• 17:08
  the
• 17:08
  right
• 17:08
  instincts
• 17:09
  for
• 17:09
  agent
• 17:09
  memory.
• 17:10
  Generative
• 17:10
  media
• 17:11
  closes
• 17:11
  the
• 17:11
  bench.
• 17:12
  A
• 17:12
  detailed
• 17:13
  evaluation
• 17:13
  of
• 17:13
  MiniMax-Music3,
• 17:15
  an
• 17:15
  open-weight
• 17:15
  model
• 17:16
  generating
• 17:16
  full
• 17:17
  five-minute
• 17:17
  songs
• 17:17
  from
• 17:18
  lyrics
• 17:18
  and
• 17:18
  structured
• 17:19
  captions,
• 17:20
  breaks
• 17:20
  down
• 17:20
  its
• 17:20
  hybrid
• 17:21
  architecture
• 17:21
  —
• 17:22
  an
• 17:22
  8B
• 17:23
  global
• 17:23
  LLM
• 17:24
  for
• 17:24
  long-range
• 17:24
  structure,
• 17:25
  a
• 17:25
  0.6B
• 17:26
  local
• 17:27
  LLM
• 17:27
  for
• 17:27
  acoustic
• 17:28
  detail,
• 17:29
  a
• 17:29
  flow-matching
• 17:29
  synthesis
• 17:30
  path
• 17:30
  —
• 17:31
  and
• 17:31
  is
• 17:32
  candid
• 17:32
  about
• 17:32
  the
• 17:32
  constraints:
• 17:33
  CUDA
• 17:34
  required,
• 17:35
  24GB+
• 17:36
  VRAM
• 17:36
  for
• 17:36
  full
• 17:36
  precision,
• 17:37
  non-streaming
• 17:38
  only,
• 17:39
  and
• 17:39
  section
• 17:39
  tags
• 17:40
  that
• 17:40
  "provide
• 17:40
  influence,
• 17:41
  not
• 17:42
  guarantees,"
• 17:43
  so
• 17:43
  requested
• 17:43
  BPM
• 17:44
  or
• 17:44
  key
• 17:45
  may
• 17:45
  drift
• 17:45
  .
• 17:46
  Its
• 17:46
  video-side
• 17:47
  sibling
• 17:47
  gets
• 17:47
  a
• 17:47
  community
• 17:48
  accelerator:
• 17:49
  xmarre's
• 17:50
  ComfyUI-Spectrum-MiniMax-H3
• 17:52
  provides
• 17:52
  training-free
• 17:53
  feature
• 17:53
  forecasting
• 17:54
  for
• 17:54
  ComfyUI's
• 17:55
  native
• 17:55
  MiniMax
• 17:56
  H3
• 17:56
  model,
• 17:57
  predicting
• 17:58
  the
• 17:58
  transformer's
• 17:59
  hidden
• 17:59
  state
• 17:59
  on
• 17:59
  "forecast"
• 18:00
  steps
• 18:00
  via
• 18:01
  low-degree
• 18:01
  Chebyshev
• 18:02
  fits
• 18:02
  —
• 18:03
  a
• 18:03
  typical
• 18:03
  20-step
• 18:04
  run
• 18:04
  resolves
• 18:05
  to
• 18:05
  11
• 18:05
  real
• 18:05
  evaluations
• 18:06
  plus
• 18:06
  9
• 18:07
  forecasts,
• 18:08
  with
• 18:08
  the
• 18:08
  honest
• 18:09
  disclaimer
• 18:09
  that
• 18:09
  forecasted
• 18:10
  steps
• 18:10
  alter
• 18:11
  the
• 18:11
  denoising
• 18:11
  trajectory
• 18:12
  and
• 18:12
  can
• 18:12
  diverge
• 18:13
  from
• 18:13
  native
• 18:13
  output
• 18:14
  even
• 18:14
  at
• 18:14
  identical
• 18:15
  seeds
• 18:15
  .