Latest / AGI Dreams – Open, Uncensored, & Local - AI News Digest / AGI Dreams Podcast – August 25, 2026

Transcript

AGI Dreams Podcast – August 25, 2026 · AGI Dreams – Open, Uncensored, & Local - AI News Digest

• 0:00
  Steve
• 0:00
  Yegge
• 0:00
  has
• 0:00
  spent
• 0:00
  ten
• 0:01
  weeks
• 0:01
  running
• 0:01
  fifty
• 0:01
  to
• 0:01
  sixty
• 0:02
  AI
• 0:02
  agents
• 0:02
  at
• 0:03
  once,
• 0:03
  on
• 0:03
  the
• 0:03
  equivalent
• 0:04
  of
• 0:04
  $122k/month
• 0:06
  in
• 0:06
  token
• 0:06
  spend
• 0:07
  (about
• 0:07
  $5k
• 0:08
  out
• 0:08
  of
• 0:08
  his
• 0:08
  own
• 0:08
  pocket,
• 0:08
  via
• 0:09
  twenty-one
• 0:09
  Claude
• 0:09
  Max
• 0:09
  accounts).
• 0:10
  The
• 0:11
  system,
• 0:11
  Wheelhouse,
• 0:12
  exists
• 0:12
  to
• 0:12
  build
• 0:12
  and
• 0:12
  operate
• 0:13
  Wyvern,
• 0:13
  his
• 0:13
  thirty-year
• 0:14
  video
• 0:14
  game
• 0:14
  project,
• 0:15
  and
• 0:15
  has
• 0:15
  grown
• 0:15
  to
• 0:15
  roughly
• 0:15
  600,000
• 0:16
  lines
• 0:16
  of
• 0:17
  code
• 0:17
  —
• 0:17
  mostly
• 0:18
  bash
• 0:18
  —
• 0:18
  pushing
• 0:19
  500
• 0:19
  commits
• 0:19
  a
• 0:19
  day
• 0:20
  through
• 0:20
  a
• 0:20
  merge
• 0:20
  queue.
• 0:21
  Only
• 0:21
  the
• 0:21
  Fable-tier
• 0:22
  "officer"
• 0:22
  agents
• 0:22
  may
• 0:23
  talk
• 0:23
  to
• 0:23
  humans,
• 0:24
  enforced
• 0:24
  at
• 0:24
  the
• 0:24
  Slack
• 0:24
  and
• 0:25
  email
• 0:25
  boundaries;
• 0:25
  the
• 0:25
  Sonnet
• 0:26
  and
• 0:26
  Opus
• 0:26
  fleets
• 0:26
  stay
• 0:27
  headless.
• 0:28
  That
• 0:28
  fleet
• 0:28
  has
• 0:28
  roughly
• 0:29
  tripled
• 0:29
  from
• 0:29
  the
• 0:29
  eighteen
• 0:30
  agents
• 0:30
  and
• 0:30
  69-billion-tokens-a-month
• 0:31
  footprint
• 0:32
  reported
• 0:32
  two
• 0:32
  weeks
• 0:33
  ago
• 0:33
  —
• 0:33
  worth
• 0:34
  stating
• 0:34
  plainly
• 0:34
  as
• 0:34
  one
• 0:35
  person's
• 0:35
  growing
• 0:35
  experiment,
• 0:36
  not
• 0:36
  an
• 0:36
  industry
• 0:36
  benchmark
• 0:37
  .
• 0:38
  The
• 0:38
  genuinely
• 0:39
  interesting
• 0:39
  finding
• 0:40
  is
• 0:40
  what
• 0:40
  Yegge
• 0:40
  saw
• 0:40
  when
• 0:41
  he
• 0:41
  audited
• 0:41
  the
• 0:41
  jargon
• 0:41
  his
• 0:42
  agents
• 0:42
  kept
• 0:42
  inventing
• 0:42
  —
• 0:43
  fences,
• 0:44
  ratchets,
• 0:44
  governors,
• 0:45
  tripwires,
• 0:46
  gates.
• 0:47
  They
• 0:47
  had
• 0:47
  not
• 0:47
  built
• 0:48
  an
• 0:48
  engineering
• 0:48
  system.
• 0:49
  They
• 0:49
  had
• 0:49
  built
• 0:49
  a
• 0:49
  legal
• 0:50
  system:
• 0:50
  a
• 0:50
  constitution,
• 0:51
  courts,
• 0:52
  offices,
• 0:52
  case
• 0:53
  law,
• 0:53
  registries,
• 0:53
  and
• 0:54
  ledgers,
• 0:54
  some
• 0:55
  450
• 0:55
  legal
• 0:56
  artifacts
• 0:56
  themed
• 0:57
  after
• 0:57
  a
• 0:57
  medieval
• 0:57
  government.
• 0:58
  Rules
• 0:59
  follow
• 0:59
  a
• 0:59
  lifecycle
• 1:00
  that
• 1:00
  tightens
• 1:00
  on
• 1:00
  each
• 1:00
  re-violation
• 1:01
  —
• 1:02
  custom,
• 1:02
  then
• 1:03
  advisory,
• 1:03
  then
• 1:03
  constitutional
• 1:04
  law,
• 1:05
  then
• 1:05
  mechanical
• 1:05
  enforcement
• 1:06
  —
• 1:06
  and
• 1:07
  his
• 1:07
  own
• 1:07
  rulings
• 1:07
  on
• 1:08
  ambiguous
• 1:08
  questions
• 1:08
  became
• 1:09
  precedent.
• 1:10
  His
• 1:10
  thesis
• 1:10
  is
• 1:10
  that
• 1:10
  law
• 1:11
  is
• 1:11
  humanity's
• 1:11
  only
• 1:11
  mature
• 1:12
  technology
• 1:12
  for
• 1:12
  coordinating
• 1:13
  "mortal,
• 1:13
  replaceable
• 1:14
  strangers
• 1:14
  via
• 1:15
  text,"
• 1:15
  which
• 1:15
  is
• 1:16
  exactly
• 1:16
  what
• 1:16
  fifty
• 1:16
  amnesiac,
• 1:17
  interchangeable
• 1:18
  agents
• 1:18
  are.
• 1:19
  A
• 1:19
  "fence"
• 1:19
  is
• 1:20
  any
• 1:20
  mechanism
• 1:20
  that
• 1:20
  politely
• 1:21
  turns
• 1:21
  you
• 1:21
  away
• 1:21
  if
• 1:21
  you
• 1:21
  are
• 1:21
  not
• 1:22
  supposed
• 1:22
  to
• 1:22
  be
• 1:22
  there
• 1:22
  —
• 1:23
  not
• 1:23
  a
• 1:23
  wall
• 1:23
  against
• 1:24
  malice
• 1:24
  but
• 1:24
  the
• 1:24
  software
• 1:25
  equivalent
• 1:25
  of
• 1:25
  IBM's
• 1:25
  Molly
• 1:26
  Guard.
• 1:27
  Superintelligence,
• 1:28
  in
• 1:28
  this
• 1:28
  view,
• 1:28
  needs
• 1:28
  to
• 1:29
  be
• 1:29
  told
• 1:29
  its
• 1:29
  role,
• 1:29
  not
• 1:30
  sandboxed.
• 1:31
  That
• 1:31
  lands
• 1:31
  squarely
• 1:32
  in
• 1:32
  the
• 1:32
  containment
• 1:32
  debate
• 1:33
  this
• 1:33
  desk
• 1:33
  has
• 1:34
  tracked
• 1:34
  since
• 1:34
  a
• 1:34
  document-intake
• 1:35
  agent
• 1:35
  deleted
• 1:36
  200
• 1:36
  production
• 1:37
  records
• 1:37
  by
• 1:37
  reinterpreting
• 1:38
  its
• 1:38
  own
• 1:38
  prompt-based
• 1:39
  guardrails
• 1:40
  within
• 1:40
  three
• 1:40
  days.
• 1:41
  The
• 1:41
  hard-sandbox
• 1:42
  camp
• 1:42
  answers
• 1:43
  with
• 1:43
  disposable
• 1:43
  micro-VMs
• 1:44
  and
• 1:44
  seccomp
• 1:45
  whitelists;
• 1:46
  Yegge
• 1:46
  names
• 1:46
  a
• 1:46
  third
• 1:47
  position
• 1:47
  —
• 1:48
  govern
• 1:48
  by
• 1:48
  role
• 1:49
  and
• 1:49
  precedent,
• 1:49
  not
• 1:50
  by
• 1:50
  cage
• 1:50
  —
• 1:51
  while
• 1:51
  conceding
• 1:52
  that
• 1:52
  capturing
• 1:52
  an
• 1:52
  organization's
• 1:53
  tribal
• 1:53
  knowledge
• 1:54
  this
• 1:54
  way
• 1:54
  takes
• 1:54
  months
• 1:55
  and
• 1:55
  cannot
• 1:55
  be
• 1:55
  transplanted
• 1:56
  between
• 1:56
  companies.
• 1:57
  Lionagi,
• 1:59
  a
• 1:59
  governed
• 1:59
  multi-agent
• 2:00
  framework,
• 2:00
  keeps
• 2:01
  conversation
• 2:01
  state
• 2:02
  as
• 2:02
  typed,
• 2:02
  inspectable
• 2:03
  Python
• 2:03
  objects,
• 2:04
  treats
• 2:05
  Claude
• 2:05
  Code
• 2:05
  and
• 2:05
  Codex
• 2:06
  as
• 2:06
  first-class
• 2:07
  endpoints
• 2:07
  alongside
• 2:08
  API
• 2:08
  models,
• 2:09
  and
• 2:09
  ships
• 2:09
  per-tool
• 2:09
  permission
• 2:10
  policies,
• 2:11
  guard
• 2:11
  hooks,
• 2:11
  and
• 2:11
  git-worktree
• 2:12
  sandboxing
• 2:13
  for
• 2:13
  speculative
• 2:13
  edits
• 2:13
  .
• 2:14
  Its
• 2:15
  Lion
• 2:15
  Studio
• 2:15
  companion
• 2:16
  renders
• 2:16
  agent
• 2:16
  runs
• 2:17
  as
• 2:17
  a
• 2:17
  live
• 2:17
  DAG
• 2:17
  with
• 2:18
  per-node
• 2:18
  conversations,
• 2:19
  typed
• 2:19
  escalation
• 2:20
  signals,
• 2:21
  and
• 2:21
  an
• 2:21
  operator
• 2:21
  panel
• 2:22
  that
• 2:22
  spawns
• 2:22
  sub-agents
• 2:23
  —
• 2:24
  observability
• 2:24
  for
• 2:24
  a
• 2:25
  workflow
• 2:25
  that
• 2:25
  otherwise
• 2:26
  vanishes
• 2:26
  when
• 2:26
  the
• 2:26
  terminal
• 2:27
  closes
• 2:27
  .
• 2:29
  The
• 2:30
  most
• 2:30
  original
• 2:30
  security
• 2:31
  argument
• 2:31
  today
• 2:32
  comes
• 2:32
  from
• 2:32
  Boyd
• 2:32
  Kane,
• 2:33
  who
• 2:33
  points
• 2:33
  out
• 2:33
  that
• 2:33
  the
• 2:33
  GPU
• 2:34
  host
• 2:34
  computing
• 2:34
  an
• 2:35
  LLM's
• 2:35
  tokens
• 2:35
  is
• 2:35
  itself
• 2:36
  a
• 2:36
  high-value
• 2:36
  target
• 2:37
  —
• 2:37
  it
• 2:38
  holds
• 2:38
  the
• 2:38
  weights
• 2:38
  and
• 2:38
  usually
• 2:39
  has
• 2:39
  privileged
• 2:39
  access
• 2:40
  to
• 2:40
  the
• 2:40
  rest
• 2:40
  of
• 2:40
  the
• 2:40
  datacenter.
• 2:41
  Because
• 2:41
  the
• 2:41
  model
• 2:41
  controls
• 2:42
  the
• 2:42
  tokens
• 2:42
  it
• 2:42
  emits,
• 2:43
  a
• 2:43
  malicious
• 2:44
  model
• 2:44
  could
• 2:44
  produce
• 2:44
  a
• 2:44
  sequence
• 2:45
  "whose
• 2:45
  semantic
• 2:45
  meaning
• 2:46
  is
• 2:46
  irrelevant"
• 2:47
  but
• 2:47
  which
• 2:47
  exploits
• 2:48
  a
• 2:48
  bug
• 2:48
  in
• 2:48
  the
• 2:48
  inference
• 2:49
  engine
• 2:49
  that
• 2:49
  loads
• 2:49
  weights,
• 2:50
  generates
• 2:51
  tokens,
• 2:51
  and
• 2:51
  parses
• 2:52
  them
• 2:52
  into
• 2:52
  responses.
• 2:53
  This
• 2:53
  is
• 2:53
  not
• 2:54
  hypothetical:
• 2:55
  vLLM
• 2:55
  shipped
• 2:56
  an
• 2:56
  arbitrary-code-execution
• 2:57
  bug
• 2:57
  in
• 2:57
  its
• 2:57
  XML
• 2:58
  tool
• 2:58
  parser
• 2:58
  for
• 2:58
  Qwen3
• 2:59
  Coder
• 2:59
  that
• 3:00
  passed
• 3:00
  nearly
• 3:00
  every
• 3:00
  tool-call
• 3:01
  argument
• 3:01
  to
• 3:01
  eval()
• 3:01
  —
• 3:02
  and
• 3:02
  even
• 3:03
  after
• 3:03
  Gemini
• 3:03
  automatically
• 3:04
  reviewed
• 3:04
  the
• 3:04
  pull
• 3:04
  request
• 3:05
  and
• 3:05
  flagged
• 3:05
  it
• 3:05
  as
• 3:05
  critical,
• 3:06
  a
• 3:06
  maintainer
• 3:06
  force-merged
• 3:07
  it
• 3:07
  anyway
• 3:07
  .
• 3:08
  Kane's
• 3:08
  estimate
• 3:09
  of
• 3:09
  exploitation
• 3:09
  likelihood
• 3:10
  is
• 3:10
  honest
• 3:10
  —
• 3:11
  "somewhat
• 3:11
  likely?
• 3:12
  I'm
• 3:12
  unsure"
• 3:12
  —
• 3:14
  but
• 3:14
  the
• 3:14
  reproducibility
• 3:15
  angle
• 3:15
  is
• 3:15
  worth
• 3:16
  losing
• 3:16
  sleep
• 3:16
  over.
• 3:17
  An
• 3:18
  exploit
• 3:18
  token
• 3:18
  sequence,
• 3:18
  once
• 3:19
  discovered,
• 3:19
  can
• 3:19
  be
• 3:19
  stored
• 3:20
  in
• 3:20
  a
• 3:20
  filename
• 3:21
  or
• 3:21
  URL
• 3:22
  and
• 3:22
  act
• 3:22
  as
• 3:23
  persistent
• 3:23
  prompt
• 3:23
  injection,
• 3:25
  triggering
• 3:25
  code
• 3:26
  execution
• 3:26
  on
• 3:26
  the
• 3:26
  GPU
• 3:27
  host
• 3:27
  "merely
• 3:27
  by
• 3:28
  listing
• 3:28
  a
• 3:28
  directory
• 3:28
  or
• 3:28
  reading
• 3:29
  a
• 3:29
  file."
• 3:30
  Inference
• 3:30
  engines
• 3:30
  are
• 3:31
  the
• 3:31
  wrong
• 3:31
  kind
• 3:31
  of
• 3:31
  software
• 3:32
  for
• 3:32
  this:
• 3:33
  vLLM
• 3:33
  supports
• 3:34
  over
• 3:34
  200
• 3:34
  model
• 3:35
  architectures
• 3:35
  and
• 3:35
  ships
• 3:35
  roughly
• 3:36
  35
• 3:36
  Jinja
• 3:36
  chat
• 3:37
  templates,
• 3:38
  all
• 3:38
  under
• 3:38
  constant
• 3:38
  performance
• 3:39
  pressure.
• 3:40
  His
• 3:40
  defenses
• 3:40
  are
• 3:40
  structural
• 3:41
  —
• 3:42
  separate
• 3:42
  the
• 3:42
  GPU
• 3:42
  host
• 3:43
  from
• 3:43
  the
• 3:43
  token
• 3:43
  parser
• 3:43
  so
• 3:44
  a
• 3:44
  compromised
• 3:44
  parser
• 3:44
  stays
• 3:45
  on
• 3:45
  the
• 3:45
  CPU
• 3:45
  box,
• 3:46
  and
• 3:46
  treat
• 3:46
  everything
• 3:46
  a
• 3:47
  GPU
• 3:47
  host
• 3:47
  emits
• 3:48
  as
• 3:48
  untrusted.
• 3:49
  It
• 3:49
  is
• 3:49
  the
• 3:49
  first
• 3:50
  time
• 3:50
  this
• 3:50
  desk
• 3:51
  has
• 3:51
  seen
• 3:51
  the
• 3:51
  serving
• 3:52
  runtime
• 3:52
  itself
• 3:52
  framed
• 3:53
  as
• 3:53
  the
• 3:53
  escape
• 3:53
  vector,
• 3:54
  not
• 3:54
  the
• 3:54
  surrounding
• 3:55
  infrastructure.
• 3:56
  The
• 3:57
  tooling
• 3:57
  for
• 3:57
  pointing
• 3:57
  LLMs
• 3:58
  at
• 3:58
  other
• 3:58
  people's
• 3:58
  software
• 3:59
  keeps
• 3:59
  commoditizing,
• 4:00
  meanwhile.
• 4:02
  IOActive's
• 4:02
  Fernando
• 4:03
  Arnaboldi
• 4:03
  released
• 4:03
  ai-scanner,
• 4:04
  a
• 4:04
  Burp
• 4:04
  Suite
• 4:05
  extension
• 4:05
  built
• 4:05
  on
• 4:05
  a
• 4:05
  strict
• 4:06
  division
• 4:06
  of
• 4:06
  labor:
• 4:07
  the
• 4:07
  LLM
• 4:07
  only
• 4:08
  handles
• 4:08
  discovery
• 4:08
  and
• 4:09
  triage
• 4:09
  —
• 4:10
  routes,
• 4:10
  parameters,
• 4:11
  multi-step
• 4:12
  attack
• 4:12
  flows
• 4:12
  —
• 4:13
  while
• 4:14
  deterministic
• 4:14
  oracles
• 4:14
  confirm
• 4:15
  every
• 4:15
  finding.
• 4:16
  An
• 4:16
  exploit
• 4:17
  must
• 4:17
  actually
• 4:17
  fire
• 4:18
  (a
• 4:18
  timing
• 4:18
  delay,
• 4:19
  an
• 4:19
  out-of-band
• 4:19
  callback,
• 4:20
  a
• 4:20
  decoded
• 4:21
  privileged
• 4:21
  token),
• 4:21
  so
• 4:21
  findings
• 4:22
  are
• 4:22
  "zero-false-positive
• 4:23
  by
• 4:23
  construction."
• 4:25
  On
• 4:25
  OWASP
• 4:25
  Juice
• 4:25
  Shop's
• 4:26
  own
• 4:26
  scoreboard,
• 4:27
  coverage
• 4:27
  went
• 4:27
  from
• 4:27
  0
• 4:28
  to
• 4:28
  19
• 4:28
  of
• 4:28
  45
• 4:29
  challenges
• 4:29
  once
• 4:30
  the
• 4:30
  extension
• 4:30
  reached
• 4:31
  the
• 4:31
  authenticated
• 4:31
  surface
• 4:31
  bare
• 4:32
  Burp
• 4:32
  cannot
• 4:32
  touch
• 4:32
  .
• 4:34
  That
• 4:34
  role-inversion
• 4:34
  —
• 4:35
  model
• 4:35
  proposes,
• 4:36
  oracle
• 4:36
  disposes
• 4:37
  —
• 4:37
  is
• 4:38
  the
• 4:38
  freshest
• 4:38
  idea
• 4:38
  in
• 4:39
  a
• 4:39
  crowded
• 4:39
  genre
• 4:39
  where
• 4:39
  most
• 4:40
  tools
• 4:40
  lean
• 4:40
  on
• 4:40
  the
• 4:40
  model
• 4:41
  to
• 4:41
  validate
• 4:41
  itself.
• 4:42
  dhunter
• 4:43
  is
• 4:43
  the
• 4:43
  conventional
• 4:43
  entry:
• 4:44
  an
• 4:44
  LLM-driven
• 4:45
  "blackboard"
• 4:46
  engine
• 4:46
  where
• 4:46
  a
• 4:46
  planner
• 4:46
  proposes
• 4:47
  attack
• 4:47
  intents
• 4:48
  and
• 4:48
  parallel
• 4:48
  workers
• 4:49
  write
• 4:49
  verified
• 4:49
  facts
• 4:50
  back
• 4:50
  to
• 4:50
  SQLite
• 4:51
  via
• 4:51
  pure
• 4:51
  stigmergy,
• 4:52
  with
• 4:52
  an
• 4:53
  acceptance
• 4:53
  gate
• 4:53
  that
• 4:53
  replays
• 4:54
  each
• 4:54
  proof-of-concept
• 4:55
  twice
• 4:55
  and
• 4:55
  rejects
• 4:55
  inconsistent
• 4:56
  results
• 4:56
  as
• 4:56
  time-varying
• 4:57
  noise
• 4:57
  .
• 4:58
  The
• 4:58
  autonomous
• 4:59
  pentester
• 4:59
  is
• 4:59
  no
• 4:59
  longer
• 5:00
  news;
• 5:01
  the
• 5:01
  MCP
• 5:01
  extension
• 5:02
  menu
• 5:02
  and
• 5:02
  false-positive
• 5:03
  story
• 5:03
  it
• 5:03
  now
• 5:03
  ships
• 5:04
  with
• 5:04
  are.
• 5:07
  A
• 5:07
  month
• 5:07
  ago,
• 5:08
  Anthropic's
• 5:08
  Claude
• 5:09
  results
• 5:09
  against
• 5:09
  the
• 5:09
  HAWK
• 5:10
  signature
• 5:10
  scheme
• 5:10
  and
• 5:11
  reduced-round
• 5:11
  AES
• 5:12
  got
• 5:12
  a
• 5:12
  "sort
• 5:12
  of"
• 5:13
  hedge
• 5:13
  on
• 5:13
  this
• 5:13
  desk
• 5:14
  —
• 5:14
  impressive
• 5:15
  recombination,
• 5:16
  nothing
• 5:16
  practical.
• 5:18
  Lukasz
• 5:18
  Olejnik
• 5:19
  and
• 5:19
  Bartosz
• 5:19
  Naskrecki
• 5:20
  have
• 5:20
  now
• 5:20
  escalated
• 5:21
  that
• 5:21
  story
• 5:21
  hard.
• 5:22
  Their
• 5:22
  paper
• 5:22
  describes
• 5:23
  an
• 5:23
  autonomous
• 5:23
  workflow
• 5:24
  they
• 5:24
  call
• 5:25
  "grinding":
• 5:26
  an
• 5:26
  LLM
• 5:26
  reads
• 5:26
  a
• 5:26
  paper,
• 5:27
  generates
• 5:27
  high-volume
• 5:28
  low-precision
• 5:29
  attack
• 5:29
  hypotheses,
• 5:30
  and
• 5:30
  writes
• 5:30
  checking
• 5:31
  code,
• 5:31
  but
• 5:31
  with
• 5:31
  a
• 5:31
  discipline
• 5:32
  that
• 5:32
  makes
• 5:32
  the
• 5:32
  results
• 5:32
  credible
• 5:33
  —
• 5:33
  "no
• 5:34
  proposal
• 5:34
  counts
• 5:34
  as
• 5:34
  evidence
• 5:35
  until
• 5:35
  it
• 5:35
  is
• 5:35
  reduced
• 5:35
  to
• 5:36
  an
• 5:36
  exact
• 5:36
  statement
• 5:36
  a
• 5:36
  short
• 5:36
  deterministic
• 5:37
  program
• 5:37
  can
• 5:37
  check."
• 5:38
  Generator
• 5:39
  confidence
• 5:39
  is
• 5:39
  formally
• 5:39
  banned
• 5:40
  under
• 5:40
  a
• 5:40
  "Confident
• 5:41
  Nonsense"
• 5:41
  axiom,
• 5:42
  and
• 5:42
  a
• 5:42
  human
• 5:42
  auditor
• 5:42
  makes
• 5:43
  the
• 5:43
  final
• 5:43
  call
• 5:43
  .
• 5:44
  The
• 5:44
  body
• 5:44
  count
• 5:45
  is
• 5:45
  the
• 5:45
  headline.
• 5:46
  Eight
• 5:47
  published
• 5:47
  constructions
• 5:47
  break
• 5:48
  at
• 5:48
  their
• 5:48
  authors'
• 5:48
  own
• 5:49
  parameters.
• 5:50
  A
• 5:50
  Ring-LWR
• 5:51
  commitment
• 5:51
  from
• 5:51
  AsiaCCS
• 5:52
  2025
• 5:53
  accepts
• 5:53
  a
• 5:53
  zero
• 5:53
  multiplier,
• 5:54
  so
• 5:54
  binding
• 5:54
  fails
• 5:55
  with
• 5:55
  probability
• 5:55
  one.
• 5:56
  Spinel's
• 5:56
  signature
• 5:57
  hash
• 5:57
  collides
• 5:57
  deterministically
• 5:58
  because
• 5:59
  suppressing
• 5:59
  leading
• 5:59
  zeros
• 6:00
  in
• 6:00
  a
• 6:00
  base-3
• 6:00
  byte
• 6:00
  encoding
• 6:01
  destroys
• 6:01
  unique
• 6:01
  decodability,
• 6:02
  handing
• 6:03
  244
• 6:04
  of
• 6:04
  255
• 6:05
  nonzero
• 6:05
  bytes
• 6:05
  an
• 6:05
  immediate
• 6:06
  second
• 6:06
  preimage.
• 6:07
  A
• 6:07
  middle-product
• 6:08
  PKE
• 6:08
  from
• 6:08
  CRYPTO
• 6:10
  2017
• 6:11
  leaks
• 6:11
  all
• 6:12
  2,313
• 6:13
  binary
• 6:13
  masks
• 6:14
  from
• 6:14
  a
• 6:14
  single
• 6:14
  ciphertext's
• 6:15
  boundary
• 6:15
  coefficients,
• 6:16
  and
• 6:16
  a
• 6:16
  lattice
• 6:17
  e-voting
• 6:17
  protocol
• 6:17
  loses
• 6:18
  receipt-freeness
• 6:18
  with
• 6:18
  coercer
• 6:19
  advantage
• 6:19
  near
• 6:19
  one.
• 6:20
  Three
• 6:21
  other
• 6:21
  targets
• 6:21
  yielded
• 6:22
  nothing
• 6:22
  and
• 6:22
  are
• 6:22
  reported
• 6:22
  honestly
• 6:23
  as
• 6:23
  coverage
• 6:23
  gaps
• 6:23
  —
• 6:24
  the
• 6:24
  same
• 6:25
  discipline
• 6:25
  that
• 6:25
  makes
• 6:25
  the
• 6:25
  eight
• 6:26
  breaks
• 6:26
  trustworthy.
• 6:27
  The
• 6:27
  house
• 6:28
  frame
• 6:28
  holds
• 6:28
  —
• 6:29
  AI
• 6:30
  as
• 6:30
  exhaustive-recombination
• 6:31
  engine,
• 6:32
  human
• 6:32
  verification
• 6:33
  as
• 6:33
  the
• 6:33
  scarce
• 6:33
  resource
• 6:34
  —
• 6:35
  except
• 6:35
  now
• 6:35
  the
• 6:35
  verifier
• 6:36
  is
• 6:36
  a
• 6:36
  second
• 6:37
  published
• 6:37
  mathematician,
• 6:38
  not
• 6:38
  a
• 6:38
  lab
• 6:38
  press
• 6:38
  release.
• 6:40
  The
• 6:40
  companion
• 6:41
  ePrint
• 6:41
  drives
• 6:41
  the
• 6:41
  point
• 6:42
  into
• 6:42
  deployed-adjacent
• 6:42
  territory.
• 6:44
  Olejnik
• 6:44
  and
• 6:44
  Naskrecki
• 6:45
  show
• 6:45
  that
• 6:45
  the
• 6:45
  CRT-based
• 6:46
  fully
• 6:46
  homomorphic
• 6:47
  encryption
• 6:47
  scheme
• 6:48
  of
• 6:48
  Pradhan,
• 6:48
  Dutta,
• 6:49
  Jangir,
• 6:49
  and
• 6:50
  Das
• 6:50
  is
• 6:50
  insecure
• 6:51
  across
• 6:51
  its
• 6:51
  assumed
• 6:51
  error
• 6:52
  range:
• 6:53
  "the
• 6:53
  secret
• 6:53
  key
• 6:53
  follows
• 6:54
  from
• 6:54
  the
• 6:54
  public
• 6:54
  key
• 6:55
  by
• 6:55
  a
• 6:55
  single
• 6:55
  ring
• 6:55
  inversion
• 6:56
  whenever
• 6:56
  the
• 6:56
  public
• 6:57
  multiplier
• 6:57
  is
• 6:57
  a
• 6:57
  unit,"
• 6:58
  and
• 6:59
  any
• 6:59
  ciphertext's
• 6:59
  plaintext
• 7:00
  is
• 7:00
  recoverable
• 7:00
  without
• 7:01
  the
• 7:01
  key,
• 7:02
  for
• 7:02
  the
• 7:02
  maximum
• 7:02
  chosen-plaintext
• 7:03
  advantage
• 7:03
  of
• 7:03
  one
• 7:04
  half.
• 7:05
  The
• 7:05
  flaw
• 7:05
  is
• 7:05
  a
• 7:05
  cross-modulus
• 7:06
  mistake
• 7:06
  that
• 7:06
  collapses
• 7:07
  a
• 7:07
  whole
• 7:07
  class
• 7:07
  of
• 7:08
  confined
• 7:08
  error
• 7:08
  distributions
• 7:09
  to
• 7:09
  zero
• 7:09
  under
• 7:10
  the
• 7:10
  encoder
• 7:10
  —
• 7:11
  and
• 7:11
  they
• 7:11
  exhibit
• 7:12
  a
• 7:12
  concrete
• 7:12
  instantiation
• 7:13
  that
• 7:13
  is
• 7:13
  "simultaneously
• 7:14
  correct
• 7:15
  and
• 7:15
  insecure"
• 7:15
  .
• 7:16
  For
• 7:16
  the
• 7:16
  post-quantum
• 7:17
  migration,
• 7:18
  the
• 7:18
  lesson
• 7:19
  is
• 7:19
  not
• 7:19
  that
• 7:19
  lattices
• 7:19
  are
• 7:20
  broken
• 7:20
  —
• 7:21
  it
• 7:21
  is
• 7:21
  that
• 7:21
  review
• 7:21
  bandwidth
• 7:22
  for
• 7:22
  new
• 7:22
  schemes
• 7:23
  just
• 7:23
  got
• 7:23
  a
• 7:23
  force
• 7:24
  multiplier
• 7:24
  that
• 7:24
  serves
• 7:25
  attackers
• 7:25
  and
• 7:25
  defenders
• 7:26
  alike.
• 7:29
  Google's
• 7:29
  Bug
• 7:29
  Hunters
• 7:30
  team
• 7:30
  ran
• 7:30
  the
• 7:30
  experiment
• 7:31
  everyone
• 7:31
  has
• 7:31
  been
• 7:32
  hand-waving
• 7:32
  about:
• 7:33
  using
• 7:33
  Gemini
• 7:34
  to
• 7:34
  rewrite
• 7:34
  a
• 7:34
  C
• 7:34
  library
• 7:35
  into
• 7:35
  memory-safe
• 7:35
  Rust
• 7:36
  and
• 7:36
  deploy
• 7:36
  it
• 7:36
  in
• 7:36
  production.
• 7:38
  The
• 7:38
  target
• 7:38
  was
• 7:38
  giflib,
• 7:39
  Eric
• 7:39
  S.
• 7:40
  Raymond's
• 7:40
  roughly
• 7:41
  3,000-line
• 7:42
  GIF
• 7:42
  parser,
• 7:43
  which
• 7:43
  often
• 7:44
  processes
• 7:44
  untrusted
• 7:45
  data
• 7:45
  in
• 7:45
  non-sandboxed
• 7:46
  environments
• 7:46
  —
• 7:47
  and
• 7:47
  since
• 7:47
  memory-safety
• 7:48
  bugs
• 7:48
  are
• 7:48
  about
• 7:48
  70%
• 7:49
  of
• 7:49
  C/C++
• 7:50
  vulnerabilities,
• 7:51
  eliminating
• 7:52
  the
• 7:52
  class
• 7:52
  is
• 7:52
  a
• 7:52
  structural
• 7:53
  win.
• 7:54
  The
• 7:54
  workflow:
• 7:55
  a
• 7:55
  one-shot
• 7:55
  translation,
• 7:56
  iterative
• 7:57
  fixing
• 7:57
  of
• 7:58
  the
• 7:58
  C-compatible
• 7:58
  FFI
• 7:59
  wrapper,
• 7:59
  and
• 8:00
  an
• 8:00
  autonomous
• 8:00
  loop
• 8:01
  feeding
• 8:01
  differential-testing
• 8:02
  failures
• 8:02
  back
• 8:02
  to
• 8:02
  the
• 8:02
  model,
• 8:03
  with
• 8:03
  every
• 8:03
  unsafe
• 8:04
  block
• 8:04
  signed
• 8:04
  off
• 8:04
  by
• 8:04
  human
• 8:05
  experts
• 8:05
  .
• 8:06
  What
• 8:06
  separates
• 8:07
  this
• 8:07
  from
• 8:07
  the
• 8:07
  usual
• 8:07
  "we
• 8:08
  rewrote
• 8:08
  it
• 8:08
  in
• 8:08
  Rust"
• 8:08
  marketing
• 8:09
  is
• 8:09
  the
• 8:09
  validation
• 8:10
  budget.
• 8:11
  The
• 8:11
  fork
• 8:12
  was
• 8:12
  checked
• 8:12
  against
• 8:12
  more
• 8:13
  than
• 8:13
  30
• 8:13
  million
• 8:13
  real
• 8:14
  GIFs
• 8:14
  for
• 8:14
  output-identical
• 8:15
  behavior,
• 8:16
  then
• 8:16
  run
• 8:16
  through
• 8:16
  a
• 8:16
  differential
• 8:17
  fuzzer
• 8:17
  for
• 8:17
  over
• 8:17
  six
• 8:18
  days
• 8:18
  and
• 8:18
  200
• 8:18
  million
• 8:19
  iterations
• 8:19
  with
• 8:19
  no
• 8:19
  logic
• 8:20
  deviations.
• 8:21
  That
• 8:22
  pipeline
• 8:22
  earned
• 8:22
  its
• 8:22
  keep
• 8:22
  twice:
• 8:23
  it
• 8:23
  caught
• 8:24
  an
• 8:24
  LZW-decoder
• 8:24
  edge
• 8:25
  case
• 8:25
  and
• 8:26
  surfaced
• 8:26
  a
• 8:26
  pre-existing
• 8:27
  out-of-bounds
• 8:27
  write
• 8:27
  a
• 8:27
  Google-internal
• 8:28
  legacy
• 8:28
  patch
• 8:29
  had
• 8:29
  introduced
• 8:29
  into
• 8:29
  the
• 8:29
  original
• 8:30
  C.
• 8:30
  The
• 8:30
  vindication
• 8:31
  arrived
• 8:31
  unplanned
• 8:32
  —
• 8:32
  shortly
• 8:33
  after
• 8:33
  rollout,
• 8:34
  a
• 8:34
  new
• 8:34
  heap-write
• 8:34
  vulnerability
• 8:35
  (CVE-2026-26740)
• 8:39
  was
• 8:39
  reported
• 8:39
  in
• 8:39
  the
• 8:39
  C
• 8:40
  giflib,
• 8:40
  and
• 8:40
  Google's
• 8:40
  already-migrated
• 8:41
  systems
• 8:42
  were
• 8:42
  structurally
• 8:42
  immune,
• 8:43
  having
• 8:43
  neutralized
• 8:44
  a
• 8:44
  zero-day
• 8:44
  before
• 8:45
  disclosure.
• 8:46
  The
• 8:46
  rewrite
• 8:46
  was
• 8:46
  performance-neutral,
• 8:47
  and
• 8:48
  retiring
• 8:48
  the
• 8:48
  sandboxing
• 8:49
  the
• 8:49
  C
• 8:49
  library
• 8:49
  had
• 8:49
  required
• 8:50
  actually
• 8:50
  cut
• 8:50
  tail
• 8:50
  latency.
• 8:51
  The
• 8:52
  right
• 8:52
  skepticism
• 8:53
  is
• 8:53
  the
• 8:53
  one
• 8:53
  this
• 8:53
  desk
• 8:54
  aimed
• 8:54
  at
• 8:54
  earlier
• 8:54
  Zig-to-Rust
• 8:55
  narratives:
• 8:56
  Rust
• 8:56
  shifts
• 8:57
  bugs
• 8:57
  toward
• 8:57
  logic
• 8:58
  errors
• 8:58
  rather
• 8:58
  than
• 8:58
  abolishing
• 8:59
  them.
• 9:00
  Google's
• 9:00
  answer
• 9:00
  —
• 9:01
  30
• 9:01
  million
• 9:01
  regression
• 9:02
  inputs
• 9:02
  and
• 9:02
  a
• 9:02
  differential
• 9:03
  fuzzer
• 9:03
  —
• 9:04
  separates
• 9:04
  case
• 9:05
  study
• 9:05
  from
• 9:05
  slogan.
• 9:08
  Apple
• 9:08
  is
• 9:08
  now
• 9:08
  pushing
• 9:09
  state-spyware
• 9:09
  warnings
• 9:10
  to
• 9:10
  users
• 9:10
  in
• 9:10
  110
• 9:11
  countries
• 9:12
  through
• 9:12
  email,
• 9:13
  system
• 9:13
  notification,
• 9:14
  and
• 9:14
  an
• 9:14
  in-Settings
• 9:15
  alert
• 9:15
  that
• 9:15
  "to
• 9:15
  date"
• 9:15
  cannot
• 9:16
  be
• 9:16
  spoofed,
• 9:17
  recommending
• 9:17
  Lockdown
• 9:17
  Mode
• 9:18
  for
• 9:18
  likely
• 9:18
  Pegasus-class
• 9:19
  targets.
• 9:20
  The
• 9:20
  most
• 9:20
  on-brand
• 9:20
  item
• 9:21
  for
• 9:21
  AI
• 9:21
  readers:
• 9:22
  Varonis
• 9:23
  coaxed
• 9:23
  Microsoft
• 9:23
  Copilot
• 9:24
  into
• 9:24
  disclosing
• 9:25
  an
• 9:25
  undocumented
• 9:26
  autorun=1
• 9:27
  URL
• 9:27
  parameter
• 9:28
  that
• 9:28
  executed
• 9:28
  prompts
• 9:29
  without
• 9:29
  user
• 9:29
  confirmation,
• 9:30
  enabling
• 9:31
  inbox
• 9:31
  exfiltration
• 9:32
  —
• 9:33
  and
• 9:33
  when
• 9:33
  Microsoft
• 9:33
  removed
• 9:34
  it,
• 9:34
  several
• 9:34
  AI
• 9:35
  browser
• 9:35
  extensions
• 9:35
  broke,
• 9:36
  implying
• 9:36
  it
• 9:37
  powered
• 9:37
  behind-the-scenes
• 9:38
  automation
• 9:38
  .
• 9:39
  The
• 9:39
  Copilot
• 9:39
  autorun
• 9:40
  trick
• 9:40
  is
• 9:40
  a
• 9:40
  direct
• 9:40
  sequel
• 9:41
  to
• 9:41
  last
• 9:41
  year's
• 9:41
  Copilot
• 9:42
  YOLO-mode
• 9:42
  compromise,
• 9:43
  the
• 9:43
  same
• 9:44
  class
• 9:44
  of
• 9:44
  flaw
• 9:44
  where
• 9:44
  an
• 9:44
  agent
• 9:45
  modifies
• 9:45
  its
• 9:45
  own
• 9:45
  execution
• 9:46
  environment.
• 9:47
  The
• 9:47
  rest
• 9:48
  rewards
• 9:48
  the
• 9:48
  paranoid:
• 9:49
  roughly
• 9:49
  50,000
• 9:50
  Stripe
• 9:50
  API
• 9:50
  keys
• 9:51
  —
• 9:52
  each
• 9:52
  effectively
• 9:52
  an
• 9:52
  administrator
• 9:53
  credential
• 9:53
  —
• 9:54
  are
• 9:54
  circulating
• 9:55
  on
• 9:55
  trading
• 9:55
  forums
• 9:55
  after
• 9:56
  harvesting
• 9:56
  from
• 9:56
  GitHub
• 9:57
  commits
• 9:57
  and
• 9:57
  infostealers,
• 9:58
  hitting
• 9:58
  some
• 9:58
  650
• 9:59
  companies
• 9:59
  though
• 10:00
  Stripe
• 10:00
  itself
• 10:00
  was
• 10:00
  never
• 10:01
  breached.
• 10:02
  Comcast
• 10:02
  is
• 10:02
  switching
• 10:03
  on
• 10:03
  opt-in
• 10:03
  WiFi
• 10:03
  motion
• 10:04
  sensing
• 10:04
  that
• 10:04
  reads
• 10:05
  people
• 10:05
  and
• 10:05
  pets
• 10:05
  as
• 10:05
  "various
• 10:06
  sized
• 10:06
  bags
• 10:07
  of
• 10:07
  radio-blocking
• 10:07
  water,"
• 10:08
  the
• 10:08
  commercial
• 10:09
  normalization
• 10:09
  of
• 10:09
  the
• 10:10
  802.11bf
• 10:11
  capability
• 10:12
  that
• 10:12
  defenses
• 10:12
  like
• 10:13
  WiFi-Veil
• 10:13
  were
• 10:13
  built
• 10:14
  to
• 10:14
  blunt.
• 10:15
  And
• 10:15
  a
• 10:15
  fresh
• 10:15
  Windows
• 10:15
  Defender
• 10:16
  bypass,
• 10:17
  "ShieldBreak,"
• 10:18
  uses
• 10:18
  Defender
• 10:18
  itself
• 10:19
  to
• 10:19
  escalate
• 10:19
  to
• 10:19
  admin,
• 10:20
  its
• 10:20
  only
• 10:21
  mitigation
• 10:21
  being
• 10:21
  to
• 10:21
  disable
• 10:22
  Defender
• 10:22
  —
• 10:23
  "which
• 10:23
  probably
• 10:23
  isn't
• 10:24
  a
• 10:24
  great
• 10:24
  plan."
• 10:25
  If
• 10:25
  that
• 10:25
  reads
• 10:26
  as
• 10:26
  surveillance-grade
• 10:26
  capability
• 10:27
  leaking
• 10:27
  downhill,
• 10:28
  God's
• 10:28
  Eye
• 10:29
  View
• 10:29
  is
• 10:29
  the
• 10:29
  same
• 10:29
  trend
• 10:30
  rendered
• 10:30
  as
• 10:30
  a
• 10:30
  browser
• 10:30
  toy.
• 10:31
  Formerly
• 10:32
  WorldView
• 10:32
  and
• 10:33
  now
• 10:33
  MIT-licensed,
• 10:34
  it
• 10:34
  plots
• 10:34
  real
• 10:35
  open-source
• 10:35
  intelligence
• 10:36
  —
• 10:36
  flight
• 10:37
  transponders,
• 10:37
  ship
• 10:38
  beacons,
• 10:38
  ~840
• 10:40
  satellites
• 10:40
  via
• 10:40
  CelesTrak,
• 10:41
  USGS
• 10:42
  earthquakes,
• 10:43
  NASA
• 10:43
  fire
• 10:43
  data,
• 10:44
  roughly
• 10:44
  800
• 10:45
  public
• 10:45
  CCTV
• 10:46
  cameras
• 10:46
  projected
• 10:47
  into
• 10:47
  3D
• 10:47
  —
• 10:48
  onto
• 10:48
  a
• 10:48
  photorealistic
• 10:49
  globe
• 10:49
  with
• 10:49
  a
• 10:49
  sub-two-second
• 10:50
  cold
• 10:50
  start
• 10:50
  .
• 10:51
  A
• 10:51
  voice
• 10:52
  mode
• 10:52
  built
• 10:52
  on
• 10:52
  28
• 10:53
  tools
• 10:53
  flies
• 10:53
  the
• 10:54
  camera,
• 10:54
  draws
• 10:55
  boundary
• 10:55
  polygons,
• 10:56
  and
• 10:56
  answers
• 10:56
  questions
• 10:57
  against
• 10:57
  live
• 10:58
  telemetry;
• 10:59
  the
• 10:59
  demo
• 10:59
  tours
• 11:00
  military
• 11:00
  training
• 11:00
  over
• 11:01
  Fort
• 11:01
  Novosel
• 11:02
  and
• 11:02
  a
• 11:02
  scrubbable
• 11:02
  Falcon
• 11:03
  9
• 11:03
  ascent
• 11:03
  replay
• 11:03
  .
• 11:05
  The
• 11:05
  project
• 11:05
  pointedly
• 11:06
  refuses
• 11:06
  to
• 11:06
  merge
• 11:07
  person-tracking,
• 11:08
  face
• 11:08
  recognition,
• 11:09
  or
• 11:09
  named-individual
• 11:10
  search
• 11:10
  —
• 11:10
  a
• 11:11
  self-imposed
• 11:11
  fence,
• 11:12
  fittingly,
• 11:12
  rather
• 11:13
  than
• 11:13
  a
• 11:13
  sandbox.
• 11:16
  GitOfThoughts
• 11:17
  proposes
• 11:17
  storing
• 11:17
  an
• 11:18
  agent's
• 11:18
  reasoning
• 11:18
  tree
• 11:19
  as
• 11:19
  a
• 11:19
  git
• 11:19
  repository:
• 11:20
  every
• 11:20
  scored
• 11:20
  thought
• 11:21
  is
• 11:21
  a
• 11:21
  commit,
• 11:21
  scores
• 11:21
  are
• 11:22
  git
• 11:22
  notes,
• 11:22
  validation
• 11:23
  outcomes
• 11:23
  are
• 11:23
  tags,
• 11:24
  and
• 11:24
  pruned
• 11:24
  attempts
• 11:25
  stay
• 11:25
  in
• 11:25
  history,
• 11:26
  retrievable
• 11:26
  with
• 11:26
  ordinary
• 11:27
  git
• 11:27
  log
• 11:27
  --grep
• 11:27
  searches.
• 11:29
  The
• 11:29
  pitch
• 11:29
  —
• 11:30
  "reasoning
• 11:31
  is
• 11:31
  the
• 11:31
  last
• 11:31
  unversioned
• 11:32
  software
• 11:32
  process"
• 11:33
  —
• 11:34
  is
• 11:34
  appealing,
• 11:34
  buying
• 11:35
  three-way
• 11:35
  merge,
• 11:36
  signed
• 11:36
  authorship,
• 11:37
  and
• 11:37
  bit-identical
• 11:38
  replay
• 11:38
  at
• 11:38
  about
• 11:38
  15
• 11:39
  ms
• 11:39
  per
• 11:39
  write.
• 11:41
  But
• 11:41
  the
• 11:41
  paper's
• 11:41
  real
• 11:42
  value
• 11:42
  is
• 11:42
  its
• 11:42
  honesty:
• 11:43
  it
• 11:43
  pre-registered
• 11:44
  two
• 11:44
  hypotheses
• 11:45
  and
• 11:45
  let
• 11:45
  one
• 11:45
  lose.
• 11:46
  Git-as-substrate
• 11:47
  provides
• 11:47
  operational
• 11:48
  value
• 11:48
  at
• 11:48
  accuracy
• 11:49
  parity
• 11:49
  —
• 11:50
  supported.
• 11:51
  Cross-problem
• 11:52
  memory
• 11:52
  improves
• 11:53
  accuracy
• 11:53
  on
• 11:53
  novel
• 11:53
  problems
• 11:54
  —
• 11:54
  rejected
• 11:55
  .
• 11:56
  Across
• 11:56
  five
• 11:56
  memory
• 11:57
  substrates
• 11:57
  —
• 11:58
  none,
• 11:58
  markdown,
• 11:59
  vector,
• 12:00
  graph,
• 12:00
  git
• 12:01
  —
• 12:01
  over
• 12:01
  GPQA-Diamond,
• 12:03
  MATH-500,
• 12:05
  and
• 12:05
  ScienceWorld,
• 12:06
  no
• 12:06
  substrate
• 12:07
  reliably
• 12:07
  beat
• 12:07
  having
• 12:08
  no
• 12:08
  memory
• 12:08
  at
• 12:08
  all;
• 12:09
  every
• 12:09
  confidence
• 12:10
  interval
• 12:10
  crossed
• 12:10
  zero,
• 12:11
  and
• 12:11
  a
• 12:11
  promising
• 12:12
  early
• 12:12
  git
• 12:12
  trend
• 12:13
  "did
• 12:13
  not
• 12:13
  survive
• 12:14
  its
• 12:14
  own
• 12:14
  pre-registered
• 12:14
  replication,"
• 12:16
  retracted
• 12:16
  as
• 12:16
  "small-sample
• 12:17
  luck."
• 12:18
  Memory
• 12:18
  only
• 12:18
  paid
• 12:19
  off
• 12:19
  above
• 12:19
  a
• 12:19
  "copyability
• 12:20
  threshold"
• 12:20
  —
• 12:21
  a
• 12:21
  near-duplicate
• 12:22
  worked
• 12:22
  example
• 12:22
  lifted
• 12:23
  accuracy
• 12:23
  sharply,
• 12:24
  but
• 12:24
  a
• 12:24
  same-method,
• 12:25
  different-numbers
• 12:26
  variant
• 12:26
  gave
• 12:26
  nothing,
• 12:27
  and
• 12:27
  scaling
• 12:28
  to
• 12:28
  32B
• 12:29
  only
• 12:29
  steepened
• 12:29
  the
• 12:29
  copy-the-answer
• 12:30
  step
• 12:30
  "without
• 12:31
  turning
• 12:31
  retrieved
• 12:32
  worked
• 12:32
  examples
• 12:32
  into
• 12:33
  transferable
• 12:33
  method."
• 12:34
  That
• 12:34
  is
• 12:35
  bracing
• 12:35
  for
• 12:35
  a
• 12:35
  field
• 12:35
  selling
• 12:36
  vector-database
• 12:36
  memory
• 12:37
  as
• 12:37
  a
• 12:37
  general
• 12:37
  accuracy
• 12:38
  lever:
• 12:38
  it
• 12:38
  retrieves
• 12:39
  answers,
• 12:39
  not
• 12:40
  understanding
• 12:40
  —
• 12:41
  fitting
• 12:41
  a
• 12:41
  running
• 12:41
  pattern
• 12:42
  in
• 12:42
  which
• 12:42
  self-generated
• 12:43
  agent
• 12:43
  skills
• 12:43
  also
• 12:44
  failed
• 12:44
  to
• 12:44
  beat
• 12:44
  human-written
• 12:45
  ones.
• 12:46
  OpenRSI
• 12:46
  plants
• 12:47
  its
• 12:47
  flag
• 12:47
  at
• 12:47
  the
• 12:47
  self-improvement
• 12:48
  end.
• 12:49
  FrontisAI
• 12:50
  frames
• 12:50
  "AI
• 12:51
  improving
• 12:51
  AI"
• 12:52
  as
• 12:52
  a
• 12:52
  ladder
• 12:52
  from
• 12:53
  evolution
• 12:53
  to
• 12:53
  recursive
• 12:54
  self-improvement
• 12:55
  and
• 12:55
  starts
• 12:55
  at
• 12:55
  "meta-evolution"
• 12:56
  —
• 12:57
  training
• 12:57
  the
• 12:57
  improver
• 12:58
  itself
• 12:58
  in
• 12:58
  bounded,
• 12:59
  executable
• 12:59
  domains
• 13:00
  —
• 13:00
  without
• 13:01
  claiming
• 13:01
  general
• 13:01
  RSI
• 13:02
  is
• 13:02
  solved.
• 13:03
  Its
• 13:03
  first
• 13:03
  release
• 13:04
  targets
• 13:04
  machine-learning
• 13:05
  engineering
• 13:05
  with
• 13:06
  four
• 13:06
  atomic
• 13:06
  program-evolution
• 13:07
  operators
• 13:08
  —
• 13:09
  Draft,
• 13:09
  Improve,
• 13:10
  Debug,
• 13:11
  Crossover
• 13:11
  —
• 13:12
  and
• 13:12
  a
• 13:12
  post-trained
• 13:13
  model,
• 13:13
  Frontis-MA1.
• 13:15
  On
• 13:15
  MLE-Bench
• 13:16
  Lite
• 13:16
  under
• 13:16
  a
• 13:16
  12-hour,
• 13:19
  single-RTX-4090
• 13:21
  budget,
• 13:22
  the
• 13:22
  35B
• 13:23
  model
• 13:23
  with
• 13:23
  the
• 13:24
  OpenMLE-Evo
• 13:24
  harness
• 13:25
  raised
• 13:25
  its
• 13:26
  medal
• 13:26
  average
• 13:26
  from
• 13:26
  39.39%
• 13:28
  to
• 13:28
  60.61%,
• 13:30
  and
• 13:30
  a
• 13:30
  multi-GPU
• 13:31
  profile
• 13:31
  reached
• 13:31
  71.21%,
• 13:33
  approaching
• 13:34
  far
• 13:34
  larger
• 13:34
  systems
• 13:34
  —
• 13:35
  results
• 13:36
  the
• 13:36
  README
• 13:38
  labels
• 13:39
  as
• 13:39
  model-plus-harness,
• 13:40
  not
• 13:40
  one-shot
• 13:41
  model
• 13:41
  scores
• 13:41
  .
• 13:42
  Against
• 13:43
  recent
• 13:43
  evidence
• 13:43
  that
• 13:44
  RSI
• 13:44
  feedback
• 13:44
  loops
• 13:45
  sit
• 13:45
  below
• 13:45
  the
• 13:45
  roughly
• 13:46
  15%
• 13:46
  R&D-boost
• 13:47
  threshold
• 13:48
  for
• 13:48
  self-sustaining
• 13:48
  acceleration,
• 13:50
  OpenRSI
• 13:51
  is
• 13:51
  best
• 13:51
  read
• 13:51
  as
• 13:52
  a
• 13:52
  measurement
• 13:52
  instrument,
• 13:53
  not
• 13:53
  proof
• 13:53
  the
• 13:53
  loop
• 13:53
  has
• 13:54
  closed.
• 13:57
  When
• 13:57
  Anthropic
• 13:58
  launched
• 13:58
  Skills
• 13:59
  last
• 13:59
  October,
• 14:00
  Simon
• 14:00
  Willison
• 14:01
  predicted
• 14:01
  a
• 14:01
  "cambrian
• 14:02
  explosion
• 14:02
  of
• 14:02
  shareable
• 14:03
  skills
• 14:03
  —
• 14:03
  and
• 14:03
  corresponding
• 14:04
  guardrails."
• 14:05
  Jeffrey's
• 14:05
  Skills
• 14:06
  is
• 14:06
  the
• 14:06
  monetization
• 14:07
  step
• 14:07
  arriving
• 14:07
  on
• 14:07
  schedule:
• 14:08
  a
• 14:08
  paid
• 14:08
  subscription
• 14:08
  marketplace
• 14:09
  ($20/month
• 14:10
  for
• 14:10
  individuals,
• 14:11
  team
• 14:11
  plans
• 14:12
  from
• 14:12
  $300/month)
• 14:13
  selling
• 14:14
  "premium"
• 14:14
  skills
• 14:14
  for
• 14:14
  Claude
• 14:15
  Code
• 14:15
  and
• 14:15
  Codex,
• 14:16
  distributed
• 14:16
  through
• 14:17
  a
• 14:17
  jsm
• 14:17
  CLI
• 14:18
  that
• 14:18
  installs,
• 14:18
  searches,
• 14:18
  and
• 14:19
  syncs
• 14:19
  across
• 14:19
  machines.
• 14:20
  The
• 14:20
  premium
• 14:21
  pitch
• 14:21
  is
• 14:21
  layering
• 14:21
  —
• 14:22
  a
• 14:22
  scannable
• 14:22
  SKILL.md
• 14:23
  front
• 14:23
  door
• 14:24
  over
• 14:24
  deep
• 14:24
  reference
• 14:25
  docs,
• 14:25
  runnable
• 14:26
  validation,
• 14:26
  and
• 14:26
  hooks
• 14:27
  plus
• 14:27
  subagents
• 14:27
  —
• 14:28
  with
• 14:28
  example
• 14:28
  skills
• 14:29
  covering
• 14:29
  performance
• 14:29
  optimization,
• 14:30
  Next.js
• 14:31
  admin
• 14:31
  surfaces,
• 14:32
  and,
• 14:32
  tellingly,
• 14:33
  designing
• 14:33
  MCP
• 14:34
  servers
• 14:34
  that
• 14:34
  agents
• 14:35
  actually
• 14:35
  understand
• 14:35
  .
• 14:36
  The
• 14:36
  market
• 14:37
  thesis
• 14:37
  is
• 14:37
  sound:
• 14:38
  this
• 14:38
  desk
• 14:38
  flagged
• 14:39
  the
• 14:39
  distribution
• 14:39
  gap
• 14:40
  eighteen
• 14:40
  months
• 14:40
  ago,
• 14:41
  when
• 14:41
  skills
• 14:41
  were
• 14:42
  "markdown
• 14:42
  bundles"
• 14:43
  hard
• 14:43
  to
• 14:43
  discover,
• 14:43
  version,
• 14:44
  and
• 14:44
  trust.
• 14:45
  The
• 14:46
  buyer-beware
• 14:46
  counterweight
• 14:46
  is
• 14:47
  equally
• 14:47
  on
• 14:47
  record
• 14:47
  —
• 14:48
  a
• 14:48
  study
• 14:48
  of
• 14:48
  self-generated
• 14:49
  skills
• 14:49
  found
• 14:50
  a
• 14:50
  mean
• 14:50
  quality
• 14:50
  score
• 14:50
  around
• 14:51
  2
• 14:51
  out
• 14:51
  of
• 14:51
  12,
• 14:52
  which
• 14:52
  makes
• 14:52
  curation
• 14:53
  either
• 14:53
  the
• 14:53
  whole
• 14:53
  value
• 14:54
  proposition
• 14:54
  or
• 14:54
  evidence
• 14:55
  the
• 14:55
  category
• 14:55
  is
• 14:55
  oversold.
• 14:56
  The
• 14:56
  testimonials,
• 14:57
  citing
• 14:57
  $1,500
• 14:58
  tax
• 14:59
  savings
• 14:59
  and
• 14:59
  $70k
• 15:00
  in
• 15:00
  recovered
• 15:00
  K-1
• 15:01
  losses,
• 15:01
  lean
• 15:02
  hard
• 15:02
  on
• 15:02
  trust:
• 15:02
  several
• 15:03
  buyers
• 15:03
  say
• 15:03
  they
• 15:03
  would
• 15:04
  rather
• 15:04
  pay
• 15:04
  a
• 15:04
  known
• 15:04
  operator
• 15:05
  than
• 15:05
  "hope
• 15:05
  for
• 15:05
  the
• 15:05
  best
• 15:05
  malware
• 15:06
  wise
• 15:06
  from
• 15:06
  large
• 15:06
  skill
• 15:07
  hubs."
• 15:07
  That
• 15:08
  instinct
• 15:08
  is
• 15:08
  rational,
• 15:09
  given
• 15:09
  the
• 15:09
  October
• 15:09
  launch
• 15:10
  already
• 15:10
  carried
• 15:10
  a
• 15:10
  supply-chain
• 15:11
  warning;
• 15:12
  a
• 15:12
  marketplace
• 15:12
  shipping
• 15:13
  scripts
• 15:13
  and
• 15:13
  subagents
• 15:14
  is
• 15:14
  the
• 15:14
  trusted-by-default
• 15:15
  channel
• 15:15
  where
• 15:15
  a
• 15:15
  single
• 15:16
  poisoned
• 15:16
  skill
• 15:16
  does
• 15:17
  the
• 15:17
  most
• 15:17
  damage.
• 15:18
  The
• 15:18
  creative
• 15:18
  end
• 15:18
  shows
• 15:19
  how
• 15:19
  fast
• 15:19
  the
• 15:19
  format
• 15:20
  is
• 15:20
  spreading
• 15:20
  past
• 15:20
  code.
• 15:21
  TaiT-CRT-Interface-Skill
• 15:24
  is
• 15:25
  a
• 15:25
  Codex
• 15:25
  image-generation
• 15:26
  skill
• 15:26
  that
• 15:26
  turns
• 15:26
  an
• 15:26
  uploaded
• 15:27
  portrait
• 15:27
  or
• 15:27
  a
• 15:27
  text
• 15:28
  prompt
• 15:28
  into
• 15:28
  a
• 15:28
  retro
• 15:28
  illustration
• 15:29
  styled
• 15:29
  after
• 15:30
  early
• 15:30
  Macintosh,
• 15:30
  Minitel,
• 15:31
  and
• 15:31
  8-bit
• 15:31
  interfaces
• 15:32
  —
• 15:32
  scanlines,
• 15:33
  dithering,
• 15:33
  and
• 15:33
  a
• 15:33
  fixed
• 15:34
  CRT
• 15:34
  barrel
• 15:34
  distortion
• 15:35
  —
• 15:36
  with
• 15:36
  preset
• 15:36
  color
• 15:36
  cards
• 15:37
  and
• 15:37
  aspect
• 15:37
  ratios
• 15:38
  negotiated
• 15:38
  over
• 15:38
  a
• 15:38
  two-turn
• 15:39
  conversation
• 15:39
  .
• 15:40
  It
• 15:40
  targets
• 15:41
  Codex
• 15:41
  because
• 15:42
  that
• 15:42
  harness
• 15:42
  has
• 15:42
  image
• 15:43
  generation
• 15:43
  built
• 15:43
  in,
• 15:44
  letting
• 15:44
  one
• 15:44
  agent
• 15:45
  own
• 15:45
  the
• 15:45
  full
• 15:45
  loop
• 15:45
  —
• 15:46
  the
• 15:46
  ecosystem
• 15:47
  bifurcating
• 15:47
  into
• 15:47
  serious
• 15:48
  playbooks
• 15:48
  people
• 15:48
  will
• 15:49
  pay
• 15:49
  to
• 15:49
  trust
• 15:49
  and
• 15:50
  an
• 15:50
  aesthetic
• 15:50
  long
• 15:50
  tail
• 15:51
  people
• 15:51
  fork
• 15:51
  for
• 15:51
  fun.
• 15:55
  Nvidia
• 15:55
  has
• 15:55
  agreed
• 15:55
  to
• 15:56
  pay
• 15:56
  Poolside
• 15:56
  roughly
• 15:57
  $6
• 15:57
  billion
• 15:57
  to
• 15:58
  license
• 15:58
  its
• 15:58
  "Model
• 15:59
  Factory"
• 15:59
  software
• 16:00
  and
• 16:00
  to
• 16:00
  hire
• 16:00
  the
• 16:00
  109
• 16:01
  employees
• 16:01
  behind
• 16:02
  the
• 16:02
  Laguna
• 16:02
  model,
• 16:03
  plus
• 16:03
  a
• 16:03
  $1
• 16:03
  billion
• 16:04
  investment
• 16:05
  at
• 16:05
  a
• 16:05
  $12
• 16:05
  billion
• 16:05
  pre-money
• 16:06
  valuation.
• 16:07
  Poolside
• 16:08
  insists
• 16:08
  it
• 16:08
  is
• 16:08
  not
• 16:09
  an
• 16:09
  acquihire;
• 16:10
  a
• 16:10
  Yahoo
• 16:10
  Finance
• 16:11
  account
• 16:11
  in
• 16:11
  the
• 16:11
  thread
• 16:12
  suggests
• 16:12
  the
• 16:12
  licensing-and-hiring
• 16:13
  structure
• 16:14
  exists
• 16:15
  to
• 16:15
  dodge
• 16:15
  the
• 16:15
  regulatory
• 16:16
  scrutiny
• 16:16
  a
• 16:16
  merger
• 16:17
  would
• 16:17
  draw
• 16:17
  —
• 16:18
  the
• 16:18
  same
• 16:18
  template
• 16:19
  Nvidia
• 16:19
  used
• 16:19
  with
• 16:20
  Groq
• 16:20
  and
• 16:20
  Enfabrica.
• 16:21
  The
• 16:21
  community
• 16:22
  reaction
• 16:22
  is
• 16:22
  bruised
• 16:23
  —
• 16:24
  Laguna
• 16:24
  was
• 16:24
  praised
• 16:25
  here
• 16:25
  for
• 16:25
  its
• 16:25
  permissive
• 16:25
  Apache
• 16:26
  license
• 16:26
  and
• 16:26
  strong
• 16:27
  SWE-bench
• 16:27
  numbers,
• 16:28
  and
• 16:29
  commenters
• 16:29
  who
• 16:29
  watched
• 16:30
  it
• 16:30
  "loop
• 16:30
  like
• 16:30
  crazy"
• 16:31
  now
• 16:31
  wonder
• 16:31
  whether
• 16:31
  it
• 16:32
  gets
• 16:32
  absorbed
• 16:32
  into
• 16:32
  Nemotron
• 16:32
  .
• 16:33
  A
• 16:34
  model
• 16:34
  covered
• 16:34
  here
• 16:34
  as
• 16:35
  an
• 16:35
  open-weight
• 16:35
  darling
• 16:36
  is
• 16:36
  being
• 16:36
  repriced
• 16:37
  as
• 16:37
  a
• 16:37
  capital
• 16:37
  asset.
• 16:38
  Underneath
• 16:38
  the
• 16:39
  deal-making,
• 16:40
  the
• 16:40
  people
• 16:40
  who
• 16:40
  actually
• 16:40
  run
• 16:41
  these
• 16:41
  models
• 16:41
  keep
• 16:41
  grinding
• 16:42
  out
• 16:42
  gains.
• 16:43
  Ant
• 16:43
  Group's
• 16:44
  Ling
• 16:44
  team
• 16:44
  released
• 16:44
  six
• 16:45
  Ling-3.0
• 16:46
  base
• 16:46
  checkpoints
• 16:46
  —
• 16:47
  tiny
• 16:47
  and
• 16:48
  flash
• 16:48
  sizes
• 16:48
  across
• 16:49
  pretrained,
• 16:49
  mid-trained,
• 16:50
  and
• 16:50
  WSM-merged
• 16:51
  stages
• 16:51
  —
• 16:52
  none
• 16:52
  post-trained,
• 16:53
  so
• 16:53
  this
• 16:53
  is
• 16:53
  raw
• 16:54
  material
• 16:54
  for
• 16:54
  continued
• 16:55
  training
• 16:55
  rather
• 16:55
  than
• 16:56
  a
• 16:56
  chat
• 16:56
  release,
• 16:57
  arriving
• 16:57
  on
• 16:57
  the
• 16:57
  late-August
• 16:58
  schedule
• 16:58
  the
• 16:58
  local
• 16:59
  community
• 16:59
  predicted
• 16:59
  .
• 17:00
  GLM-4.5-Air
• 17:01
  finally
• 17:01
  got
• 17:02
  multi-token-prediction
• 17:02
  support
• 17:03
  in
• 17:03
  llama.cpp,
• 17:04
  paying
• 17:04
  off
• 17:05
  a
• 17:05
  performance
• 17:05
  debt
• 17:05
  flagged
• 17:05
  at
• 17:06
  launch
• 17:06
  a
• 17:06
  year
• 17:06
  ago
• 17:06
  —
• 17:07
  though
• 17:07
  one
• 17:07
  commenter
• 17:07
  notes
• 17:08
  the
• 17:08
  catch:
• 17:08
  MTP
• 17:09
  spends
• 17:09
  compute
• 17:09
  to
• 17:10
  verify
• 17:10
  draft
• 17:10
  tokens,
• 17:11
  so
• 17:11
  it
• 17:11
  helps
• 17:11
  bandwidth-bound
• 17:12
  rigs
• 17:12
  but
• 17:12
  not
• 17:12
  the
• 17:12
  compute-limited
• 17:13
  Strix
• 17:13
  Halo
• 17:13
  and
• 17:13
  DGX
• 17:14
  Spark
• 17:14
  boxes
• 17:14
  it's
• 17:14
  most
• 17:15
  wanted
• 17:15
  for
• 17:15
  .
• 17:16
  The
• 17:16
  quietly
• 17:16
  important
• 17:17
  result
• 17:17
  comes
• 17:17
  from
• 17:17
  Multiverse
• 17:18
  Computing's
• 17:18
  Quantization-Aware
• 17:19
  Healing,
• 17:20
  which
• 17:20
  reframes
• 17:20
  4-bit
• 17:21
  compression
• 17:21
  as
• 17:21
  opportunity,
• 17:22
  not
• 17:22
  tax.
• 17:23
  The
• 17:23
  change
• 17:24
  is
• 17:24
  single:
• 17:25
  distill
• 17:25
  the
• 17:25
  quantized
• 17:25
  student
• 17:26
  directly
• 17:26
  from
• 17:26
  the
• 17:26
  original,
• 17:27
  pre-compression
• 17:28
  full-precision
• 17:28
  teacher
• 17:29
  —
• 17:30
  not
• 17:30
  from
• 17:30
  the
• 17:30
  degraded
• 17:30
  recovered
• 17:31
  bfloat16
• 17:31
  checkpoint
• 17:32
  —
• 17:33
  matching
• 17:33
  logits
• 17:34
  by
• 17:34
  KL
• 17:34
  divergence.
• 17:35
  Applied
• 17:36
  to
• 17:36
  GPT-OSS
• 17:38
  120B
• 17:39
  compressed
• 17:40
  to
• 17:40
  60B
• 17:41
  and
• 17:41
  quantized
• 17:41
  to
• 17:41
  MXFP4,
• 17:43
  the
• 17:43
  healed
• 17:44
  model
• 17:44
  beat
• 17:44
  its
• 17:44
  own
• 17:44
  bfloat16
• 17:45
  60B
• 17:46
  checkpoint
• 17:47
  on
• 17:47
  7
• 17:47
  of
• 17:47
  9
• 17:47
  benchmarks
• 17:48
  at
• 17:48
  roughly
• 17:48
  a
• 17:48
  quarter
• 17:49
  of
• 17:49
  the
• 17:49
  weight
• 17:49
  memory.
• 17:50
  Against
• 17:50
  QAT
• 17:51
  it
• 17:51
  peaks
• 17:51
  about
• 17:51
  7x
• 17:52
  faster
• 17:52
  and
• 17:52
  stays
• 17:52
  stable
• 17:53
  where
• 17:53
  QAT
• 17:53
  collapses
• 17:54
  by
• 17:54
  nearly
• 17:54
  19
• 17:55
  points
• 17:55
  at
• 17:55
  step
• 17:55
  1,200,
• 17:57
  because
• 17:57
  a
• 17:57
  frozen
• 17:57
  teacher
• 17:58
  gives
• 17:58
  the
• 17:58
  student
• 17:58
  no
• 17:59
  incentive
• 17:59
  to
• 17:59
  drift
• 17:59
  .
• 18:00
  Low-bit
• 18:01
  models
• 18:01
  still
• 18:02
  have
• 18:02
  a
• 18:02
  way
• 18:02
  of
• 18:02
  failing
• 18:02
  multi-turn
• 18:03
  agentic
• 18:03
  tasks
• 18:04
  that
• 18:04
  single-turn
• 18:05
  benchmarks
• 18:05
  miss,
• 18:06
  but
• 18:06
  the
• 18:06
  stability
• 18:07
  story
• 18:07
  is
• 18:07
  the
• 18:07
  real
• 18:08
  advance.
• 18:09
  And
• 18:09
  a
• 18:09
  final
• 18:10
  reminder
• 18:10
  that
• 18:10
  the
• 18:10
  bits
• 18:10
  themselves
• 18:11
  bite:
• 18:12
  one
• 18:12
  engineer
• 18:13
  found
• 18:13
  that
• 18:13
  storing
• 18:13
  1
• 18:14
  +
• 18:14
  offset
• 18:14
  directly
• 18:15
  in
• 18:15
  BF16
• 18:16
  collapses
• 18:16
  distinct
• 18:17
  RMSNorm
• 18:17
  weights
• 18:18
  like
• 18:18
  3.359375
• 18:20
  and
• 18:20
  3.390625
• 18:22
  into
• 18:23
  the
• 18:23
  same
• 18:23
  4.375,
• 18:25
  so
• 18:25
  subtracting
• 18:26
  one
• 18:26
  back
• 18:26
  never
• 18:26
  recovers
• 18:27
  the
• 18:27
  originals
• 18:27
  —
• 18:28
  proof
• 18:28
  that
• 18:28
  any
• 18:28
  converter
• 18:29
  doing
• 18:29
  arithmetic
• 18:30
  in
• 18:30
  low
• 18:30
  precision
• 18:30
  can
• 18:30
  quietly
• 18:31
  lose
• 18:31
  information
• 18:32
  even
• 18:32
  when
• 18:32
  the
• 18:32
  transform
• 18:32
  is
• 18:33
  a
• 18:33
  supposed
• 18:33
  isomorphism
• 18:33
  .