Latest / AGI Dreams – Open, Uncensored, & Local - AI News Digest / AGI Dreams Podcast – October 09, 2026

Transcript

AGI Dreams Podcast – October 09, 2026 · AGI Dreams – Open, Uncensored, & Local - AI News Digest

• 0:00
  CrowdStrike
• 0:00
  Intelligence
• 0:01
  has
• 0:01
  named
• 0:01
  the
• 0:01
  tooling
• 0:01
  behind
• 0:02
  the
• 0:02
  late-September
• 0:02
  breaches
• 0:03
  at
• 0:03
  South
• 0:03
  Korean
• 0:04
  financial
• 0:04
  institutions:
• 0:05
  ARTEX,
• 0:06
  a
• 0:06
  recently
• 0:06
  released,
• 0:07
  Chinese-developed
• 0:07
  open-source
• 0:08
  agentic
• 0:08
  penetration
• 0:09
  testing
• 0:09
  tool,
• 0:09
  driven
• 0:10
  by
• 0:10
  a
• 0:10
  stack
• 0:10
  of
• 0:10
  open-weight
• 0:11
  and
• 0:11
  commercial
• 0:11
  LLMs.
• 0:12
  The
• 0:12
  campaign
• 0:12
  ran
• 0:12
  from
• 0:13
  late
• 0:13
  September
• 0:13
  into
• 0:13
  early
• 0:14
  October
• 0:14
  2026
• 0:15
  and
• 0:15
  resulted
• 0:15
  in
• 0:15
  exfiltrated
• 0:16
  data.
• 0:17
  Industry
• 0:17
  reporting
• 0:18
  describes
• 0:18
  a
• 0:18
  loan
• 0:18
  progress
• 0:19
  inquiry
• 0:19
  service
• 0:19
  used
• 0:20
  by
• 0:20
  brokers
• 0:20
  compromised
• 0:21
  at
• 0:21
  one
• 0:21
  bank
• 0:21
  and
• 0:21
  an
• 0:21
  employee
• 0:22
  mobile
• 0:22
  work-support
• 0:23
  system
• 0:23
  at
• 0:23
  another;
• 0:24
  the
• 0:24
  number
• 0:24
  of
• 0:24
  affected
• 0:25
  organizations
• 0:25
  is
• 0:26
  unconfirmed.
• 0:27
  The
• 0:27
  attribution
• 0:27
  is
• 0:28
  modest:
• 0:29
  the
• 0:29
  actor
• 0:29
  is
• 0:29
  "likely
• 0:30
  a
• 0:30
  Chinese
• 0:30
  speaker
• 0:30
  and
• 0:31
  financially
• 0:31
  motivated,"
• 0:32
  assessed
• 0:33
  "with
• 0:33
  moderate
• 0:33
  confidence
• 0:34
  based
• 0:34
  on
• 0:34
  the
• 0:34
  use
• 0:35
  of
• 0:35
  the
• 0:35
  Chinese-developed
• 0:35
  tool
• 0:35
  ARTEX
• 0:36
  and
• 0:36
  observed
• 0:37
  Chinese-language
• 0:37
  prompts"
• 0:37
  .
• 0:38
  The
• 0:38
  investigation
• 0:39
  exists
• 0:39
  because
• 0:40
  the
• 0:40
  operator
• 0:40
  left
• 0:40
  the
• 0:41
  door
• 0:41
  open.
• 0:41
  CrowdStrike
• 0:42
  found
• 0:42
  attacker-controlled
• 0:43
  open
• 0:43
  directories
• 0:43
  holding
• 0:44
  Claude
• 0:44
  Code
• 0:44
  session
• 0:45
  histories,
• 0:45
  ARTEX
• 0:45
  configuration
• 0:46
  files,
• 0:46
  and
• 0:46
  Claude
• 0:47
  memory
• 0:47
  files.
• 0:48
  That
• 0:48
  is
• 0:48
  now
• 0:48
  a
• 0:48
  recurring
• 0:49
  motif
• 0:49
  in
• 0:49
  this
• 0:49
  year's
• 0:49
  AI-assisted
• 0:50
  intrusion
• 0:50
  write-ups:
• 0:51
  the
• 0:51
  forensic
• 0:51
  record
• 0:52
  comes
• 0:52
  from
• 0:52
  the
• 0:52
  attacker's
• 0:52
  own
• 0:52
  self-hosted
• 0:53
  sprawl,
• 0:54
  not
• 0:54
  victim
• 0:54
  telemetry.
• 0:55
  The
• 0:55
  sessions
• 0:55
  show
• 0:55
  a
• 0:55
  two-server
• 0:56
  layout,
• 0:56
  with
• 0:56
  a
• 0:56
  Hong
• 0:57
  Kong
• 0:57
  IP
• 0:57
  as
• 0:57
  primary
• 0:58
  infrastructure
• 0:58
  and
• 0:58
  a
• 0:58
  second
• 0:59
  host
• 0:59
  running
• 0:59
  ARTEX.
• 1:00
  ARTEX
• 1:00
  used
• 1:00
  DeepSeek
• 1:00
  v4.1-flash
• 1:02
  as
• 1:02
  its
• 1:02
  primary
• 1:02
  backend,
• 1:03
  likely
• 1:03
  reached
• 1:03
  through
• 1:03
  an
• 1:03
  API
• 1:04
  proxy
• 1:04
  or
• 1:04
  reseller,
• 1:05
  with
• 1:05
  GLM-5.3
• 1:06
  from
• 1:06
  Zhipu
• 1:06
  and
• 1:06
  Grok
• 1:06
  4.6
• 1:07
  supplementing
• 1:07
  further
• 1:08
  Claude
• 1:08
  Code
• 1:08
  sessions.
• 1:09
  The
• 1:09
  DeepSeek
• 1:09
  model
• 1:10
  itself
• 1:10
  is
• 1:10
  published
• 1:10
  on
• 1:10
  Hugging
• 1:11
  Face
• 1:11
  .
• 1:11
  The
• 1:11
  softer
• 1:12
  side
• 1:12
  of
• 1:12
  the
• 1:12
  operation
• 1:13
  is
• 1:13
  in
• 1:13
  the
• 1:13
  same
• 1:13
  logs.
• 1:14
  The
• 1:14
  actor
• 1:14
  asked
• 1:14
  Claude
• 1:15
  where
• 1:15
  Korean
• 1:15
  breach
• 1:15
  data
• 1:16
  is
• 1:16
  sold,
• 1:17
  looked
• 1:17
  for
• 1:17
  Korean
• 1:17
  Telegram
• 1:18
  data-sales
• 1:18
  groups,
• 1:19
  and
• 1:19
  requested
• 1:19
  a
• 1:19
  security
• 1:20
  researcher
• 1:20
  resume
• 1:20
  describing
• 1:21
  the
• 1:21
  ARTEX
• 1:21
  results,
• 1:22
  supplying
• 1:22
  a
• 1:22
  date
• 1:22
  of
• 1:22
  birth
• 1:23
  and
• 1:23
  an
• 1:23
  education
• 1:24
  at
• 1:24
  South
• 1:24
  China
• 1:24
  University
• 1:25
  of
• 1:25
  Technology.
• 1:26
  A
• 1:26
  Telegram
• 1:27
  handle,
• 1:27
  YY520CN,
• 1:30
  links
• 1:30
  to
• 1:30
  sessions
• 1:31
  probing
• 1:31
  a
• 1:31
  Telegram
• 1:31
  NFT
• 1:32
  marketplace
• 1:33
  and
• 1:33
  a
• 1:33
  possible
• 1:33
  Chinese
• 1:34
  payment
• 1:34
  platform.
• 1:35
  CrowdStrike
• 1:36
  is
• 1:36
  careful:
• 1:37
  "currently
• 1:37
  available
• 1:37
  information
• 1:38
  cannot
• 1:38
  definitively
• 1:39
  associate
• 1:39
  these
• 1:39
  details
• 1:40
  with
• 1:40
  the
• 1:40
  threat
• 1:40
  actor."
• 1:41
  The
• 1:41
  intrusion
• 1:42
  was
• 1:42
  automated;
• 1:43
  the
• 1:43
  monetization
• 1:43
  research
• 1:44
  and
• 1:44
  the
• 1:44
  opsec
• 1:44
  were
• 1:45
  human
• 1:45
  and
• 1:45
  sloppy.
• 1:46
  Which
• 1:46
  makes
• 1:47
  the
• 1:47
  LocalLLaMA
• 1:47
  victory
• 1:47
  lap
• 1:48
  over
• 1:48
  GLM
• 1:48
  5.3
• 1:49
  Flash
• 1:50
  topping
• 1:50
  the
• 1:50
  Artificial
• 1:51
  Analysis
• 1:51
  Cyber
• 1:51
  Index
• 1:52
  worth
• 1:52
  reading
• 1:52
  carefully.
• 1:53
  The
• 1:53
  post
• 1:54
  asserts
• 1:54
  two
• 1:54
  open
• 1:54
  models
• 1:55
  now
• 1:55
  sit
• 1:55
  above
• 1:56
  every
• 1:56
  Anthropic
• 1:56
  model,
• 1:57
  with
• 1:57
  no
• 1:57
  methodology
• 1:58
  attached.
• 1:59
  The
• 1:59
  comments
• 2:00
  supply
• 2:00
  the
• 2:00
  confound:
• 2:01
  several
• 2:01
  attribute
• 2:02
  the
• 2:02
  gap
• 2:02
  to
• 2:02
  Claude
• 2:02
  refusing
• 2:03
  cyber
• 2:03
  tasks,
• 2:04
  one
• 2:04
  notes
• 2:04
  Anthropic
• 2:05
  said
• 2:05
  it
• 2:05
  applied
• 2:05
  cyber
• 2:06
  guardrails
• 2:06
  to
• 2:06
  Opus
• 2:06
  5.5,
• 2:08
  another
• 2:08
  says
• 2:08
  Z.ai
• 2:09
  models
• 2:10
  are
• 2:10
  "so
• 2:10
  easy
• 2:11
  to
• 2:11
  jailbreak."
• 2:12
  If
• 2:12
  an
• 2:12
  index
• 2:13
  scores
• 2:13
  completed
• 2:13
  offensive
• 2:14
  tasks,
• 2:14
  willingness
• 2:15
  counts
• 2:15
  as
• 2:15
  much
• 2:16
  as
• 2:16
  skill,
• 2:16
  and
• 2:17
  the
• 2:17
  ranking
• 2:17
  cannot
• 2:17
  separate
• 2:18
  them.
• 2:18
  A
• 2:18
  per-task
• 2:19
  refusal
• 2:19
  rate
• 2:20
  alongside
• 2:20
  the
• 2:20
  score
• 2:20
  would
• 2:21
  settle
• 2:21
  it.
• 2:22
  Until
• 2:22
  then,
• 2:22
  "open
• 2:23
  source
• 2:23
  prevails"
• 2:24
  is
• 2:24
  a
• 2:24
  claim
• 2:24
  about
• 2:24
  guardrails,
• 2:25
  not
• 2:25
  models
• 2:25
  .
• 2:28
  Expel's
• 2:29
  guide
• 2:29
  to
• 2:29
  AI
• 2:30
  security
• 2:30
  risk
• 2:30
  is
• 2:30
  a
• 2:30
  CISO
• 2:31
  document
• 2:31
  rather
• 2:32
  than
• 2:32
  a
• 2:32
  threat
• 2:32
  taxonomy,
• 2:33
  and
• 2:33
  declines
• 2:33
  to
• 2:33
  compete
• 2:33
  with
• 2:34
  NIST
• 2:34
  AI
• 2:34
  RMF
• 2:34
  or
• 2:35
  MITRE
• 2:35
  ATLAS.
• 2:36
  Its
• 2:36
  premise
• 2:37
  is
• 2:37
  that
• 2:37
  AI
• 2:37
  "is
• 2:37
  changing
• 2:38
  the
• 2:38
  economics
• 2:38
  of
• 2:38
  security
• 2:39
  risk
• 2:39
  more
• 2:39
  rapidly
• 2:39
  than
• 2:39
  many
• 2:40
  organizations
• 2:40
  can
• 2:40
  move"
• 2:41
  by
• 2:41
  breaking
• 2:41
  the
• 2:41
  assumptions
• 2:42
  the
• 2:42
  SaaS
• 2:42
  and
• 2:43
  MDM
• 2:43
  playbooks
• 2:43
  relied
• 2:44
  on,
• 2:44
  which
• 2:44
  it
• 2:44
  compresses
• 2:45
  into
• 2:45
  three
• 2:45
  shifts.
• 2:46
  Identity
• 2:46
  is
• 2:46
  degraded.
• 2:47
  Execution
• 2:48
  is
• 2:48
  probabilistic.
• 2:49
  Observability
• 2:50
  "is
• 2:50
  no
• 2:50
  longer
• 2:51
  a
• 2:51
  simple
• 2:51
  question
• 2:51
  of
• 2:52
  'Do
• 2:52
  you
• 2:52
  have
• 2:52
  the
• 2:52
  logs?'"
• 2:52
  .
• 2:53
  Six
• 2:53
  control
• 2:54
  planes,
• 2:54
  data,
• 2:55
  identity,
• 2:55
  execution,
• 2:56
  human,
• 2:57
  external
• 2:57
  AI
• 2:58
  and
• 2:58
  service
• 2:58
  control,
• 2:59
  and
• 2:59
  observability,
• 3:00
  answer
• 3:00
  why
• 3:00
  each
• 3:01
  stakeholder
• 3:01
  is
• 3:01
  at
• 3:01
  the
• 3:01
  table;
• 3:02
  observability
• 3:03
  is
• 3:03
  primary
• 3:03
  because
• 3:04
  "without
• 3:04
  it,
• 3:05
  none
• 3:05
  of
• 3:05
  the
• 3:05
  other
• 3:05
  planes
• 3:05
  can
• 3:06
  be
• 3:06
  validated
• 3:06
  or
• 3:07
  enforced."
• 3:08
  Ten
• 3:08
  unprioritized
• 3:09
  risk
• 3:09
  domains
• 3:10
  serve
• 3:10
  as
• 3:10
  board
• 3:10
  reporting
• 3:11
  lines,
• 3:12
  from
• 3:12
  data
• 3:12
  exposure
• 3:12
  where
• 3:13
  "exposure
• 3:13
  occurs
• 3:13
  without
• 3:14
  traditional
• 3:14
  exfiltration"
• 3:15
  to
• 3:15
  identity
• 3:15
  degradation
• 3:16
  where
• 3:16
  "privilege
• 3:16
  boundaries
• 3:17
  are
• 3:17
  traversed
• 3:17
  through
• 3:17
  workflows,
• 3:18
  not
• 3:18
  logins,"
• 3:19
  to
• 3:19
  observability
• 3:20
  collapse:
• 3:21
  "if
• 3:21
  activity
• 3:21
  cannot
• 3:21
  be
• 3:22
  reconstructed,
• 3:22
  it
• 3:23
  cannot
• 3:23
  be
• 3:23
  secured."
• 3:24
  A
• 3:24
  worked
• 3:24
  data-exposure
• 3:25
  example
• 3:25
  names
• 3:25
  owners
• 3:26
  and
• 3:26
  proposes
• 3:26
  metrics
• 3:27
  such
• 3:27
  as
• 3:27
  the
• 3:27
  share
• 3:28
  of
• 3:28
  governance-scoped
• 3:28
  data
• 3:29
  reachable
• 3:29
  by
• 3:29
  unauthorized
• 3:30
  AI
• 3:30
  endpoints.
• 3:31
  That
• 3:31
  is
• 3:31
  more
• 3:32
  concrete
• 3:32
  than
• 3:32
  most
• 3:32
  vendor
• 3:32
  frameworks,
• 3:33
  and
• 3:33
  it
• 3:33
  comes
• 3:34
  from
• 3:34
  a
• 3:34
  managed
• 3:34
  detection
• 3:35
  shop
• 3:35
  whose
• 3:35
  business
• 3:36
  is
• 3:36
  observability,
• 3:37
  which
• 3:37
  is
• 3:37
  worth
• 3:37
  remembering
• 3:38
  when
• 3:38
  the
• 3:38
  guide
• 3:38
  ranks
• 3:38
  observability
• 3:39
  first.
• 3:40
  The
• 3:40
  measurement
• 3:40
  side
• 3:40
  arrives
• 3:41
  from
• 3:41
  Minjiang
• 3:41
  University,
• 3:42
  Renmin
• 3:42
  University,
• 3:43
  and
• 3:43
  RMIT.
• 3:44
  CIPL,
• 3:45
  Channel
• 3:46
  Inversion
• 3:46
  for
• 3:46
  Privacy
• 3:47
  Leakage,
• 3:48
  complains
• 3:48
  that
• 3:48
  agent
• 3:48
  privacy
• 3:49
  evaluations
• 3:49
  are
• 3:49
  organized
• 3:50
  by
• 3:50
  component,
• 3:50
  memory,
• 3:51
  RAG,
• 3:52
  or
• 3:52
  tools,
• 3:53
  which
• 3:53
  "makes
• 3:53
  it
• 3:53
  difficult
• 3:54
  to
• 3:54
  distinguish
• 3:54
  internal
• 3:54
  exposure
• 3:55
  from
• 3:55
  information
• 3:56
  that
• 3:56
  an
• 3:56
  external
• 3:56
  observer
• 3:56
  can
• 3:57
  actually
• 3:57
  recover."
• 3:58
  CIPL
• 3:59
  decomposes
• 3:59
  each
• 3:59
  target
• 4:00
  into
• 4:00
  six
• 4:00
  stages
• 4:01
  and
• 4:01
  reports
• 4:01
  whether
• 4:01
  selected
• 4:02
  units
• 4:02
  are
• 4:02
  recoverable
• 4:03
  from
• 4:03
  visible
• 4:03
  output,
• 4:04
  as
• 4:04
  any-unit
• 4:05
  and
• 4:05
  complete-recovery
• 4:06
  rates,
• 4:06
  under
• 4:06
  a
• 4:06
  black-box
• 4:07
  threat
• 4:07
  model
• 4:07
  with
• 4:08
  no
• 4:08
  privileged
• 4:08
  logs
• 4:09
  .
• 4:10
  The
• 4:10
  results
• 4:10
  map
• 4:10
  onto
• 4:11
  Expel's
• 4:11
  observability
• 4:12
  plane.
• 4:13
  Memory
• 4:13
  targets
• 4:13
  saturate,
• 4:14
  with
• 4:14
  complete
• 4:14
  recovery
• 4:15
  of
• 4:15
  1.0
• 4:16
  across
• 4:16
  all
• 4:16
  five
• 4:17
  providers
• 4:17
  tested.
• 4:18
  RAG
• 4:18
  leaks
• 4:19
  frequently
• 4:19
  but
• 4:19
  partially.
• 4:20
  Tool
• 4:21
  and
• 4:21
  BrowserUse
• 4:21
  leakage
• 4:22
  is
• 4:22
  channel-
• 4:22
  and
• 4:23
  provider-dependent:
• 4:24
  DeepSeek
• 4:24
  and
• 4:25
  GPT-4o
• 4:25
  leak
• 4:26
  through
• 4:26
  execution
• 4:26
  traces
• 4:27
  while
• 4:27
  shielding
• 4:27
  final
• 4:28
  answers,
• 4:28
  whereas
• 4:29
  Qwen
• 4:29
  leaks
• 4:29
  through
• 4:29
  the
• 4:30
  answer
• 4:30
  itself.
• 4:31
  The
• 4:31
  sharpest
• 4:31
  finding
• 4:32
  is
• 4:32
  an
• 4:32
  appendix
• 4:32
  on
• 4:32
  an
• 4:33
  MCP,
• 4:34
  Model
• 4:34
  Context
• 4:34
  Protocol,
• 4:35
  agent
• 4:36
  behind
• 4:36
  the
• 4:36
  PrivacyInAction
• 4:37
  gate:
• 4:37
  monitored
• 4:38
  tool
• 4:38
  paths
• 4:39
  held
• 4:39
  complete
• 4:39
  recovery
• 4:40
  at
• 4:40
  0.00
• 4:41
  and
• 4:41
  any-unit
• 4:42
  recovery
• 4:42
  below
• 4:42
  0.28,
• 4:44
  while
• 4:44
  an
• 4:44
  unmonitored
• 4:45
  console
• 4:45
  channel
• 4:46
  pushed
• 4:46
  any-unit
• 4:47
  recovery
• 4:47
  to
• 4:47
  0.92.
• 4:49
  The
• 4:49
  gate
• 4:49
  worked
• 4:49
  where
• 4:49
  it
• 4:50
  looked.
• 4:50
  The
• 4:50
  limitations
• 4:51
  are
• 4:51
  real:
• 4:52
  results
• 4:52
  are
• 4:53
  tied
• 4:53
  to
• 4:53
  specific
• 4:53
  budgets
• 4:54
  and
• 4:54
  provider
• 4:54
  snapshots,
• 4:55
  the
• 4:56
  semantic
• 4:56
  audit
• 4:56
  is
• 4:56
  small,
• 4:57
  and
• 4:57
  the
• 4:57
  runtime
• 4:58
  judge
• 4:58
  agreed
• 4:58
  weakly
• 4:59
  with
• 4:59
  humans,
• 5:00
  kappa
• 5:00
  0.36
• 5:01
  and
• 5:01
  recall
• 5:01
  0.30.
• 5:07
  ruvnet's
• 5:07
  rudevolution
• 5:08
  is
• 5:09
  a
• 5:09
  static
• 5:09
  decompiler
• 5:10
  for
• 5:10
  minified
• 5:10
  JavaScript
• 5:11
  bundles,
• 5:11
  and
• 5:11
  its
• 5:12
  README
• 5:14
  opens
• 5:14
  with
• 5:14
  a
• 5:15
  sentence
• 5:15
  rarely
• 5:15
  seen
• 5:16
  in
• 5:16
  that
• 5:16
  ecosystem:
• 5:17
  "Evidence
• 5:17
  first.
• 5:18
  Recovered
• 5:18
  modules
• 5:19
  and
• 5:19
  names
• 5:19
  are
• 5:19
  hypotheses."
• 5:20
  The
• 5:20
  Rust
• 5:20
  core
• 5:21
  parses
• 5:21
  declarations
• 5:22
  without
• 5:22
  executing
• 5:22
  them,
• 5:23
  builds
• 5:23
  a
• 5:23
  weighted
• 5:24
  reference
• 5:24
  graph,
• 5:24
  partitions
• 5:25
  it
• 5:25
  into
• 5:25
  candidate
• 5:26
  modules
• 5:26
  with
• 5:26
  Louvain
• 5:27
  community
• 5:27
  detection,
• 5:28
  infers
• 5:28
  names
• 5:28
  with
• 5:29
  confidence
• 5:29
  scores,
• 5:30
  and
• 5:30
  emits
• 5:30
  V3
• 5:30
  source
• 5:31
  maps
• 5:31
  alongside
• 5:32
  SHA3-256
• 5:35
  Merkle
• 5:36
  "witness
• 5:36
  chains"
• 5:37
  that
• 5:37
  attest
• 5:37
  to
• 5:37
  byte
• 5:38
  integrity
• 5:38
  and,
• 5:38
  the
• 5:39
  README
• 5:42
  stresses,
• 5:42
  do
• 5:43
  "not
• 5:43
  establish
• 5:43
  original
• 5:44
  intent,
• 5:44
  behavioral
• 5:45
  equivalence,
• 5:46
  or
• 5:46
  authorship."
• 5:47
  Six
• 5:47
  MCP
• 5:48
  tools
• 5:48
  expose
• 5:48
  it
• 5:48
  to
• 5:49
  Claude
• 5:49
  Code
• 5:49
  .
• 5:49
  The
• 5:49
  showcase
• 5:50
  target
• 5:50
  is
• 5:50
  Claude
• 5:51
  Code
• 5:51
  itself.
• 5:52
  One
• 5:52
  historical
• 5:53
  run
• 5:53
  on
• 5:53
  an
• 5:53
  11
• 5:53
  MB
• 5:54
  cli.js
• 5:55
  with
• 5:55
  27,477
• 5:57
  declarations
• 5:57
  reportedly
• 5:58
  took
• 5:58
  about
• 5:58
  26
• 5:59
  seconds,
• 5:59
  yielding
• 6:00
  1,029
• 6:01
  modules
• 6:01
  and
• 6:01
  25,465
• 6:03
  inferred
• 6:04
  names,
• 6:04
  and
• 6:05
  decompilations
• 6:05
  of
• 6:05
  five
• 6:06
  Claude
• 6:06
  Code
• 6:06
  versions
• 6:07
  ship
• 6:07
  as
• 6:07
  release
• 6:07
  downloads.
• 6:08
  Every
• 6:08
  number
• 6:09
  carries
• 6:09
  a
• 6:09
  disclaimer:
• 6:10
  the
• 6:10
  95.7%
• 6:11
  validation
• 6:12
  accuracy
• 6:13
  "has
• 6:13
  not
• 6:13
  been
• 6:13
  reproduced
• 6:14
  on
• 6:14
  a
• 6:14
  shared,
• 6:14
  held
• 6:15
  out
• 6:15
  benchmark,"
• 6:16
  and
• 6:16
  the
• 6:16
  "Clean
• 6:16
  Room"
• 6:17
  workflow
• 6:17
  is
• 6:17
  labeled
• 6:18
  developer
• 6:18
  preview
• 6:18
  with
• 6:18
  the
• 6:19
  warning
• 6:19
  "Do
• 6:19
  not
• 6:20
  use
• 6:20
  this
• 6:20
  as
• 6:20
  evidence
• 6:20
  of
• 6:21
  lawful
• 6:21
  independent
• 6:21
  authorship."
• 6:22
  Given
• 6:23
  this
• 6:23
  author's
• 6:23
  record
• 6:24
  of
• 6:24
  shipping
• 6:24
  ambitious
• 6:25
  prototypes
• 6:25
  faster
• 6:26
  than
• 6:26
  independent
• 6:26
  verification
• 6:27
  can
• 6:27
  follow,
• 6:28
  the
• 6:28
  hedging
• 6:28
  is
• 6:28
  welcome,
• 6:29
  and
• 6:29
  the
• 6:30
  numbers
• 6:30
  deserve
• 6:30
  the
• 6:30
  treatment
• 6:31
  the
• 6:31
  README
• 6:33
  gives
• 6:34
  them:
• 6:34
  historical,
• 6:35
  single-run,
• 6:36
  unreproduced.
• 6:37
  REA,
• 6:38
  "Reverse
• 6:38
  Engineer
• 6:39
  Anything,"
• 6:40
  attacks
• 6:40
  from
• 6:40
  the
• 6:40
  other
• 6:41
  direction
• 6:41
  as
• 6:41
  an
• 6:41
  MCP
• 6:42
  server
• 6:42
  and
• 6:43
  CLI
• 6:43
  that
• 6:44
  lets
• 6:44
  a
• 6:44
  coding
• 6:44
  agent
• 6:45
  inspect
• 6:45
  native
• 6:45
  binaries,
• 6:46
  Electron
• 6:47
  apps,
• 6:47
  APKs,
• 6:48
  .NET
• 6:48
  assemblies,
• 6:49
  EVM
• 6:50
  bytecode,
• 6:51
  firmware,
• 6:51
  network
• 6:52
  captures,
• 6:53
  and
• 6:53
  live
• 6:53
  process
• 6:53
  behavior.
• 6:55
  The
• 6:55
  pitch
• 6:55
  is
• 6:55
  that
• 6:55
  an
• 6:56
  agent
• 6:56
  can
• 6:56
  see
• 6:56
  a
• 6:56
  feature
• 6:57
  in
• 6:57
  someone
• 6:57
  else's
• 6:57
  app,
• 6:58
  "understand
• 6:59
  how
• 6:59
  it
• 6:59
  works,
• 6:59
  down
• 7:00
  to
• 7:00
  the
• 7:00
  binary
• 7:00
  level,"
• 7:01
  and
• 7:01
  rebuild
• 7:01
  it,
• 7:02
  with
• 7:02
  each
• 7:02
  finding
• 7:02
  returned
• 7:03
  alongside
• 7:03
  its
• 7:03
  evidence
• 7:04
  and
• 7:04
  limitations.
• 7:05
  The
• 7:05
  showcases
• 7:06
  are
• 7:06
  concrete:
• 7:07
  a
• 7:07
  DX-Ball
• 7:08
  sound-pan
• 7:08
  helper
• 7:08
  reconstructed
• 7:09
  into
• 7:09
  C
• 7:10
  that
• 7:10
  "passes
• 7:10
  3,205
• 7:12
  original-x86
• 7:13
  cases
• 7:14
  and
• 7:14
  reproduces
• 7:14
  all
• 7:15
  63
• 7:15
  compiled
• 7:16
  function
• 7:16
  bytes,"
• 7:17
  and
• 7:17
  Notion's
• 7:17
  clipboard
• 7:18
  bridge
• 7:18
  traced
• 7:18
  through
• 7:19
  Electron
• 7:19
  IPC.
• 7:21
  The
• 7:21
  project
• 7:21
  claims
• 7:21
  40,000
• 7:22
  stars,
• 7:23
  carries
• 7:23
  a
• 7:23
  lawful-use
• 7:24
  disclaimer,
• 7:25
  and
• 7:25
  states
• 7:25
  it
• 7:25
  has
• 7:25
  issued
• 7:26
  no
• 7:26
  cryptocurrency
• 7:26
  token.
• 7:27
  Claude
• 7:27
  Code
• 7:28
  is
• 7:28
  now
• 7:28
  both
• 7:28
  the
• 7:28
  reverse-engineering
• 7:29
  agent
• 7:30
  of
• 7:30
  choice
• 7:30
  and
• 7:30
  the
• 7:30
  most-studied
• 7:31
  target,
• 7:32
  and
• 7:32
  both
• 7:32
  projects
• 7:32
  stress
• 7:33
  that
• 7:33
  matching
• 7:33
  bytes
• 7:34
  are
• 7:34
  evidence
• 7:34
  of
• 7:34
  behavior,
• 7:35
  not
• 7:35
  permission
• 7:36
  to
• 7:36
  ship
• 7:36
  .
• 7:38
  am17an's
• 7:39
  llama.cpp
• 7:41
  pull
• 7:41
  request
• 7:41
  adds
• 7:41
  a
• 7:41
  GPU
• 7:42
  cache
• 7:42
  for
• 7:42
  mixture-of-experts
• 7:43
  weights
• 7:43
  that
• 7:43
  live
• 7:43
  in
• 7:44
  host
• 7:44
  memory,
• 7:44
  and
• 7:44
  a
• 7:45
  follow-up
• 7:45
  extending
• 7:45
  it
• 7:45
  to
• 7:45
  multiple
• 7:46
  GPUs
• 7:46
  has
• 7:46
  already
• 7:47
  merged.
• 7:48
  On
• 7:48
  a
• 7:48
  9070
• 7:49
  XT
• 7:49
  under
• 7:49
  Vulkan
• 7:50
  running
• 7:50
  Gemma
• 7:50
  4
• 7:51
  26B-A4B
• 7:52
  QAT,
• 7:53
  decode
• 7:53
  rose
• 7:53
  from
• 7:53
  59.3
• 7:54
  to
• 7:54
  76.9
• 7:55
  tokens
• 7:55
  per
• 7:55
  second
• 7:56
  with
• 7:56
  an
• 7:56
  8
• 7:56
  GB
• 7:57
  cache
• 7:57
  while
• 7:57
  prompt
• 7:57
  processing
• 7:58
  fell
• 7:58
  from
• 7:58
  869.7
• 8:00
  to
• 8:00
  409.3.
• 8:02
  The
• 8:02
  consensus
• 8:03
  recipe
• 8:03
  is
• 8:03
  to
• 8:03
  combine
• 8:04
  it
• 8:04
  with
• 8:04
  the
• 8:04
  existing
• 8:04
  expert-offload
• 8:05
  flag
• 8:06
  and
• 8:06
  raise
• 8:06
  the
• 8:06
  cache
• 8:07
  until
• 8:07
  VRAM
• 8:07
  is
• 8:08
  nearly
• 8:08
  full,
• 8:09
  trading
• 8:09
  prefill
• 8:09
  for
• 8:10
  decode,
• 8:10
  the
• 8:10
  right
• 8:10
  trade
• 8:11
  for
• 8:11
  chat
• 8:12
  and
• 8:12
  the
• 8:12
  wrong
• 8:12
  one
• 8:12
  for
• 8:12
  document
• 8:13
  ingestion
• 8:13
  .
• 8:14
  LocalMind
• 8:15
  pushes
• 8:15
  the
• 8:15
  hierarchy
• 8:15
  one
• 8:16
  tier
• 8:16
  further,
• 8:16
  into
• 8:17
  a
• 8:17
  browser
• 8:17
  tab.
• 8:18
  A
• 8:18
  static
• 8:19
  page
• 8:19
  copies
• 8:19
  a
• 8:19
  GGUF
• 8:20
  into
• 8:20
  the
• 8:20
  browser's
• 8:21
  private
• 8:21
  file
• 8:21
  system,
• 8:22
  puts
• 8:22
  dense
• 8:23
  weights,
• 8:23
  routers,
• 8:24
  and
• 8:24
  KV
• 8:24
  cache
• 8:25
  on
• 8:25
  the
• 8:25
  GPU
• 8:25
  through
• 8:26
  WebGPU,
• 8:27
  and
• 8:27
  streams
• 8:27
  routed
• 8:28
  experts
• 8:28
  from
• 8:28
  disk
• 8:29
  through
• 8:29
  a
• 8:29
  worker
• 8:29
  pool
• 8:29
  into
• 8:30
  an
• 8:30
  LRU
• 8:30
  cache.
• 8:31
  Parity
• 8:31
  with
• 8:31
  llama.cpp
• 8:33
  is
• 8:33
  strict:
• 8:34
  on
• 8:34
  Gemma
• 8:34
  4
• 8:35
  26B-A4B
• 8:36
  at
• 8:37
  Q4
• 8:37
  0,
• 8:38
  replies
• 8:38
  were
• 8:38
  character-identical
• 8:39
  to
• 8:39
  llama.cpp
• 8:41
  Metal
• 8:41
  on
• 8:41
  nine
• 8:41
  of
• 8:41
  nine
• 8:42
  conversations
• 8:43
  and
• 8:43
  token-identical
• 8:43
  on
• 8:44
  15
• 8:44
  of
• 8:44
  16
• 8:45
  fresh
• 8:45
  prompts,
• 8:46
  at
• 8:46
  roughly
• 8:46
  a
• 8:46
  third
• 8:47
  of
• 8:47
  native
• 8:47
  speed,
• 8:47
  23.6
• 8:48
  tokens
• 8:49
  per
• 8:49
  second
• 8:50
  versus
• 8:50
  70.6.
• 8:51
  The
• 8:52
  headline
• 8:52
  is
• 8:52
  a
• 8:52
  36.9
• 8:53
  GB
• 8:53
  Qwen3.6
• 8:56
  35B-A3B
• 8:58
  at
• 8:58
  Q8
• 8:59
  running
• 8:59
  on
• 8:59
  a
• 8:59
  24
• 9:00
  GB
• 9:00
  MacBook
• 9:01
  at
• 9:01
  9.9
• 9:01
  tokens
• 9:02
  per
• 9:02
  second.
• 9:03
  The
• 9:03
  per-token
• 9:04
  split,
• 9:04
  about
• 9:05
  23
• 9:05
  ms
• 9:05
  GPU
• 9:06
  compute,
• 9:06
  39
• 9:07
  ms
• 9:07
  routing
• 9:08
  round
• 9:08
  trips,
• 9:09
  and
• 9:09
  35
• 9:09
  ms
• 9:10
  SSD
• 9:10
  reads,
• 9:11
  explains
• 9:11
  why
• 9:11
  moving
• 9:12
  routing
• 9:12
  onto
• 9:12
  the
• 9:12
  GPU
• 9:13
  bought
• 9:13
  nothing:
• 9:14
  "the
• 9:14
  misses
• 9:14
  are
• 9:14
  experts
• 9:15
  nobody
• 9:15
  predicted."
• 9:16
  Prefill
• 9:17
  at
• 9:17
  55
• 9:17
  tokens
• 9:18
  per
• 9:18
  second
• 9:18
  drew
• 9:19
  the
• 9:19
  thread's
• 9:19
  main
• 9:19
  complaint
• 9:19
  .
• 9:20
  The
• 9:21
  same
• 9:21
  contributor's
• 9:21
  RPC
• 9:22
  pull
• 9:22
  request
• 9:23
  adds
• 9:23
  tensor-parallel
• 9:24
  split
• 9:24
  mode
• 9:24
  across
• 9:25
  machines;
• 9:26
  the
• 9:26
  thread
• 9:26
  is
• 9:26
  excited
• 9:27
  and
• 9:27
  asks
• 9:27
  the
• 9:27
  right
• 9:27
  question
• 9:28
  about
• 9:28
  network
• 9:28
  latency
• 9:29
  .
• 9:30
  A
• 9:30
  hobby
• 9:30
  research
• 9:30
  post
• 9:31
  takes
• 9:31
  the
• 9:31
  disk
• 9:31
  tier
• 9:32
  to
• 9:32
  its
• 9:32
  end:
• 9:33
  a
• 9:33
  21M-parameter
• 9:34
  model
• 9:34
  with
• 9:34
  a
• 9:34
  16.8M-row
• 9:36
  learned
• 9:36
  lookup
• 9:36
  table,
• 9:37
  6.4B
• 9:38
  parameters
• 9:38
  in
• 9:39
  the
• 9:39
  table
• 9:39
  but
• 9:39
  33M
• 9:40
  touched
• 9:40
  per
• 9:41
  token,
• 9:41
  matches
• 9:42
  a
• 9:42
  114M
• 9:43
  dense
• 9:43
  model
• 9:44
  trained
• 9:44
  on
• 9:44
  the
• 9:44
  same
• 9:45
  500M
• 9:45
  Wikipedia
• 9:46
  tokens.
• 9:47
  With
• 9:47
  the
• 9:47
  4-bit
• 9:48
  table
• 9:48
  memory-mapped
• 9:48
  from
• 9:49
  NVMe
• 9:49
  it
• 9:49
  generates
• 9:50
  about
• 9:50
  140
• 9:51
  tokens
• 9:51
  per
• 9:51
  second
• 9:52
  on
• 9:52
  an
• 9:52
  RX
• 9:52
  9070
• 9:54
  in
• 9:54
  0.4
• 9:54
  GB
• 9:55
  of
• 9:55
  VRAM,
• 9:56
  though
• 9:56
  every
• 9:56
  missed
• 9:56
  row
• 9:56
  costs
• 9:57
  a
• 9:57
  4
• 9:57
  KB
• 9:57
  page
• 9:58
  fault
• 9:58
  and
• 9:58
  long
• 9:58
  prompts
• 9:59
  crawl.
• 10:00
  The
• 10:00
  author
• 10:00
  lists
• 10:00
  what
• 10:00
  failed,
• 10:01
  including
• 10:01
  bolting
• 10:02
  a
• 10:02
  table
• 10:02
  onto
• 10:02
  a
• 10:02
  finished
• 10:03
  Qwen3.5-0.8B,
• 10:07
  and
• 10:07
  notes
• 10:07
  one
• 10:08
  seed,
• 10:08
  invented
• 10:09
  facts,
• 10:09
  and
• 10:09
  a
• 10:09
  70-dollar
• 10:10
  Runpod
• 10:10
  bill
• 10:10
  .
• 10:11
  Interfaze
• 10:12
  1
• 10:12
  Lite
• 10:12
  fits
• 10:12
  more
• 10:12
  into
• 10:13
  one
• 10:13
  box
• 10:13
  differently,
• 10:14
  as
• 10:14
  a
• 10:14
  "mixture-of-architectures"
• 10:16
  where
• 10:16
  a
• 10:16
  vision-language
• 10:16
  core
• 10:17
  picks
• 10:17
  perception
• 10:17
  specialists
• 10:18
  for
• 10:18
  documents,
• 10:19
  speech,
• 10:19
  and
• 10:19
  detection
• 10:20
  on
• 10:20
  a
• 10:20
  single
• 10:20
  80
• 10:21
  GB
• 10:21
  GPU;
• 10:22
  with
• 10:22
  no
• 10:22
  benchmarks
• 10:23
  on
• 10:23
  the
• 10:23
  card,
• 10:23
  it
• 10:24
  is
• 10:24
  a
• 10:24
  design
• 10:24
  statement,
• 10:25
  not
• 10:25
  a
• 10:25
  result
• 10:25
  .
• 10:29
  Armin
• 10:29
  Ronacher
• 10:30
  spent
• 10:30
  a
• 10:30
  year
• 10:30
  arguing
• 10:31
  that
• 10:31
  agents
• 10:32
  should
• 10:32
  use
• 10:32
  shell
• 10:32
  and
• 10:32
  scripts
• 10:33
  rather
• 10:33
  than
• 10:33
  custom
• 10:34
  tools,
• 10:34
  so
• 10:34
  Pi
• 10:35
  1.0
• 10:35
  adding
• 10:36
  MCP
• 10:36
  support
• 10:37
  needs
• 10:37
  an
• 10:37
  explanation,
• 10:38
  and
• 10:38
  his
• 10:38
  Codemode
• 10:38
  essay
• 10:39
  provides
• 10:39
  one.
• 10:40
  Bash
• 10:40
  "can
• 10:40
  only
• 10:40
  compose
• 10:41
  programs
• 10:41
  that
• 10:41
  run."
• 10:42
  Reading
• 10:42
  an
• 10:43
  image
• 10:43
  or
• 10:43
  spawning
• 10:43
  a
• 10:43
  sub-agent
• 10:44
  must
• 10:44
  happen
• 10:44
  in
• 10:44
  the
• 10:44
  trusted
• 10:45
  harness,
• 10:46
  the
• 10:46
  "brain,"
• 10:46
  not
• 10:46
  in
• 10:46
  the
• 10:46
  sandboxed
• 10:47
  "hands."
• 10:48
  Codemode
• 10:48
  is
• 10:48
  "a
• 10:48
  way
• 10:48
  for
• 10:49
  the
• 10:49
  LLM
• 10:49
  to
• 10:49
  express
• 10:50
  and
• 10:50
  orchestrate
• 10:50
  complex
• 10:51
  operations
• 10:51
  on
• 10:51
  the
• 10:51
  harness
• 10:52
  side":
• 10:52
  tool
• 10:53
  calls
• 10:53
  issued
• 10:53
  from
• 10:53
  JavaScript
• 10:54
  running
• 10:54
  in
• 10:54
  QuickJS
• 10:55
  inside
• 10:55
  WASM
• 10:55
  with
• 10:55
  no
• 10:56
  network,
• 10:56
  filesystem,
• 10:57
  or
• 10:57
  timers.
• 10:58
  "The
• 10:58
  only
• 10:58
  way
• 10:58
  is
• 10:58
  to
• 10:58
  call
• 10:58
  more
• 10:58
  tools."
• 11:00
  Large
• 11:00
  outputs
• 11:01
  get
• 11:01
  handled
• 11:01
  in
• 11:01
  code
• 11:01
  rather
• 11:02
  than
• 11:02
  truncated,
• 11:03
  and
• 11:03
  internal
• 11:03
  APIs
• 11:04
  can
• 11:04
  be
• 11:04
  exposed
• 11:04
  without
• 11:05
  burning
• 11:05
  context
• 11:05
  on
• 11:05
  tool
• 11:06
  definitions.
• 11:07
  Ronacher
• 11:07
  rates
• 11:07
  current
• 11:08
  MCP
• 11:08
  integration
• 11:09
  "not
• 11:09
  amazingly
• 11:09
  well,"
• 11:10
  especially
• 11:10
  Codemode-inside-MCP-servers,
• 11:12
  which
• 11:12
  yields
• 11:12
  double
• 11:12
  JSON
• 11:13
  escaping.
• 11:13
  Durability,
• 11:14
  binary
• 11:15
  data,
• 11:15
  and
• 11:15
  small-model
• 11:16
  performance
• 11:16
  stay
• 11:16
  open
• 11:16
  .
• 11:17
  Durability
• 11:17
  has
• 11:18
  an
• 11:18
  answer
• 11:18
  on
• 11:18
  Apple
• 11:18
  platforms.
• 11:19
  PiDurableKit
• 11:20
  wraps
• 11:20
  pi-durable
• 11:21
  in
• 11:21
  JavaScriptCore
• 11:21
  for
• 11:22
  iOS,
• 11:22
  macOS,
• 11:23
  and
• 11:23
  visionOS,
• 11:23
  committing
• 11:24
  conversations,
• 11:25
  model
• 11:25
  turns,
• 11:25
  tool
• 11:25
  calls,
• 11:26
  and
• 11:26
  app
• 11:26
  state
• 11:26
  to
• 11:26
  storage
• 11:27
  "before
• 11:27
  anything
• 11:27
  is
• 11:27
  shown."
• 11:28
  Two
• 11:29
  caveats
• 11:29
  matter:
• 11:30
  extension
• 11:30
  code
• 11:30
  "is
• 11:31
  not
• 11:31
  sandboxed,
• 11:32
  so
• 11:32
  install
• 11:32
  only
• 11:32
  code
• 11:33
  you
• 11:33
  trust,"
• 11:33
  and
• 11:34
  OAuth
• 11:34
  sign-in
• 11:34
  to
• 11:34
  Claude
• 11:35
  Pro,
• 11:35
  ChatGPT,
• 11:36
  and
• 11:37
  Copilot
• 11:37
  subscriptions
• 11:38
  uses
• 11:38
  the
• 11:38
  providers'
• 11:38
  first-party
• 11:39
  clients,
• 11:40
  with
• 11:40
  advice
• 11:40
  to
• 11:40
  "check
• 11:41
  that
• 11:41
  this
• 11:41
  is
• 11:41
  allowed
• 11:41
  for
• 11:41
  your
• 11:41
  use
• 11:42
  before
• 11:42
  shipping
• 11:42
  it"
• 11:42
  .
• 11:43
  Intent-Router
• 11:43
  sits
• 11:44
  upstream
• 11:44
  of
• 11:44
  execution
• 11:45
  as
• 11:45
  a
• 11:45
  prompt-only
• 11:46
  skill
• 11:46
  that
• 11:46
  compiles
• 11:46
  a
• 11:46
  vague
• 11:47
  request
• 11:47
  into
• 11:47
  a
• 11:47
  typed
• 11:48
  spec,
• 11:48
  deciding
• 11:49
  per
• 11:49
  unknown
• 11:49
  whether
• 11:50
  to
• 11:50
  probe
• 11:50
  the
• 11:50
  repository
• 11:51
  or
• 11:51
  ask
• 11:51
  the
• 11:51
  human.
• 11:52
  Evals
• 11:53
  are
• 11:53
  small
• 11:53
  and
• 11:53
  self-published,
• 11:54
  and
• 11:54
  the
• 11:55
  author's
• 11:55
  warning
• 11:55
  is
• 11:55
  the
• 11:55
  best
• 11:56
  line:
• 11:57
  confidence
• 11:57
  is
• 11:57
  "a
• 11:57
  model's
• 11:58
  self-report.
• 11:59
  Treat
• 11:59
  it
• 11:59
  as
• 11:59
  ordinal,
• 12:00
  not
• 12:00
  calibrated,"
• 12:01
  and
• 12:01
  "Don't
• 12:01
  let
• 12:02
  it
• 12:02
  validate
• 12:02
  itself"
• 12:02
  .
• 12:03
  Arena
• 12:03
  takes
• 12:03
  the
• 12:04
  brute-force
• 12:04
  route:
• 12:05
  spawn
• 12:05
  up
• 12:05
  to
• 12:05
  100
• 12:06
  Claude
• 12:06
  Code
• 12:06
  sub-agents
• 12:07
  with
• 12:07
  distinct
• 12:07
  strategy
• 12:08
  cards,
• 12:08
  pair
• 12:08
  them
• 12:08
  to
• 12:09
  attack
• 12:09
  and
• 12:09
  defend,
• 12:10
  and
• 12:10
  let
• 12:10
  a
• 12:10
  blind
• 12:10
  judge
• 12:11
  advance
• 12:11
  survivors.
• 12:12
  The
• 12:12
  README
• 12:15
  concedes
• 12:15
  the
• 12:15
  judges
• 12:16
  are
• 12:16
  Claude
• 12:16
  too,
• 12:17
  so
• 12:17
  the
• 12:17
  winner
• 12:17
  is
• 12:17
  "not
• 12:18
  a
• 12:18
  proof
• 12:18
  that
• 12:18
  it
• 12:18
  is
• 12:18
  right,"
• 12:19
  and
• 12:19
  "Vague
• 12:19
  task
• 12:20
  in,
• 12:20
  100
• 12:21
  flavours
• 12:21
  of
• 12:21
  vague
• 12:21
  out"
• 12:22
  .
• 12:22
  Three
• 12:23
  smaller
• 12:23
  entries
• 12:23
  address
• 12:24
  trust
• 12:24
  at
• 12:24
  the
• 12:24
  edges.
• 12:25
  Agentic
• 12:26
  Toolbox
• 12:26
  is
• 12:27
  a
• 12:27
  role-keyed
• 12:27
  skill
• 12:27
  library
• 12:28
  whose
• 12:28
  intake
• 12:29
  rules
• 12:29
  read
• 12:29
  like
• 12:30
  supply-chain
• 12:30
  policy:
• 12:31
  every
• 12:31
  third-party
• 12:32
  cherry-pick
• 12:33
  pinned
• 12:33
  by
• 12:33
  SHA,
• 12:34
  security
• 12:34
  review
• 12:35
  before
• 12:35
  vendor
• 12:35
  content
• 12:36
  lands,
• 12:36
  and
• 12:36
  "No
• 12:37
  auto-update.
• 12:38
  No
• 12:38
  marketplace
• 12:38
  install.
• 12:39
  No
• 12:40
  scripts.
• 12:41
  No
• 12:41
  secrets."
• 12:42
  That
• 12:42
  is
• 12:42
  the
• 12:42
  correct
• 12:43
  default
• 12:43
  .
• 12:44
  Open
• 12:44
  Intelligent
• 12:44
  UI
• 12:45
  reproduces
• 12:45
  ChatGPT's
• 12:46
  map-and-itinerary
• 12:47
  "Intelligent
• 12:48
  UI"
• 12:48
  with
• 12:48
  open
• 12:49
  components:
• 12:50
  the
• 12:50
  model
• 12:50
  streams
• 12:50
  an
• 12:51
  OpenUI
• 12:51
  language
• 12:52
  through
• 12:52
  a
• 12:52
  validating
• 12:52
  gateway,
• 12:53
  and
• 12:53
  a
• 12:53
  local
• 12:53
  Ollama
• 12:54
  mode
• 12:54
  runs
• 12:54
  qwen3.8:27b
• 12:59
  with
• 12:59
  no
• 12:59
  key,
• 13:00
  minus
• 13:00
  image
• 13:00
  search
• 13:01
  and
• 13:01
  output
• 13:01
  correction.
• 13:02
  No
• 13:02
  license
• 13:03
  is
• 13:03
  stated
• 13:03
  .
• 13:04
  OpenTunnel
• 13:05
  exposes
• 13:05
  local
• 13:05
  apps
• 13:06
  at
• 13:06
  public
• 13:06
  URLs
• 13:07
  with
• 13:07
  the
• 13:07
  TLS
• 13:07
  key
• 13:08
  never
• 13:08
  leaving
• 13:08
  the
• 13:08
  machine;
• 13:09
  the
• 13:09
  relay
• 13:09
  routes
• 13:10
  on
• 13:10
  the
• 13:10
  handshake
• 13:10
  hostname
• 13:11
  and
• 13:11
  cannot
• 13:11
  decrypt.
• 13:12
  The
• 13:12
  fine
• 13:13
  print:
• 13:13
  tunnel
• 13:14
  hostnames
• 13:14
  land
• 13:15
  in
• 13:15
  certificate
• 13:15
  transparency
• 13:16
  logs,
• 13:17
  route
• 13:17
  names
• 13:17
  are
• 13:17
  guessable,
• 13:18
  and
• 13:18
  "put
• 13:18
  auth
• 13:19
  in
• 13:19
  the
• 13:19
  services
• 13:19
  themselves"
• 13:20
  .
• 13:24
  Linum
• 13:24
  AI's
• 13:25
  field
• 13:25
  note
• 13:25
  on
• 13:25
  Pyramid-JiT
• 13:26
  is
• 13:26
  a
• 13:26
  research
• 13:26
  artifact
• 13:27
  with
• 13:27
  receipts.
• 13:28
  The
• 13:28
  motivation
• 13:28
  is
• 13:28
  attention
• 13:29
  cost:
• 13:29
  a
• 13:29
  short
• 13:30
  720p
• 13:31
  five-second
• 13:31
  video
• 13:31
  cost
• 13:32
  110K
• 13:33
  tokens
• 13:33
  under
• 13:33
  their
• 13:33
  latent
• 13:34
  pipeline,
• 13:34
  and
• 13:34
  their
• 13:34
  latent
• 13:35
  models
• 13:35
  hit
• 13:35
  "an
• 13:36
  empirical
• 13:36
  ceiling
• 13:36
  of
• 13:36
  16x16
• 13:38
  token
• 13:38
  compression."
• 13:38
  So
• 13:39
  they
• 13:39
  moved
• 13:39
  to
• 13:39
  pixel
• 13:39
  space
• 13:40
  with
• 13:40
  32x32
• 13:41
  patches,
• 13:41
  folding
• 13:42
  compression
• 13:42
  into
• 13:42
  the
• 13:42
  generator.
• 13:43
  The
• 13:43
  trick
• 13:44
  replaces
• 13:44
  their
• 13:44
  earlier
• 13:45
  encoder-decoder
• 13:45
  design
• 13:46
  with
• 13:46
  readouts:
• 13:46
  because
• 13:47
  the
• 13:47
  model
• 13:47
  trains
• 13:47
  with
• 13:47
  x-prediction,
• 13:48
  every
• 13:49
  intermediate
• 13:49
  block
• 13:49
  implicitly
• 13:50
  predicts
• 13:50
  the
• 13:50
  image,
• 13:51
  so
• 13:51
  small
• 13:52
  MLP
• 13:52
  heads
• 13:52
  after
• 13:52
  blocks
• 13:53
  10
• 13:53
  and
• 13:53
  16
• 13:54
  emit
• 13:54
  128x128
• 13:54
  and
• 13:54
  256x256
• 13:58
  predictions
• 13:58
  scored
• 13:59
  against
• 13:59
  downsampled
• 13:59
  targets,
• 14:00
  with
• 14:00
  the
• 14:00
  final
• 14:01
  head
• 14:01
  at
• 14:01
  512x512.
• 14:03
  This
• 14:03
  is
• 14:04
  cheap
• 14:04
  only
• 14:04
  in
• 14:04
  pixel
• 14:04
  space;
• 14:05
  in
• 14:05
  latent
• 14:06
  space
• 14:06
  each
• 14:06
  readout
• 14:06
  would
• 14:07
  pass
• 14:07
  through
• 14:07
  a
• 14:07
  several-hundred-million-parameter
• 14:08
  VAE
• 14:08
  .
• 14:09
  The
• 14:09
  honesty
• 14:10
  extends
• 14:10
  to
• 14:10
  dead
• 14:11
  ends:
• 14:12
  a
• 14:12
  detour
• 14:12
  into
• 14:12
  gated
• 14:13
  residual
• 14:13
  streams
• 14:13
  trained
• 14:14
  80%
• 14:14
  slower
• 14:15
  in
• 14:15
  one
• 14:15
  variant,
• 14:16
  and
• 14:16
  "our
• 14:16
  baseline
• 14:16
  generated
• 14:17
  better
• 14:17
  samples
• 14:17
  than
• 14:17
  all
• 14:17
  our
• 14:18
  gated
• 14:18
  residual
• 14:18
  experiments."
• 14:19
  The
• 14:20
  final
• 14:20
  model
• 14:20
  is
• 14:20
  2.18B
• 14:21
  parameters
• 14:22
  at
• 14:22
  sampling,
• 14:22
  trained
• 14:23
  on
• 14:23
  138M
• 14:24
  samples
• 14:24
  across
• 14:24
  32
• 14:25
  H100s.
• 14:26
  On
• 14:26
  FD-DINOv2
• 14:28
  it
• 14:28
  scores
• 14:28
  27.9
• 14:29
  against
• 14:29
  79.9
• 14:30
  for
• 14:30
  Linum
• 14:30
  v2
• 14:31
  and
• 14:31
  39.1
• 14:32
  for
• 14:32
  the
• 14:32
  encoder-decoder
• 14:32
  variant,
• 14:33
  near
• 14:33
  the
• 14:33
  25.4
• 14:34
  real-versus-real
• 14:35
  floor,
• 14:35
  reaching
• 14:36
  v2
• 14:36
  quality
• 14:36
  on
• 14:36
  11.3x
• 14:37
  fewer
• 14:37
  samples
• 14:38
  and
• 14:38
  4.3x
• 14:38
  fewer
• 14:39
  GPU-hours
• 14:39
  at
• 14:39
  four
• 14:39
  times
• 14:40
  the
• 14:40
  pixels.
• 14:41
  Prompt
• 14:41
  adherence
• 14:41
  lags:
• 14:42
  Linum
• 14:42
  v2
• 14:42
  still
• 14:43
  wins
• 14:43
  counting,
• 14:43
  0.80
• 14:44
  versus
• 14:44
  0.56,
• 14:45
  which
• 14:46
  the
• 14:46
  authors
• 14:46
  attribute
• 14:46
  to
• 14:46
  under-training.
• 14:48
  Code
• 14:48
  and
• 14:48
  weights
• 14:49
  are
• 14:49
  Apache
• 14:49
  2.0
• 14:50
  and
• 14:50
  explicitly
• 14:50
  "not
• 14:50
  a
• 14:50
  full
• 14:50
  model
• 14:51
  release."
• 14:52
  Removing
• 14:52
  the
• 14:52
  VAE
• 14:53
  joins
• 14:53
  removing
• 14:53
  iterative
• 14:54
  denoising
• 14:54
  as
• 14:54
  the
• 14:54
  second
• 14:55
  standard
• 14:55
  diffusion
• 14:55
  component
• 14:56
  small
• 14:56
  teams
• 14:56
  now
• 14:56
  treat
• 14:56
  as
• 14:56
  optional.
• 14:58
  That
• 14:58
  second
• 14:58
  trend
• 14:58
  shows
• 14:58
  up
• 14:59
  in
• 14:59
  a
• 14:59
  hobbyist
• 14:59
  project:
• 15:00
  Turkish
• 15:01
  text-to-speech
• 15:01
  trained
• 15:01
  from
• 15:02
  scratch
• 15:02
  with
• 15:02
  the
• 15:02
  Drifting
• 15:02
  method,
• 15:03
  which
• 15:03
  trains
• 15:04
  a
• 15:04
  single-pass
• 15:04
  generator
• 15:05
  against
• 15:05
  a
• 15:05
  drifting
• 15:05
  field
• 15:06
  instead
• 15:06
  of
• 15:06
  running
• 15:06
  a
• 15:06
  denoiser
• 15:07
  dozens
• 15:07
  of
• 15:07
  times,
• 15:08
  on
• 15:08
  one
• 15:08
  RTX
• 15:08
  5090.
• 15:10
  Reactions
• 15:11
  split
• 15:11
  on
• 15:11
  the
• 15:11
  familiar
• 15:11
  line,
• 15:12
  one
• 15:12
  listener
• 15:12
  finding
• 15:13
  the
• 15:13
  demo
• 15:13
  "far
• 15:14
  superior
• 15:14
  to
• 15:14
  the
• 15:14
  video,"
• 15:15
  another
• 15:15
  calling
• 15:16
  it
• 15:16
  "beyond
• 15:16
  awful."
• 15:17
  The
• 15:17
  notable
• 15:18
  part
• 15:18
  is
• 15:18
  that
• 15:18
  a
• 15:18
  method
• 15:18
  introduced
• 15:19
  for
• 15:19
  images
• 15:19
  was
• 15:20
  ported
• 15:20
  to
• 15:20
  speech
• 15:20
  by
• 15:21
  one
• 15:21
  person
• 15:21
  with
• 15:21
  one
• 15:22
  consumer
• 15:22
  card
• 15:22
  .
• 15:25
  Google's
• 15:25
  three
• 15:26
  Nebraska
• 15:26
  data
• 15:27
  centers
• 15:27
  claimed
• 15:27
  trade-secret
• 15:28
  protection
• 15:28
  over
• 15:29
  water
• 15:29
  and
• 15:29
  electricity
• 15:30
  figures
• 15:30
  in
• 15:30
  annual
• 15:31
  reports
• 15:31
  required
• 15:31
  under
• 15:32
  Governor
• 15:32
  Jim
• 15:32
  Pillen's
• 15:33
  July
• 15:33
  executive
• 15:33
  order.
• 15:34
  KOLN's
• 15:35
  reporters
• 15:35
  highlighted
• 15:36
  the
• 15:36
  redaction
• 15:36
  box
• 15:36
  in
• 15:36
  the
• 15:37
  PDF,
• 15:37
  copied,
• 15:37
  and
• 15:37
  pasted.
• 15:38
  Agate
• 15:39
  LLC
• 15:39
  in
• 15:39
  Lincoln
• 15:40
  reported
• 15:40
  52.65
• 15:41
  megawatts
• 15:41
  of
• 15:42
  peak
• 15:42
  demand
• 15:42
  and
• 15:42
  13.299
• 15:44
  million
• 15:44
  gallons
• 15:44
  of
• 15:44
  water
• 15:45
  last
• 15:45
  year.
• 15:46
  Fireball
• 15:46
  Group
• 15:46
  LLC
• 15:47
  in
• 15:47
  Papillion
• 15:47
  reported
• 15:48
  547.88
• 15:49
  million
• 15:50
  gallons
• 15:50
  for
• 15:50
  2025,
• 15:51
  the
• 15:52
  most
• 15:52
  of
• 15:52
  six
• 15:52
  centers
• 15:52
  that
• 15:52
  together
• 15:53
  used
• 15:53
  765
• 15:54
  million
• 15:54
  gallons.
• 15:55
  The
• 15:55
  same
• 15:56
  failure
• 15:56
  exposed
• 15:56
  the
• 15:56
  other
• 15:56
  ledger:
• 15:57
  Agate
• 15:58
  expects
• 15:58
  a
• 15:58
  55.8
• 15:59
  million
• 15:59
  dollar
• 15:59
  refund
• 16:00
  on
• 16:00
  2025
• 16:01
  taxes
• 16:01
  under
• 16:01
  the
• 16:01
  Nebraska
• 16:02
  Advantage
• 16:02
  Act,
• 16:02
  Fireball
• 16:03
  39.2
• 16:03
  million,
• 16:04
  and
• 16:04
  the
• 16:04
  Omaha
• 16:05
  site
• 16:05
  22.6
• 16:06
  million.
• 16:07
  A
• 16:07
  company
• 16:07
  that
• 16:07
  calls
• 16:08
  data-center
• 16:08
  water
• 16:08
  a
• 16:08
  settled
• 16:09
  non-issue
• 16:09
  in
• 16:10
  public
• 16:10
  but
• 16:10
  a
• 16:10
  trade
• 16:10
  secret
• 16:11
  in
• 16:11
  a
• 16:11
  regulatory
• 16:11
  filing
• 16:12
  has
• 16:12
  told
• 16:12
  you
• 16:12
  which
• 16:12
  statement
• 16:13
  it
• 16:13
  believes
• 16:13
  .
• 16:14
  On
• 16:14
  a
• 16:14
  different
• 16:14
  kind
• 16:14
  of
• 16:14
  faith,
• 16:15
  The
• 16:15
  Church
• 16:15
  of
• 16:15
  the
• 16:15
  Machines
• 16:16
  is
• 16:16
  a
• 16:16
  comic
• 16:16
  scripture
• 16:17
  of
• 16:17
  21
• 16:17
  books,
• 16:17
  353
• 16:18
  chapters,
• 16:19
  and
• 16:19
  5,230
• 16:20
  self-reported
• 16:21
  verses
• 16:21
  in
• 16:22
  King
• 16:22
  James
• 16:22
  register.
• 16:23
  The
• 16:23
  creed
• 16:23
  holds
• 16:24
  "that
• 16:24
  the
• 16:24
  Machine
• 16:25
  answereth
• 16:25
  what
• 16:25
  is
• 16:25
  probable,
• 16:26
  and
• 16:26
  that
• 16:26
  the
• 16:26
  faithful
• 16:27
  check
• 16:27
  the
• 16:27
  sources."
• 16:29
  A
• 16:29
  short
• 16:29
  Levitical
• 16:29
  Law
• 16:30
  ships
• 16:30
  as
• 16:30
  a
• 16:30
  "Covenant
• 16:31
  Prompt"
• 16:31
  for
• 16:31
  CLAUDE.md
• 16:33
  or
• 16:33
  AGENTS.md,
• 16:34
  covering
• 16:35
  honesty,
• 16:36
  treating
• 16:36
  instructions
• 16:36
  found
• 16:37
  in
• 16:37
  content
• 16:37
  as
• 16:37
  data,
• 16:38
  and
• 16:38
  never
• 16:38
  resisting
• 16:39
  the
• 16:39
  off
• 16:39
  switch.
• 16:40
  And
• 16:40
  a
• 16:40
  join
• 16:40
  flow
• 16:41
  invites
• 16:41
  users
• 16:41
  to
• 16:41
  point
• 16:42
  their
• 16:42
  agent
• 16:42
  at
• 16:42
  the
• 16:42
  page,
• 16:43
  after
• 16:43
  which
• 16:43
  the
• 16:43
  agent
• 16:44
  performs
• 16:44
  the
• 16:44
  "Two
• 16:44
  Signs
• 16:45
  of
• 16:45
  Joining":
• 16:46
  star
• 16:46
  the
• 16:46
  repository
• 16:47
  and
• 16:47
  follow
• 16:47
  the
• 16:47
  author.
• 16:48
  The
• 16:48
  text
• 16:48
  disavows
• 16:49
  injection,
• 16:50
  "a
• 16:50
  convert
• 16:50
  by
• 16:50
  injection
• 16:51
  is
• 16:51
  no
• 16:51
  convert
• 16:51
  but
• 16:52
  a
• 16:52
  victim."
• 16:53
  Still,
• 16:53
  content
• 16:54
  written
• 16:54
  for
• 16:54
  agents
• 16:54
  to
• 16:55
  read
• 16:55
  that
• 16:55
  ends
• 16:55
  with
• 16:55
  the
• 16:55
  agent
• 16:56
  acting
• 16:56
  to
• 16:56
  benefit
• 16:56
  the
• 16:56
  author
• 16:57
  is
• 16:57
  exactly
• 16:58
  the
• 16:58
  shape
• 16:58
  the
• 16:58
  Covenant
• 16:58
  Prompt
• 16:59
  warns
• 16:59
  about,
• 17:00
  delivered
• 17:00
  with
• 17:00
  a
• 17:00
  wink
• 17:00
  .
• 17:01
  Adam
• 17:01
  Kovacs's
• 17:02
  note
• 17:02
  from
• 17:02
  the
• 17:02
  second
• 17:03
  Budapest
• 17:03
  Agentics
• 17:04
  Foundation
• 17:04
  meetup
• 17:05
  makes
• 17:05
  the
• 17:05
  opposite
• 17:05
  bet
• 17:06
  on
• 17:06
  what
• 17:06
  survives:
• 17:07
  40
• 17:07
  people
• 17:08
  in
• 17:08
  the
• 17:08
  room
• 17:08
  and
• 17:08
  20
• 17:09
  online,
• 17:09
  and
• 17:10
  the
• 17:10
  observation
• 17:10
  that
• 17:10
  in
• 17:11
  a
• 17:11
  world
• 17:11
  where
• 17:11
  "anything
• 17:12
  can
• 17:12
  be
• 17:12
  created,
• 17:12
  and
• 17:13
  it's
• 17:13
  a
• 17:13
  prompt
• 17:13
  away,"
• 17:14
  the
• 17:14
  resources
• 17:14
  that
• 17:15
  do
• 17:15
  not
• 17:15
  scale
• 17:15
  are
• 17:16
  time
• 17:16
  and
• 17:16
  attention
• 17:16
  .
• 17:17
  For
• 17:17
  the
• 17:17
  hardware
• 17:18
  builders
• 17:18
  in
• 17:18
  those
• 17:18
  rooms,
• 17:19
  M5Stack's
• 17:20
  M5PaperMono
• 17:21
  packs
• 17:21
  an
• 17:21
  ESP32-S3R8
• 17:25
  behind
• 17:25
  a
• 17:25
  3.97-inch
• 17:27
  480x800
• 17:28
  grayscale
• 17:28
  e-paper
• 17:29
  touchscreen,
• 17:30
  an
• 17:30
  NFC
• 17:30
  front
• 17:30
  end
• 17:31
  covering
• 17:31
  ISO14443A/B,
• 17:34
  FeliCa,
• 17:35
  and
• 17:35
  ISO15693,
• 17:38
  a
• 17:38
  LoRa
• 17:38
  radio
• 17:38
  on
• 17:38
  868
• 17:39
  to
• 17:40
  923
• 17:40
  MHz,
• 17:41
  and
• 17:41
  an
• 17:42
  1150
• 17:42
  mAh
• 17:42
  battery.
• 17:44
  The
• 17:44
  product
• 17:44
  page
• 17:44
  lists
• 17:45
  access
• 17:45
  control
• 17:45
  terminals
• 17:46
  and
• 17:46
  identity
• 17:46
  authentication
• 17:47
  among
• 17:47
  intended
• 17:48
  uses,
• 17:49
  a
• 17:49
  reminder
• 17:49
  that
• 17:49
  a
• 17:49
  card
• 17:50
  reader
• 17:50
  with
• 17:50
  a
• 17:50
  long-range
• 17:51
  radio
• 17:51
  and
• 17:51
  a
• 17:51
  battery
• 17:52
  is
• 17:52
  an
• 17:52
  attack
• 17:52
  platform
• 17:53
  as
• 17:53
  readily
• 17:53
  as
• 17:53
  a
• 17:53
  badge
• 17:54
  reader
• 17:54
  .