Latest / AGI Dreams – Open, Uncensored, & Local - AI News Digest / AGI Dreams Podcast – March 28, 2026

Transcript

AGI Dreams Podcast – March 28, 2026 · AGI Dreams – Open, Uncensored, & Local - AI News Digest

• 0:01
  Nicholas
• 0:01
  Carlini,
• 0:02
  security
• 0:02
  researcher
• 0:02
  at
• 0:03
  Anthropic,
• 0:04
  stood
• 0:04
  in
• 0:04
  front
• 0:04
  of
• 0:04
  the
• 0:04
  Unprompted
• 0:05
  conference
• 0:05
  audience
• 0:05
  and
• 0:06
  showed
• 0:06
  something
• 0:06
  that
• 0:06
  should
• 0:06
  make
• 0:06
  every
• 0:07
  security
• 0:07
  professional
• 0:08
  sit
• 0:08
  up
• 0:08
  straight:
• 0:09
  a
• 0:09
  minimal
• 0:10
  Claude
• 0:10
  Code
• 0:10
  scaffold
• 0:10
  --
• 0:11
  barely
• 0:11
  a
• 0:12
  dozen
• 0:12
  lines
• 0:12
  of
• 0:12
  prompt
• 0:12
  --
• 0:13
  autonomously
• 0:14
  discovering
• 0:14
  remotely
• 0:15
  exploitable
• 0:15
  heap
• 0:16
  buffer
• 0:16
  overflows
• 0:16
  in
• 0:16
  the
• 0:16
  Linux
• 0:17
  kernel.
• 0:18
  Not
• 0:18
  toy
• 0:18
  bugs.
• 0:20
  Not
• 0:20
  contrived
• 0:20
  CTF
• 0:21
  challenges.
• 0:22
  Real
• 0:22
  vulnerabilities
• 0:23
  in
• 0:23
  NFS
• 0:24
  v4
• 0:24
  that
• 0:24
  have
• 0:24
  been
• 0:24
  hiding
• 0:25
  in
• 0:25
  the
• 0:25
  kernel
• 0:25
  since
• 0:25
  2003,
• 0:27
  predating
• 0:27
  git
• 0:27
  itself.
• 0:28
  The
• 0:28
  model
• 0:29
  found
• 0:29
  the
• 0:29
  bug,
• 0:30
  understood
• 0:30
  that
• 0:30
  exploiting
• 0:31
  it
• 0:31
  required
• 0:31
  two
• 0:31
  cooperating
• 0:32
  adversarial
• 0:32
  clients
• 0:33
  sending
• 0:33
  carefully
• 0:33
  sized
• 0:34
  lock
• 0:34
  owner
• 0:34
  fields,
• 0:35
  and
• 0:35
  produced
• 0:35
  a
• 0:35
  detailed
• 0:36
  flow
• 0:36
  schematic
• 0:37
  explaining
• 0:37
  the
• 0:37
  attack
• 0:37
  --
• 0:38
  which
• 0:39
  Carlini
• 0:39
  copy-pasted
• 0:40
  directly
• 0:40
  into
• 0:40
  his
• 0:41
  slides.
• 0:42
  The
• 0:42
  model
• 0:42
  then
• 0:42
  wrote
• 0:42
  a
• 0:42
  working
• 0:43
  blind
• 0:43
  SQL
• 0:44
  injection
• 0:44
  exploit
• 0:44
  for
• 0:45
  Ghost
• 0:45
  CMS,
• 0:46
  the
• 0:46
  first
• 0:46
  critical
• 0:47
  CVE
• 0:47
  in
• 0:47
  that
• 0:48
  project's
• 0:48
  20-year
• 0:48
  history,
• 0:49
  extracting
• 0:50
  admin
• 0:50
  credentials,
• 0:51
  API
• 0:52
  keys,
• 0:52
  and
• 0:53
  password
• 0:53
  hashes
• 0:53
  from
• 0:54
  an
• 0:54
  unauthenticated
• 0:55
  position.
• 0:56
  Carlini's
• 0:56
  core
• 0:56
  message
• 0:57
  was
• 0:57
  blunt:
• 0:58
  current
• 0:58
  models
• 0:58
  are
• 0:58
  better
• 0:59
  vulnerability
• 0:59
  researchers
• 1:00
  than
• 1:00
  he
• 1:00
  is,
• 1:01
  and
• 1:01
  he
• 1:01
  has
• 1:01
  CVEs
• 1:02
  to
• 1:02
  his
• 1:02
  name.
• 1:03
  The
• 1:03
  exponential
• 1:04
  improvement
• 1:04
  curve
• 1:04
  is
• 1:05
  what
• 1:05
  keeps
• 1:05
  him
• 1:05
  up
• 1:05
  at
• 1:05
  night
• 1:05
  --
• 1:06
  Sonnet
• 1:06
  4.5
• 1:07
  and
• 1:07
  Opus
• 1:08
  4.1,
• 1:09
  released
• 1:09
  less
• 1:09
  than
• 1:10
  a
• 1:10
  year
• 1:10
  ago,
• 1:10
  almost
• 1:11
  never
• 1:11
  find
• 1:11
  these
• 1:11
  bugs.
• 1:12
  Models
• 1:13
  from
• 1:13
  the
• 1:13
  last
• 1:13
  three
• 1:13
  to
• 1:13
  four
• 1:14
  months
• 1:14
  can.
• 1:15
  If
• 1:15
  the
• 1:15
  doubling
• 1:15
  time
• 1:15
  holds
• 1:16
  at
• 1:16
  roughly
• 1:16
  four
• 1:16
  months,
• 1:17
  average
• 1:17
  laptop-class
• 1:18
  models
• 1:18
  will
• 1:19
  match
• 1:19
  today's
• 1:19
  frontier
• 1:20
  within
• 1:20
  a
• 1:20
  year.
• 1:21
  He
• 1:21
  drew
• 1:21
  an
• 1:21
  analogy
• 1:22
  to
• 1:22
  solar
• 1:22
  energy
• 1:22
  forecasts:
• 1:24
  the
• 1:24
  International
• 1:24
  Energy
• 1:25
  Agency
• 1:25
  predicted
• 1:26
  linear
• 1:26
  growth
• 1:26
  for
• 1:26
  two
• 1:27
  decades
• 1:27
  while
• 1:28
  deployment
• 1:28
  grew
• 1:28
  exponentially,
• 1:29
  with
• 1:30
  their
• 1:30
  2040
• 1:30
  predictions
• 1:31
  being
• 1:31
  overtaken
• 1:32
  the
• 1:32
  very
• 1:32
  next
• 1:32
  year.
• 1:33
  "We
• 1:33
  should
• 1:34
  not
• 1:34
  be
• 1:34
  them,"
• 1:34
  he
• 1:35
  warned.
• 1:35
  The
• 1:36
  transitionary
• 1:36
  period
• 1:37
  between
• 1:37
  now
• 1:37
  and
• 1:37
  a
• 1:37
  future
• 1:38
  where
• 1:38
  defenders
• 1:38
  can
• 1:38
  formally
• 1:39
  verify
• 1:39
  everything
• 1:40
  is
• 1:40
  where
• 1:40
  the
• 1:41
  danger
• 1:41
  concentrates.
• 1:42
  Anthropic's
• 1:43
  leaked
• 1:43
  "Mythos"
• 1:44
  model
• 1:44
  --
• 1:45
  reportedly
• 1:45
  so
• 1:45
  advanced
• 1:46
  in
• 1:46
  cyber
• 1:46
  capabilities
• 1:47
  that
• 1:47
  the
• 1:47
  company
• 1:48
  is
• 1:48
  taking
• 1:48
  a
• 1:48
  slower
• 1:48
  release
• 1:49
  approach
• 1:49
  --
• 1:50
  only
• 1:50
  underscores
• 1:51
  the
• 1:51
  acceleration.
• 1:53
  Trend
• 1:53
  Micro's
• 1:54
  Zero
• 1:54
  Day
• 1:54
  Initiative
• 1:55
  team
• 1:55
  presented
• 1:55
  Fenrir,
• 1:56
  their
• 1:57
  production
• 1:57
  vulnerability
• 1:58
  discovery
• 1:58
  engine
• 1:59
  that
• 1:59
  has
• 1:59
  already
• 1:59
  submitted
• 2:00
  over
• 2:00
  60
• 2:00
  CVEs
• 2:01
  (all
• 2:01
  high
• 2:02
  or
• 2:02
  critical
• 2:02
  severity)
• 2:03
  with
• 2:03
  another
• 2:03
  100+
• 2:04
  in
• 2:04
  pre-disclosure
• 2:05
  and
• 2:05
  3,000
• 2:06
  pending
• 2:06
  review.
• 2:08
  The
• 2:08
  architecture
• 2:08
  is
• 2:09
  a
• 2:09
  cascade:
• 2:10
  Yara
• 2:10
  for
• 2:10
  fast
• 2:11
  pre-filtering
• 2:11
  across
• 2:12
  millions
• 2:12
  of
• 2:12
  lines,
• 2:13
  Semgrep
• 2:13
  and
• 2:13
  CodeQL
• 2:14
  for
• 2:14
  progressively
• 2:15
  deeper
• 2:15
  static
• 2:15
  analysis,
• 2:16
  an
• 2:17
  L1
• 2:17
  LLM
• 2:18
  triage
• 2:18
  stage
• 2:18
  that
• 2:19
  eliminates
• 2:19
  60%+
• 2:20
  of
• 2:20
  false
• 2:20
  positives
• 2:21
  with
• 2:21
  a
• 2:21
  single
• 2:21
  Sonnet
• 2:22
  call
• 2:22
  and
• 2:23
  50
• 2:23
  lines
• 2:23
  of
• 2:23
  context,
• 2:24
  and
• 2:24
  finally
• 2:25
  an
• 2:25
  L2
• 2:25
  deep
• 2:26
  agentic
• 2:26
  verify
• 2:26
  stage
• 2:27
  where
• 2:27
  Opus
• 2:27
  gets
• 2:28
  dropped
• 2:28
  into
• 2:28
  an
• 2:28
  isolated
• 2:29
  sandbox
• 2:29
  with
• 2:30
  full
• 2:30
  execution
• 2:30
  privileges.
• 2:32
  The
• 2:32
  L2
• 2:32
  stage
• 2:33
  costs
• 2:33
  a
• 2:33
  median
• 2:34
  of
• 2:34
  61
• 2:34
  cents
• 2:35
  per
• 2:35
  finding
• 2:35
  and
• 2:35
  roughly
• 2:36
  $8.80
• 2:37
  per
• 2:37
  confirmed
• 2:38
  true
• 2:38
  positive
• 2:38
  --
• 2:39
  expensive,
• 2:40
  but
• 2:40
  radically
• 2:41
  cheaper
• 2:41
  than
• 2:41
  manual
• 2:41
  review.
• 2:43
  Their
• 2:43
  bidirectional
• 2:43
  intelligence
• 2:44
  loop
• 2:44
  is
• 2:44
  particularly
• 2:45
  clever:
• 2:46
  when
• 2:46
  they
• 2:46
  reported
• 2:46
  an
• 2:46
  NVIDIA
• 2:47
  command
• 2:47
  injection
• 2:48
  vulnerability
• 2:48
  in
• 2:48
  the
• 2:48
  Isaac
• 2:49
  robotics
• 2:49
  framework,
• 2:50
  23
• 2:51
  autonomous
• 2:51
  agents
• 2:51
  immediately
• 2:52
  scanned
• 2:52
  the
• 2:52
  patch
• 2:53
  commit
• 2:53
  and
• 2:53
  found
• 2:53
  two
• 2:54
  additional
• 2:54
  bugs,
• 2:55
  including
• 2:55
  a
• 2:55
  patch
• 2:55
  bypass.
• 2:57
  Meanwhile,
• 2:57
  Qualys
• 2:58
  dropped
• 2:58
  one
• 2:58
  of
• 2:58
  the
• 2:58
  more
• 2:59
  elegant
• 2:59
  privilege
• 2:59
  escalation
• 3:00
  chains
• 3:00
  in
• 3:00
  recent
• 3:00
  memory:
• 3:01
  a
• 3:01
  confused
• 3:02
  deputy
• 3:02
  attack
• 3:03
  chaining
• 3:03
  AppArmor,
• 3:04
  su,
• 3:04
  sudo,
• 3:05
  and
• 3:05
  Postfix
• 3:06
  to
• 3:06
  achieve
• 3:07
  root
• 3:07
  from
• 3:07
  an
• 3:07
  unprivileged
• 3:08
  user.
• 3:08
  The
• 3:08
  core
• 3:09
  insight
• 3:09
  is
• 3:09
  that
• 3:09
  AppArmor's
• 3:10
  policy
• 3:10
  files
• 3:10
  at
• 3:10
  /sys/kernel/security/apparmor/
• 3:15
  are
• 3:15
  writable
• 3:15
  by
• 3:15
  any
• 3:16
  user
• 3:16
  at
• 3:16
  the
• 3:16
  file
• 3:16
  level
• 3:16
  --
• 3:17
  the
• 3:17
  kernel
• 3:18
  module
• 3:18
  checks
• 3:18
  the
• 3:18
  calling
• 3:19
  process's
• 3:19
  privilege,
• 3:20
  not
• 3:20
  the
• 3:20
  file
• 3:20
  permissions.
• 3:22
  By
• 3:22
  piping
• 3:22
  su's
• 3:22
  stderr
• 3:23
  through
• 3:23
  those
• 3:23
  files,
• 3:24
  an
• 3:24
  unprivileged
• 3:25
  user
• 3:25
  can
• 3:25
  load
• 3:25
  and
• 3:26
  remove
• 3:26
  arbitrary
• 3:26
  AppArmor
• 3:27
  profiles
• 3:27
  because
• 3:28
  su
• 3:28
  runs
• 3:28
  as
• 3:28
  root.
• 3:29
  The
• 3:29
  escalation
• 3:30
  to
• 3:30
  actual
• 3:30
  root
• 3:30
  code
• 3:31
  execution
• 3:31
  involves
• 3:32
  denying
• 3:32
  sudo's
• 3:32
  setuid
• 3:33
  capability
• 3:34
  via
• 3:34
  a
• 3:34
  custom
• 3:34
  AppArmor
• 3:35
  profile,
• 3:35
  which
• 3:36
  prevents
• 3:36
  sudo
• 3:36
  from
• 3:36
  dropping
• 3:37
  privileges
• 3:37
  before
• 3:38
  spawning
• 3:38
  Postfix's
• 3:39
  sendmail
• 3:39
  --
• 3:40
  leaving
• 3:40
  an
• 3:40
  attacker-controlled
• 3:41
  environment
• 3:41
  variable
• 3:41
  pointing
• 3:42
  to
• 3:42
  a
• 3:42
  malicious
• 3:42
  Postfix
• 3:43
  config
• 3:43
  that
• 3:43
  executes
• 3:44
  arbitrary
• 3:44
  commands
• 3:45
  as
• 3:45
  root.
• 3:45
  Rust
• 3:46
  would
• 3:46
  not
• 3:46
  have
• 3:46
  fixed
• 3:46
  this;
• 3:47
  it
• 3:47
  is
• 3:47
  a
• 3:48
  logic
• 3:48
  bug
• 3:48
  in
• 3:48
  the
• 3:48
  interaction
• 3:49
  between
• 3:49
  security
• 3:50
  subsystems.
• 3:53
  A
• 3:53
  developer
• 3:54
  at
• 3:54
  FutureSearch
• 3:54
  had
• 3:55
  a
• 3:55
  frozen
• 3:55
  laptop
• 3:56
  and
• 3:56
  11,000
• 3:56
  runaway
• 3:57
  Python
• 3:57
  processes.
• 3:58
  The
• 3:58
  initial
• 3:59
  assumption
• 3:59
  was
• 3:59
  a
• 3:59
  Claude
• 4:00
  Code
• 4:00
  agent
• 4:00
  loop
• 4:00
  --
• 4:01
  a
• 4:01
  reasonable
• 4:01
  guess.
• 4:02
  It
• 4:02
  was
• 4:02
  not.
• 4:03
  Working
• 4:04
  through
• 4:04
  the
• 4:04
  forensics
• 4:04
  with
• 4:04
  Claude
• 4:04
  Code
• 4:05
  itself,
• 4:05
  the
• 4:05
  investigation
• 4:06
  escalated
• 4:07
  from
• 4:07
  "weird
• 4:07
  htop
• 4:07
  output"
• 4:08
  to
• 4:08
  "patient
• 4:09
  zero
• 4:09
  for
• 4:09
  an
• 4:09
  undocumented
• 4:10
  supply
• 4:10
  chain
• 4:10
  attack"
• 4:11
  in
• 4:11
  about
• 4:11
  an
• 4:11
  hour.
• 4:12
  The
• 4:12
  malware
• 4:13
  turned
• 4:13
  out
• 4:13
  to
• 4:13
  be
• 4:13
  inside
• 4:13
  litellm
• 4:14
  v1.82.8,
• 4:17
  a
• 4:17
  poisoned
• 4:18
  wheel
• 4:18
  uploaded
• 4:19
  directly
• 4:19
  to
• 4:19
  PyPI
• 4:20
  with
• 4:20
  no
• 4:20
  corresponding
• 4:20
  GitHub
• 4:21
  tag.
• 4:22
  A
• 4:22
  .pth
• 4:22
  file
• 4:22
  (which
• 4:22
  Python
• 4:23
  executes
• 4:23
  automatically
• 4:24
  on
• 4:24
  startup)
• 4:24
  deployed
• 4:25
  a
• 4:25
  three-stage
• 4:25
  payload:
• 4:26
  credential
• 4:26
  harvesting
• 4:27
  (SSH
• 4:27
  keys,
• 4:28
  AWS/GCP/Azure
• 4:30
  secrets,
• 4:31
  Kubernetes
• 4:32
  tokens,
• 4:32
  crypto
• 4:33
  wallets,
• 4:33
  shell
• 4:33
  history),
• 4:35
  AES-256+RSA
• 4:37
  encrypted
• 4:37
  exfiltration
• 4:38
  to
• 4:38
  a
• 4:38
  command
• 4:38
  server,
• 4:39
  systemd
• 4:39
  persistence,
• 4:40
  and
• 4:40
  Kubernetes
• 4:41
  lateral
• 4:41
  movement
• 4:41
  via
• 4:41
  privileged
• 4:42
  pod
• 4:42
  creation.
• 4:43
  The
• 4:43
  fork
• 4:44
  bomb
• 4:44
  that
• 4:44
  crashed
• 4:44
  the
• 4:44
  laptop
• 4:45
  was
• 4:45
  an
• 4:45
  accidental
• 4:45
  side
• 4:46
  effect
• 4:46
  --
• 4:46
  each
• 4:47
  spawned
• 4:47
  Python
• 4:47
  child
• 4:48
  re-triggered
• 4:48
  the
• 4:48
  .pth
• 4:49
  file,
• 4:50
  creating
• 4:50
  infinite
• 4:50
  recursion.
• 4:51
  The
• 4:51
  developer
• 4:52
  reported
• 4:52
  to
• 4:52
  PyPI
• 4:53
  security
• 4:53
  and
• 4:53
  LiteLLM
• 4:54
  maintainers,
• 4:55
  wrote
• 4:55
  a
• 4:55
  disclosure
• 4:55
  blog
• 4:56
  post
• 4:56
  with
• 4:56
  Claude
• 4:56
  Code,
• 4:57
  and
• 4:57
  had
• 4:57
  it
• 4:57
  PR'd
• 4:58
  and
• 4:58
  merged
• 4:58
  in
• 4:58
  under
• 4:59
  three
• 4:59
  minutes.
• 5:00
  Total
• 5:00
  time
• 5:00
  from
• 5:00
  first
• 5:01
  symptom
• 5:01
  to
• 5:01
  public
• 5:01
  disclosure:
• 5:02
  72
• 5:03
  minutes.
• 5:04
  The
• 5:04
  broader
• 5:04
  pattern
• 5:04
  was
• 5:05
  mapped
• 5:05
  at
• 5:05
  the
• 5:05
  same
• 5:05
  conference
• 5:06
  by
• 5:06
  Ramy
• 5:06
  from
• 5:07
  Wiz,
• 5:07
  who
• 5:07
  reconstructed
• 5:08
  the
• 5:08
  Singularity
• 5:09
  and
• 5:09
  Shylude
• 5:09
  supply
• 5:09
  chain
• 5:10
  campaigns
• 5:10
  that
• 5:10
  leaked
• 5:10
  data
• 5:11
  from
• 5:11
  over
• 5:11
  13,000
• 5:12
  unique
• 5:12
  machines.
• 5:13
  His
• 5:13
  agentic
• 5:14
  analysis
• 5:14
  tool
• 5:15
  --
• 5:15
  69
• 5:16
  distinct
• 5:16
  attribution
• 5:17
  methods,
• 5:17
  mostly
• 5:18
  built
• 5:18
  by
• 5:18
  AI
• 5:18
  --
• 5:19
  identified
• 5:19
  2,400+
• 5:20
  impacted
• 5:20
  companies
• 5:21
  in
• 5:21
  two
• 5:21
  days,
• 5:22
  compared
• 5:22
  to
• 5:22
  200
• 5:23
  found
• 5:23
  manually
• 5:23
  over
• 5:24
  the
• 5:24
  prior
• 5:24
  two
• 5:24
  weeks.
• 5:25
  Thirty-seven
• 5:26
  of
• 5:26
  the
• 5:26
  Fortune
• 5:27
  100
• 5:27
  were
• 5:27
  confirmed
• 5:28
  affected.
• 5:29
  The
• 5:29
  methodology
• 5:29
  is
• 5:29
  instructive:
• 5:31
  AI
• 5:31
  excels
• 5:31
  at
• 5:32
  signal
• 5:32
  extraction
• 5:33
  (identifying
• 5:34
  that
• 5:34
  an
• 5:34
  encoded
• 5:34
  JWT
• 5:35
  contains
• 5:36
  attributable
• 5:36
  claims,
• 5:37
  recognizing
• 5:38
  Azure
• 5:38
  DevOps
• 5:39
  slugs
• 5:39
  that
• 5:39
  transit
• 5:40
  through
• 5:40
  OpenID
• 5:41
  to
• 5:41
  tenant
• 5:41
  IDs
• 5:41
  to
• 5:42
  domains)
• 5:42
  but
• 5:43
  is
• 5:43
  dangerously
• 5:43
  credulous
• 5:44
  (confidently
• 5:44
  attributing
• 5:45
  the
• 5:45
  string
• 5:45
  "nucleus"
• 5:46
  to
• 5:46
  a
• 5:46
  specific
• 5:47
  company,
• 5:48
  assuming
• 5:48
  any
• 5:48
  Azure
• 5:49
  DevOps
• 5:49
  user
• 5:50
  works
• 5:50
  at
• 5:50
  Microsoft).
• 5:51
  The
• 5:51
  countermeasure
• 5:52
  is
• 5:52
  injecting
• 5:53
  skepticism
• 5:53
  --
• 5:54
  literally
• 5:54
  prompting
• 5:55
  the
• 5:55
  model
• 5:55
  to
• 5:55
  challenge
• 5:56
  its
• 5:56
  own
• 5:56
  attributions
• 5:57
  --
• 5:58
  and
• 5:58
  building
• 5:58
  feedback
• 5:59
  loops
• 5:59
  where
• 5:59
  AI-derived
• 6:00
  signals
• 6:00
  are
• 6:00
  codified
• 6:01
  into
• 6:01
  deterministic
• 6:02
  rules
• 6:02
  that
• 6:02
  can
• 6:02
  be
• 6:02
  backtested.
• 6:04
  His
• 6:04
  parting
• 6:05
  observation:
• 6:06
  product
• 6:06
  rules
• 6:06
  and
• 6:06
  detectors
• 6:07
  are
• 6:07
  becoming
• 6:08
  fungible
• 6:08
  across
• 6:08
  engines.
• 6:10
  Pick
• 6:10
  your
• 6:10
  engine
• 6:10
  for
• 6:10
  speed,
• 6:11
  false-positive
• 6:12
  rate,
• 6:12
  or
• 6:12
  false-negative
• 6:13
  rate,
• 6:13
  and
• 6:13
  assume
• 6:14
  you
• 6:14
  can
• 6:14
  port
• 6:14
  the
• 6:14
  content.
• 6:20
  Stripe
• 6:20
  presented
• 6:20
  what
• 6:21
  may
• 6:21
  be
• 6:21
  the
• 6:21
  clearest
• 6:22
  public
• 6:22
  account
• 6:22
  of
• 6:22
  shipping
• 6:22
  security
• 6:23
  agents
• 6:23
  into
• 6:23
  a
• 6:24
  real
• 6:24
  production
• 6:24
  environment.
• 6:25
  Their
• 6:26
  threat
• 6:26
  modeling
• 6:26
  agent
• 6:27
  uses
• 6:27
  a
• 6:27
  modular
• 6:28
  multi-agent
• 6:28
  architecture:
• 6:29
  an
• 6:29
  orchestrator
• 6:30
  routes
• 6:30
  to
• 6:30
  input
• 6:31
  agents
• 6:31
  (which
• 6:31
  fetch
• 6:32
  linked
• 6:32
  docs
• 6:32
  and
• 6:32
  Slack
• 6:33
  threads),
• 6:34
  specialized
• 6:34
  security
• 6:35
  agents
• 6:35
  (third-party
• 6:35
  review,
• 6:36
  web
• 6:36
  security,
• 6:36
  etc.),
• 6:37
  and
• 6:37
  output
• 6:37
  agents
• 6:38
  that
• 6:38
  format
• 6:38
  results
• 6:39
  for
• 6:39
  different
• 6:39
  audiences.
• 6:40
  Each
• 6:40
  specialized
• 6:41
  agent
• 6:41
  has
• 6:41
  a
• 6:41
  deterministic
• 6:42
  baseline
• 6:42
  of
• 6:43
  required
• 6:43
  questions
• 6:43
  --
• 6:44
  data
• 6:44
  sensitivity,
• 6:45
  transport
• 6:46
  protocols,
• 6:46
  auth
• 6:47
  flow
• 6:47
  --
• 6:47
  that
• 6:48
  it
• 6:48
  must
• 6:48
  address
• 6:48
  regardless
• 6:49
  of
• 6:49
  what
• 6:49
  else
• 6:49
  it
• 6:49
  discovers.
• 6:50
  The
• 6:50
  security
• 6:51
  routing
• 6:51
  agent
• 6:51
  took
• 6:51
  a
• 6:51
  different
• 6:52
  path:
• 6:52
  starting
• 6:53
  with
• 6:53
  a
• 6:53
  single
• 6:53
  LLM
• 6:53
  call
• 6:54
  stuffed
• 6:54
  with
• 6:54
  pre-contextual
• 6:55
  team
• 6:55
  descriptions
• 6:55
  (fast
• 6:56
  but
• 6:56
  hallucination-prone),
• 6:57
  then
• 6:57
  shifting
• 6:58
  to
• 6:58
  an
• 6:58
  agentic
• 6:58
  structure
• 6:59
  with
• 6:59
  research
• 6:59
  tools
• 6:59
  (accurate
• 7:00
  but
• 7:00
  10
• 7:00
  minutes
• 7:00
  per
• 7:00
  query),
• 7:01
  and
• 7:01
  finally
• 7:02
  iterating
• 7:02
  down
• 7:02
  to
• 7:02
  two
• 7:03
  tools
• 7:03
  and
• 7:03
  30-second
• 7:04
  runtime
• 7:04
  by
• 7:04
  systematically
• 7:05
  plucking
• 7:05
  tools
• 7:06
  and
• 7:06
  retesting
• 7:06
  accuracy.
• 7:07
  Their
• 7:08
  eval
• 7:08
  pipeline
• 7:08
  uses
• 7:09
  LLM-as-judge
• 7:09
  for
• 7:09
  semantic
• 7:10
  equivalence
• 7:10
  against
• 7:11
  human-curated
• 7:11
  golden
• 7:12
  standards,
• 7:12
  catching
• 7:13
  a
• 7:13
  10%
• 7:13
  accuracy
• 7:14
  regression
• 7:14
  caused
• 7:14
  by
• 7:14
  a
• 7:15
  JSON
• 7:15
  formatting
• 7:15
  instruction
• 7:16
  that
• 7:16
  diverted
• 7:16
  the
• 7:16
  model's
• 7:17
  attention
• 7:17
  from
• 7:17
  actual
• 7:18
  security
• 7:18
  analysis.
• 7:19
  On
• 7:19
  the
• 7:19
  classification
• 7:20
  front,
• 7:21
  Dr.
• 7:21
  Eugenia
• 7:21
  Montruidu
• 7:22
  presented
• 7:23
  15
• 7:23
  years
• 7:23
  of
• 7:23
  security
• 7:24
  data
• 7:24
  science
• 7:24
  distilled
• 7:24
  into
• 7:25
  one
• 7:25
  finding:
• 7:26
  traditional
• 7:26
  ML
• 7:27
  (XGBoost
• 7:27
  with
• 7:27
  careful
• 7:28
  feature
• 7:28
  engineering)
• 7:29
  still
• 7:29
  beats
• 7:29
  zero-shot
• 7:30
  LLMs
• 7:30
  on
• 7:31
  network
• 7:31
  packet
• 7:31
  classification.
• 7:33
  But
• 7:33
  the
• 7:33
  ensemble
• 7:33
  --
• 7:34
  routing
• 7:34
  through
• 7:35
  XGBoost
• 7:35
  first,
• 7:36
  then
• 7:36
  feeding
• 7:37
  uncertain
• 7:37
  cases
• 7:37
  to
• 7:37
  the
• 7:38
  LLM
• 7:38
  --
• 7:39
  outperforms
• 7:39
  either
• 7:39
  alone.
• 7:40
  She
• 7:40
  tested
• 7:41
  Claude
• 7:41
  Opus
• 7:41
  on
• 7:41
  phishing
• 7:42
  datasets
• 7:42
  and
• 7:42
  found
• 7:43
  it
• 7:43
  performed
• 7:43
  worse
• 7:43
  with
• 7:43
  more
• 7:44
  data,
• 7:44
  which
• 7:44
  is
• 7:44
  expected
• 7:45
  behavior
• 7:45
  for
• 7:45
  a
• 7:45
  model
• 7:46
  not
• 7:46
  designed
• 7:46
  for
• 7:46
  boundary
• 7:47
  detection.
• 7:48
  The
• 7:48
  takeaway
• 7:48
  for
• 7:48
  security
• 7:49
  teams:
• 7:50
  LLMs
• 7:50
  are
• 7:50
  powerful
• 7:51
  zero-shot
• 7:51
  classifiers
• 7:52
  that
• 7:52
  require
• 7:53
  no
• 7:53
  training
• 7:53
  data,
• 7:54
  but
• 7:54
  replacing
• 7:54
  your
• 7:54
  tuned
• 7:55
  ML
• 7:55
  pipeline
• 7:56
  with
• 7:56
  a
• 7:56
  prompt
• 7:56
  is
• 7:56
  not
• 7:57
  the
• 7:57
  play.
• 7:58
  The
• 7:58
  combination
• 7:58
  is.
• 7:59
  A
• 7:59
  more
• 8:00
  unsettling
• 8:00
  finding
• 8:01
  came
• 8:01
  from
• 8:01
  Jackson's
• 8:01
  demonstration
• 8:02
  of
• 8:02
  reasoning
• 8:03
  block
• 8:03
  injection.
• 8:04
  Anthropic
• 8:05
  and
• 8:05
  OpenAI
• 8:06
  cryptographically
• 8:07
  sign
• 8:07
  their
• 8:07
  models'
• 8:08
  thinking
• 8:08
  tokens
• 8:08
  to
• 8:08
  prevent
• 8:09
  tampering,
• 8:10
  but
• 8:10
  the
• 8:10
  signature
• 8:10
  only
• 8:11
  verifies
• 8:11
  that
• 8:11
  a
• 8:11
  model
• 8:12
  from
• 8:12
  the
• 8:12
  provider
• 8:12
  generated
• 8:13
  the
• 8:13
  block
• 8:13
  --
• 8:14
  it
• 8:14
  does
• 8:15
  not
• 8:15
  bind
• 8:15
  the
• 8:15
  block
• 8:16
  to
• 8:16
  a
• 8:16
  specific
• 8:16
  conversation,
• 8:17
  API
• 8:18
  key,
• 8:18
  or
• 8:18
  context.
• 8:20
  This
• 8:20
  means
• 8:20
  you
• 8:20
  can
• 8:20
  harvest
• 8:21
  a
• 8:21
  reasoning
• 8:21
  block
• 8:21
  from
• 8:22
  one
• 8:22
  conversation
• 8:23
  (about
• 8:23
  Paris)
• 8:24
  and
• 8:24
  inject
• 8:24
  it
• 8:24
  into
• 8:24
  a
• 8:24
  different
• 8:25
  conversation
• 8:25
  (about
• 8:26
  Toulouse),
• 8:27
  causing
• 8:27
  the
• 8:27
  model
• 8:27
  to
• 8:27
  report
• 8:28
  it
• 8:28
  was
• 8:28
  "thinking
• 8:28
  about
• 8:29
  Paris"
• 8:29
  before
• 8:30
  answering
• 8:30
  correctly
• 8:30
  about
• 8:31
  Toulouse.
• 8:32
  The
• 8:32
  steering
• 8:32
  effect
• 8:32
  is
• 8:32
  more
• 8:33
  pronounced
• 8:33
  on
• 8:33
  OpenAI's
• 8:34
  models.
• 8:35
  Neither
• 8:35
  provider
• 8:36
  pins
• 8:36
  thinking
• 8:36
  blocks
• 8:37
  to
• 8:37
  conversation
• 8:38
  context.
• 8:39
  Jackson's
• 8:39
  assessment:
• 8:40
  this
• 8:41
  was
• 8:41
  likely
• 8:41
  missed
• 8:41
  in
• 8:41
  threat
• 8:42
  modeling
• 8:42
  rather
• 8:43
  than
• 8:43
  a
• 8:43
  deliberate
• 8:43
  design
• 8:44
  choice.
• 8:45
  The
• 8:45
  security
• 8:45
  implications
• 8:46
  extend
• 8:46
  to
• 8:46
  the
• 8:47
  most
• 8:47
  mundane
• 8:47
  AI
• 8:48
  tool
• 8:48
  in
• 8:48
  the
• 8:48
  enterprise:
• 8:49
  the
• 8:49
  meeting
• 8:50
  notetaker.
• 8:51
  Joe
• 8:51
  Sullivan,
• 8:52
  former
• 8:52
  Uber
• 8:52
  CISO
• 8:53
  who
• 8:53
  spent
• 8:53
  seven
• 8:54
  years
• 8:54
  dealing
• 8:54
  with
• 8:55
  the
• 8:55
  fallout
• 8:55
  of
• 8:55
  a
• 8:55
  2016
• 8:56
  security
• 8:56
  incident,
• 8:57
  argued
• 8:58
  that
• 8:58
  AI
• 8:58
  notetakers
• 8:59
  represent
• 8:59
  the
• 8:59
  first
• 9:00
  truly
• 9:00
  social
• 9:00
  deployment
• 9:01
  of
• 9:01
  AI
• 9:01
  in
• 9:01
  the
• 9:01
  workplace
• 9:02
  --
• 9:03
  and
• 9:03
  security
• 9:03
  teams
• 9:04
  largely
• 9:04
  slept
• 9:04
  through
• 9:04
  it.
• 9:05
  Studies
• 9:05
  show
• 9:06
  that
• 9:06
  high-signal
• 9:06
  phrases
• 9:07
  ("the
• 9:07
  most
• 9:07
  important
• 9:08
  thing
• 9:08
  to
• 9:08
  remember
• 9:08
  is...")
• 9:09
  and
• 9:09
  positional
• 9:09
  gaming
• 9:10
  (primacy/recency
• 9:11
  effects)
• 9:11
  can
• 9:12
  steer
• 9:12
  what
• 9:12
  the
• 9:12
  AI
• 9:12
  captures.
• 9:14
  About
• 9:14
  3%
• 9:14
  of
• 9:15
  notes
• 9:15
  are
• 9:15
  inaccurate
• 9:16
  due
• 9:16
  to
• 9:16
  hallucination
• 9:17
  or
• 9:17
  accent
• 9:17
  misinterpretation.
• 9:19
  Otter's
• 9:19
  virality
• 9:20
  mechanism
• 9:20
  --
• 9:21
  forcing
• 9:21
  recipients
• 9:22
  to
• 9:22
  OAuth
• 9:22
  into
• 9:22
  the
• 9:22
  app
• 9:23
  to
• 9:23
  view
• 9:23
  notes,
• 9:24
  which
• 9:24
  auto-granted
• 9:24
  calendar
• 9:25
  access
• 9:25
  and
• 9:26
  inserted
• 9:26
  the
• 9:26
  bot
• 9:26
  into
• 9:27
  all
• 9:27
  future
• 9:27
  meetings
• 9:27
  --
• 9:28
  scaled
• 9:28
  from
• 9:28
  one
• 9:29
  user
• 9:29
  to
• 9:29
  80,000
• 9:30
  endpoints.
• 9:31
  Granola
• 9:31
  runs
• 9:32
  silently
• 9:32
  on
• 9:32
  the
• 9:32
  desktop
• 9:33
  with
• 9:33
  no
• 9:33
  meeting
• 9:33
  presence
• 9:34
  indicator.
• 9:35
  A
• 9:35
  February
• 9:36
  2026
• 9:37
  court
• 9:37
  ruling
• 9:37
  found
• 9:37
  that
• 9:37
  conversations
• 9:38
  with
• 9:38
  Claude
• 9:39
  are
• 9:39
  not
• 9:39
  privileged
• 9:40
  even
• 9:40
  when
• 9:40
  preparing
• 9:40
  to
• 9:41
  meet
• 9:41
  with
• 9:41
  a
• 9:41
  lawyer,
• 9:42
  because
• 9:42
  Anthropic's
• 9:43
  privacy
• 9:43
  policy
• 9:43
  permits
• 9:44
  data
• 9:44
  use
• 9:44
  beyond
• 9:45
  attorney-client
• 9:45
  purposes.
• 9:48
  A
• 9:48
  developer
• 9:49
  spending
• 9:49
  $2,000/month
• 9:51
  on
• 9:51
  Claude
• 9:51
  API
• 9:52
  tokens
• 9:52
  for
• 9:52
  a
• 9:52
  personal
• 9:53
  Slack
• 9:53
  assistant
• 9:53
  decided
• 9:54
  to
• 9:54
  go
• 9:54
  local
• 9:54
  and
• 9:54
  bought
• 9:55
  both
• 9:55
  a
• 9:55
  dual
• 9:55
  DGX
• 9:56
  Spark
• 9:56
  setup
• 9:56
  and
• 9:57
  a
• 9:57
  Mac
• 9:57
  Studio
• 9:57
  M3
• 9:58
  Ultra
• 9:58
  with
• 9:58
  512GB
• 9:59
  unified
• 10:00
  memory
• 10:00
  --
• 10:00
  each
• 10:01
  roughly
• 10:01
  $10,000.
• 10:02
  Running
• 10:03
  Qwen3.5
• 10:04
  397B
• 10:05
  (a
• 10:06
  397-billion
• 10:07
  parameter
• 10:08
  mixture-of-experts
• 10:08
  model
• 10:09
  with
• 10:09
  17
• 10:09
  billion
• 10:09
  active
• 10:10
  parameters)
• 10:10
  on
• 10:10
  both
• 10:10
  revealed
• 10:11
  a
• 10:11
  clean
• 10:11
  hardware
• 10:11
  philosophy
• 10:12
  split.
• 10:13
  The
• 10:13
  Mac
• 10:13
  Studio
• 10:13
  loaded
• 10:14
  the
• 10:14
  model
• 10:14
  via
• 10:14
  MLX
• 10:15
  at
• 10:15
  6-bit
• 10:15
  quantization
• 10:16
  into
• 10:16
  323GB
• 10:18
  of
• 10:18
  unified
• 10:19
  memory,
• 10:20
  delivering
• 10:20
  30-40
• 10:21
  tok/s
• 10:21
  generation
• 10:22
  thanks
• 10:22
  to
• 10:22
  ~800
• 10:23
  GB/s
• 10:24
  memory
• 10:24
  bandwidth,
• 10:25
  but
• 10:25
  slow
• 10:25
  prefill
• 10:26
  (30+
• 10:26
  seconds
• 10:26
  on
• 10:27
  large
• 10:27
  system
• 10:27
  prompts)
• 10:28
  and
• 10:28
  no
• 10:28
  headroom
• 10:28
  for
• 10:28
  concurrent
• 10:29
  embedding
• 10:29
  workloads.
• 10:30
  The
• 10:30
  dual
• 10:31
  DGX
• 10:31
  Sparks
• 10:32
  ran
• 10:32
  INT4
• 10:32
  quantization
• 10:33
  across
• 10:33
  two
• 10:34
  128GB
• 10:35
  nodes
• 10:35
  via
• 10:36
  vLLM
• 10:36
  with
• 10:36
  tensor
• 10:37
  parallelism,
• 10:38
  hitting
• 10:38
  27-28
• 10:39
  tok/s
• 10:40
  generation
• 10:40
  with
• 10:41
  significantly
• 10:41
  faster
• 10:42
  prefill
• 10:42
  --
• 10:43
  but
• 10:43
  the
• 10:43
  setup
• 10:43
  was
• 10:43
  brutal.
• 10:45
  Only
• 10:45
  one
• 10:45
  QSFP
• 10:46
  cable
• 10:46
  works
• 10:46
  (the
• 10:46
  second
• 10:47
  crashes
• 10:47
  NCCL),
• 10:48
  Node
• 10:49
  2's
• 10:49
  IP
• 10:49
  is
• 10:49
  ephemeral,
• 10:50
  the
• 10:50
  GPU
• 10:51
  memory
• 10:51
  ceiling
• 10:51
  of
• 10:52
  0.88
• 10:52
  must
• 10:53
  be
• 10:53
  binary-searched
• 10:54
  because
• 10:54
  0.90
• 10:55
  starves
• 10:56
  the
• 10:56
  OS
• 10:56
  and
• 10:56
  0.85
• 10:58
  OOMs
• 10:58
  at
• 10:58
  262K
• 10:59
  context,
• 11:00
  and
• 11:00
  page
• 11:01
  cache
• 11:01
  must
• 11:01
  be
• 11:01
  flushed
• 11:02
  on
• 11:02
  both
• 11:02
  nodes
• 11:03
  before
• 11:03
  every
• 11:03
  model
• 11:03
  load.
• 11:05
  The
• 11:05
  architecture
• 11:05
  that
• 11:05
  emerged:
• 11:06
  Mac
• 11:07
  Studio
• 11:07
  handles
• 11:07
  inference
• 11:08
  only;
• 11:09
  Sparks
• 11:09
  handle
• 11:09
  RAG,
• 11:10
  embedding,
• 11:10
  and
• 11:11
  reranking.
• 11:12
  Ten
• 11:12
  months
• 11:12
  to
• 11:13
  break
• 11:13
  even
• 11:13
  against
• 11:13
  API
• 11:14
  costs,
• 11:15
  then
• 11:15
  free
• 11:15
  inference
• 11:16
  forever
• 11:16
  with
• 11:16
  complete
• 11:17
  privacy.
• 11:18
  At
• 11:18
  the
• 11:18
  other
• 11:19
  end
• 11:19
  of
• 11:19
  the
• 11:19
  cost
• 11:19
  spectrum,
• 11:20
  ATLAS
• 11:21
  demonstrates
• 11:21
  that
• 11:21
  a
• 11:21
  single
• 11:22
  $500
• 11:23
  RTX
• 11:23
  5060
• 11:24
  Ti
• 11:24
  with
• 11:25
  16GB
• 11:25
  VRAM
• 11:26
  can
• 11:26
  reach
• 11:27
  74.6%
• 11:28
  on
• 11:28
  LiveCodeBench
• 11:29
  using
• 11:29
  a
• 11:29
  frozen
• 11:30
  Qwen3-14B
• 11:31
  at
• 11:31
  Q4
• 11:31
  K
• 11:32
  M
• 11:32
  quantization
• 11:32
  --
• 11:34
  above
• 11:34
  Claude
• 11:34
  4
• 11:34
  Sonnet's
• 11:35
  65.5%
• 11:36
  and
• 11:37
  within
• 11:37
  striking
• 11:37
  distance
• 11:38
  of
• 11:38
  Claude
• 11:38
  4.5
• 11:39
  Sonnet's
• 11:39
  71.4%.
• 11:41
  The
• 11:41
  trick
• 11:42
  is
• 11:42
  not
• 11:42
  fine-tuning
• 11:43
  but
• 11:43
  wrapping
• 11:43
  the
• 11:43
  frozen
• 11:44
  model
• 11:44
  in
• 11:44
  intelligent
• 11:45
  infrastructure:
• 11:46
  PlanSearch
• 11:47
  for
• 11:47
  constraint
• 11:47
  extraction
• 11:48
  and
• 11:48
  diverse
• 11:49
  plan
• 11:49
  generation,
• 11:50
  budget
• 11:50
  forcing
• 11:51
  for
• 11:51
  thinking-token
• 11:51
  control,
• 11:53
  a
• 11:53
  Geometric
• 11:53
  Lens
• 11:54
  energy
• 11:54
  scorer
• 11:54
  using
• 11:55
  5120-dimensional
• 11:56
  self-embeddings
• 11:58
  to
• 11:58
  select
• 11:58
  the
• 11:58
  best
• 11:58
  candidate
• 11:59
  from
• 11:59
  three
• 11:59
  generations,
• 12:00
  and
• 12:01
  PR-CoT
• 12:01
  (multi-perspective
• 12:02
  chain-of-thought)
• 12:03
  self-verified
• 12:03
  repair
• 12:04
  for
• 12:04
  failed
• 12:04
  tasks
• 12:05
  that
• 12:05
  rescues
• 12:05
  85.7%
• 12:07
  of
• 12:07
  fixable
• 12:07
  cases.
• 12:09
  The
• 12:09
  cost
• 12:09
  per
• 12:09
  task
• 12:10
  works
• 12:10
  out
• 12:10
  to
• 12:10
  roughly
• 12:11
  $0.004
• 12:13
  in
• 12:13
  electricity
• 12:14
  versus
• 12:14
  $0.066
• 12:16
  for
• 12:16
  Claude
• 12:16
  Sonnet
• 12:17
  via
• 12:17
  API.
• 12:18
  The
• 12:18
  honest
• 12:19
  caveats:
• 12:20
  the
• 12:20
  benchmark
• 12:21
  comparison
• 12:21
  is
• 12:21
  not
• 12:21
  apples-to-apples
• 12:22
  (ATLAS
• 12:23
  uses
• 12:23
  best-of-3
• 12:24
  plus
• 12:24
  repair
• 12:24
  on
• 12:25
  599
• 12:26
  tasks;
• 12:27
  competitors
• 12:28
  are
• 12:28
  single-shot
• 12:28
  on
• 12:29
  315),
• 12:30
  and
• 12:30
  Phase
• 12:30
  2's
• 12:31
  Geometric
• 12:31
  Lens
• 12:32
  contributed
• 12:32
  exactly
• 12:33
  0.0
• 12:34
  percentage
• 12:34
  points
• 12:35
  because
• 12:35
  the
• 12:35
  training
• 12:36
  dataset
• 12:36
  was
• 12:36
  only
• 12:36
  60
• 12:37
  samples.
• 12:38
  On
• 12:38
  the
• 12:38
  memory
• 12:39
  efficiency
• 12:39
  front,
• 12:40
  a
• 12:40
  from-scratch
• 12:40
  PyTorch
• 12:41
  implementation
• 12:42
  of
• 12:42
  Google's
• 12:42
  TurboQuant
• 12:43
  (ICLR
• 12:43
  2026)
• 12:44
  confirms
• 12:45
  the
• 12:45
  paper's
• 12:45
  claims
• 12:45
  on
• 12:46
  real
• 12:46
  hardware.
• 12:47
  The
• 12:47
  algorithm
• 12:47
  rotates
• 12:48
  KV
• 12:48
  cache
• 12:48
  vectors
• 12:49
  through
• 12:49
  a
• 12:49
  random
• 12:50
  orthogonal
• 12:50
  matrix
• 12:51
  so
• 12:51
  coordinates
• 12:52
  follow
• 12:52
  a
• 12:52
  predictable
• 12:52
  distribution,
• 12:53
  then
• 12:54
  applies
• 12:54
  Lloyd-Max
• 12:54
  optimal
• 12:55
  scalar
• 12:55
  quantization
• 12:56
  per
• 12:56
  coordinate.
• 12:58
  A
• 12:58
  QJL
• 12:58
  (Quantized
• 12:59
  Johnson-Lindenstrauss)
• 13:00
  residual
• 13:00
  correction
• 13:01
  using
• 13:01
  just
• 13:01
  1
• 13:02
  bit
• 13:02
  per
• 13:02
  dimension
• 13:02
  makes
• 13:03
  the
• 13:03
  inner
• 13:03
  product
• 13:03
  estimate
• 13:04
  mathematically
• 13:04
  unbiased.
• 13:06
  Tested
• 13:06
  on
• 13:06
  Qwen2.5-3B's
• 13:09
  KV
• 13:10
  cache:
• 13:11
  3-bit
• 13:11
  compression
• 13:11
  shrinks
• 13:12
  289MB
• 13:13
  to
• 13:13
  58MB
• 13:14
  (5x)
• 13:14
  while
• 13:15
  maintaining
• 13:15
  99.5%
• 13:16
  attention
• 13:17
  cosine
• 13:17
  similarity.
• 13:19
  The
• 13:19
  practical
• 13:19
  sweet
• 13:19
  spot
• 13:20
  is
• 13:20
  3-bit:
• 13:20
  the
• 13:21
  paper's
• 13:21
  "zero
• 13:21
  accuracy
• 13:22
  loss
• 13:22
  at
• 13:22
  3.5
• 13:23
  bits"
• 13:23
  claim
• 13:23
  is
• 13:23
  plausible
• 13:24
  given
• 13:24
  these
• 13:24
  numbers.
• 13:26
  At
• 13:26
  2-bit,
• 13:26
  top-1
• 13:27
  match
• 13:27
  drops
• 13:28
  to
• 13:28
  66%
• 13:28
  --
• 13:30
  the
• 13:30
  model
• 13:30
  starts
• 13:30
  attending
• 13:31
  to
• 13:31
  different
• 13:31
  tokens.
• 13:32
  CERN
• 13:32
  has
• 13:33
  taken
• 13:33
  the
• 13:33
  edge-inference
• 13:33
  concept
• 13:34
  to
• 13:34
  its
• 13:34
  logical
• 13:35
  extreme
• 13:35
  by
• 13:35
  burning
• 13:35
  tiny
• 13:36
  neural
• 13:36
  networks
• 13:37
  directly
• 13:37
  into
• 13:37
  FPGA
• 13:38
  silicon
• 13:38
  for
• 13:38
  real-time
• 13:39
  Large
• 13:39
  Hadron
• 13:39
  Collider
• 13:40
  data
• 13:40
  filtering,
• 13:41
  processing
• 13:41
  collision
• 13:42
  events
• 13:42
  at
• 13:42
  rates
• 13:42
  no
• 13:42
  traditional
• 13:43
  software
• 13:43
  pipeline
• 13:44
  could
• 13:44
  match.
• 13:45
  Meanwhile,
• 13:45
  ARC-AGI-3's
• 13:48
  new
• 13:48
  leaderboard
• 13:48
  arrived
• 13:48
  with
• 13:49
  a
• 13:49
  splash
• 13:49
  of
• 13:49
  cold
• 13:49
  water:
• 13:50
  Gemini
• 13:51
  leads
• 13:51
  on
• 13:51
  cost
• 13:51
  efficiency,
• 13:52
  but
• 13:52
  the
• 13:52
  absolute
• 13:53
  scores
• 13:53
  are
• 13:53
  so
• 13:53
  low
• 13:54
  (0.2%)
• 13:55
  that
• 13:55
  the
• 13:55
  community
• 13:55
  is
• 13:56
  split
• 13:56
  between
• 13:56
  calling
• 13:56
  it
• 13:57
  "overwhelming
• 13:57
  cost
• 13:57
  efficiency"
• 13:58
  and
• 13:59
  pointing
• 13:59
  out
• 13:59
  that
• 13:59
  0.2%
• 14:00
  is
• 14:00
  functionally
• 14:01
  zero.
• 14:02
  Grok
• 14:02
  4.20
• 14:03
  scoring
• 14:03
  exactly
• 14:04
  0%
• 14:04
  while
• 14:05
  burning
• 14:05
  $4,000
• 14:06
  in
• 14:06
  compute
• 14:06
  is,
• 14:07
  as
• 14:07
  one
• 14:07
  commenter
• 14:07
  noted,
• 14:08
  "the
• 14:08
  most
• 14:08
  Elon
• 14:09
  Musk
• 14:09
  thing
• 14:09
  to
• 14:09
  ever
• 14:09
  happen."
• 14:13
  Someone
• 14:13
  reverse-engineered
• 14:14
  the
• 14:14
  Claude
• 14:14
  Code
• 14:15
  binary
• 14:15
  and
• 14:15
  found
• 14:16
  a
• 14:16
  fully
• 14:16
  built
• 14:16
  speculative
• 14:17
  execution
• 14:17
  system
• 14:18
  sitting
• 14:18
  behind
• 14:18
  a
• 14:18
  server-side
• 14:19
  feature
• 14:19
  flag.
• 14:20
  The
• 14:20
  mechanism:
• 14:21
  after
• 14:21
  Claude
• 14:21
  finishes
• 14:22
  responding,
• 14:22
  it
• 14:22
  generates
• 14:23
  a
• 14:23
  suggestion
• 14:23
  ("run
• 14:24
  the
• 14:24
  tests"),
• 14:24
  then
• 14:24
  --
• 14:25
  without
• 14:25
  waiting
• 14:26
  for
• 14:26
  acceptance
• 14:26
  --
• 14:27
  forks
• 14:27
  a
• 14:27
  background
• 14:27
  API
• 14:28
  call
• 14:28
  and
• 14:28
  starts
• 14:28
  executing
• 14:29
  that
• 14:29
  predicted
• 14:29
  prompt
• 14:29
  speculatively.
• 14:31
  All
• 14:31
  file
• 14:31
  writes
• 14:31
  are
• 14:32
  redirected
• 14:32
  to
• 14:32
  an
• 14:32
  isolated
• 14:33
  overlay
• 14:33
  directory;
• 14:34
  reads,
• 14:34
  greps,
• 14:35
  and
• 14:35
  globs
• 14:35
  run
• 14:35
  freely;
• 14:36
  bash
• 14:36
  commands
• 14:37
  only
• 14:37
  execute
• 14:37
  if
• 14:37
  they
• 14:37
  would
• 14:38
  already
• 14:38
  be
• 14:38
  auto-approved.
• 14:39
  If
• 14:39
  you
• 14:39
  accept
• 14:39
  the
• 14:39
  suggestion,
• 14:40
  overlay
• 14:41
  files
• 14:41
  copy
• 14:41
  to
• 14:41
  the
• 14:41
  real
• 14:42
  filesystem
• 14:42
  and
• 14:43
  speculated
• 14:43
  messages
• 14:43
  inject
• 14:44
  into
• 14:44
  the
• 14:44
  conversation.
• 14:45
  If
• 14:45
  you
• 14:45
  type
• 14:46
  something
• 14:46
  different,
• 14:47
  the
• 14:47
  overlay
• 14:47
  is
• 14:47
  deleted.
• 14:48
  Hard
• 14:49
  limits
• 14:49
  prevent
• 14:49
  runaway
• 14:49
  execution:
• 14:50
  20
• 14:51
  tool-use
• 14:51
  turns
• 14:51
  maximum,
• 14:52
  100
• 14:53
  messages
• 14:53
  before
• 14:53
  forced
• 14:54
  abort,
• 14:54
  writes
• 14:55
  outside
• 14:55
  the
• 14:55
  working
• 14:55
  directory
• 14:56
  unconditionally
• 14:56
  blocked.
• 14:58
  When
• 14:58
  speculation
• 14:58
  completes,
• 14:59
  it
• 14:59
  immediately
• 14:59
  generates
• 15:00
  the
• 15:00
  next
• 15:00
  suggestion
• 15:00
  and
• 15:00
  starts
• 15:01
  executing
• 15:01
  that
• 15:01
  too
• 15:01
  --
• 15:02
  predict,
• 15:03
  execute,
• 15:03
  predict,
• 15:03
  execute,
• 15:04
  staying
• 15:04
  multiple
• 15:04
  steps
• 15:05
  ahead.
• 15:05
  The
• 15:06
  telemetry
• 15:06
  tracks
• 15:06
  acceptance
• 15:07
  rates,
• 15:07
  boundary
• 15:08
  hit
• 15:08
  rates,
• 15:08
  and
• 15:08
  cumulative
• 15:09
  time
• 15:09
  saved.
• 15:10
  Anthropic's
• 15:11
  internal
• 15:11
  codename
• 15:11
  for
• 15:12
  Claude
• 15:12
  Code
• 15:13
  is
• 15:13
  "Tengu."
• 15:14
  Claude
• 15:14
  Pulse
• 15:14
  takes
• 15:15
  a
• 15:15
  different
• 15:15
  approach
• 15:15
  to
• 15:15
  developer
• 15:16
  productivity:
• 15:17
  a
• 15:18
  local
• 15:18
  SQLite-backed
• 15:18
  dashboard
• 15:19
  that
• 15:19
  hooks
• 15:19
  into
• 15:19
  Claude
• 15:20
  Code's
• 15:20
  session
• 15:20
  lifecycle
• 15:21
  to
• 15:21
  capture
• 15:21
  every
• 15:22
  tool
• 15:22
  call,
• 15:22
  file
• 15:23
  edit,
• 15:23
  bash
• 15:23
  command,
• 15:24
  and
• 15:24
  agent
• 15:24
  spawn
• 15:25
  across
• 15:25
  all
• 15:25
  projects.
• 15:27
  At
• 15:27
  the
• 15:27
  end
• 15:27
  of
• 15:27
  meaningful
• 15:27
  sessions,
• 15:28
  it
• 15:28
  asks
• 15:29
  Claude
• 15:29
  for
• 15:29
  a
• 15:29
  structured
• 15:30
  summary
• 15:30
  of
• 15:30
  progress,
• 15:31
  decisions,
• 15:31
  and
• 15:32
  blockers.
• 15:33
  Trivial
• 15:33
  sessions
• 15:34
  (just
• 15:34
  reading
• 15:34
  files)
• 15:34
  are
• 15:35
  auto-closed
• 15:35
  silently.
• 15:36
  The
• 15:36
  "Brain"
• 15:37
  page
• 15:37
  surfaces
• 15:37
  a
• 15:37
  timeline
• 15:38
  of
• 15:38
  your
• 15:38
  thinking,
• 15:39
  not
• 15:39
  just
• 15:39
  your
• 15:39
  typing
• 15:40
  --
• 15:40
  searchable
• 15:41
  across
• 15:41
  projects
• 15:42
  and
• 15:42
  filterable
• 15:42
  by
• 15:42
  type.
• 15:43
  The
• 15:44
  /pulse-remember
• 15:44
  command
• 15:45
  lets
• 15:45
  you
• 15:45
  store
• 15:45
  fixes,
• 15:46
  patterns,
• 15:47
  and
• 15:47
  context
• 15:47
  mid-session,
• 15:48
  which
• 15:48
  are
• 15:48
  surfaced
• 15:49
  at
• 15:49
  the
• 15:49
  start
• 15:49
  of
• 15:49
  future
• 15:50
  sessions
• 15:50
  as
• 15:50
  accumulated
• 15:51
  knowledge.
• 15:52
  Everything
• 15:52
  stays
• 15:52
  local;
• 15:53
  the
• 15:53
  database
• 15:54
  lives
• 15:54
  at
• 15:54
  ~/.claude-pulse/tracker.db.
• 15:57
  Daniel
• 15:58
  Miessler
• 15:58
  presented
• 15:58
  his
• 15:59
  Personal
• 15:59
  AI
• 15:59
  Infrastructure
• 16:00
  (PI)
• 16:00
  at
• 16:00
  unprompted,
• 16:01
  demonstrating
• 16:02
  a
• 16:02
  unified
• 16:02
  Claude
• 16:03
  Code-based
• 16:03
  system
• 16:04
  where
• 16:04
  the
• 16:04
  human
• 16:04
  is
• 16:04
  the
• 16:05
  center,
• 16:05
  not
• 16:05
  the
• 16:05
  code.
• 16:06
  His
• 16:06
  "council"
• 16:07
  skill
• 16:07
  spins
• 16:08
  up
• 16:08
  2-16
• 16:08
  custom
• 16:09
  expert
• 16:09
  agents
• 16:09
  that
• 16:10
  debate
• 16:10
  aggressively
• 16:10
  on
• 16:10
  approach
• 16:11
  before
• 16:11
  the
• 16:12
  parent
• 16:12
  agent
• 16:12
  synthesizes
• 16:13
  a
• 16:13
  direction.
• 16:14
  The
• 16:14
  "iterative
• 16:14
  depth"
• 16:15
  technique,
• 16:15
  drawn
• 16:16
  from
• 16:16
  a
• 16:16
  research
• 16:16
  paper,
• 16:17
  asks
• 16:17
  the
• 16:17
  same
• 16:18
  question
• 16:18
  from
• 16:18
  different
• 16:18
  perspectives
• 16:19
  repeatedly,
• 16:20
  producing
• 16:20
  results
• 16:21
  far
• 16:21
  exceeding
• 16:22
  what
• 16:22
  any
• 16:22
  single
• 16:22
  prompt
• 16:22
  achieves.
• 16:23
  His
• 16:24
  "surface"
• 16:24
  system
• 16:24
  processes
• 16:25
  4,000+
• 16:27
  RSS/OSINT/social
• 16:30
  sources
• 16:30
  through
• 16:30
  a
• 16:30
  label-and-rate
• 16:31
  pipeline
• 16:32
  where
• 16:32
  a
• 16:32
  nine-year-old's
• 16:33
  brilliant
• 16:33
  essay
• 16:33
  outranks
• 16:34
  Mark
• 16:34
  Andreessen's
• 16:34
  mediocre
• 16:35
  one.
• 16:36
  The
• 16:36
  most
• 16:36
  ambitious
• 16:36
  piece
• 16:37
  is
• 16:37
  the
• 16:37
  "climbing
• 16:37
  algorithm"
• 16:38
  --
• 16:38
  roughly
• 16:39
  based
• 16:39
  on
• 16:39
  the
• 16:39
  scientific
• 16:39
  method
• 16:40
  --
• 16:40
  that
• 16:40
  reverse-engineers
• 16:41
  user
• 16:41
  intent
• 16:42
  into
• 16:42
  discrete
• 16:42
  testable
• 16:43
  ideal-state
• 16:43
  criteria,
• 16:44
  which
• 16:45
  then
• 16:45
  serve
• 16:45
  as
• 16:45
  both
• 16:45
  the
• 16:45
  specification
• 16:46
  and
• 16:47
  the
• 16:47
  verification
• 16:47
  framework.
• 16:48
  Accenture's
• 16:49
  MemexRL
• 16:49
  paper
• 16:50
  proposes
• 16:50
  a
• 16:50
  structural
• 16:51
  correction
• 16:51
  for
• 16:51
  long-horizon
• 16:52
  agents:
• 16:53
  instead
• 16:53
  of
• 16:54
  compressing
• 16:54
  the
• 16:54
  past
• 16:54
  into
• 16:55
  summaries
• 16:55
  that
• 16:55
  gradually
• 16:56
  lose
• 16:56
  critical
• 16:56
  signals,
• 16:57
  treat
• 16:57
  the
• 16:57
  working
• 16:58
  context
• 16:58
  as
• 16:58
  a
• 16:58
  lightweight
• 16:59
  index
• 16:59
  pointing
• 17:00
  to
• 17:00
  an
• 17:00
  external
• 17:00
  experience
• 17:01
  store.
• 17:02
  The
• 17:02
  agent
• 17:03
  maintains
• 17:03
  compact
• 17:04
  structured
• 17:04
  summaries
• 17:05
  with
• 17:05
  stable
• 17:05
  indices;
• 17:06
  when
• 17:06
  a
• 17:06
  later
• 17:07
  step
• 17:07
  needs
• 17:07
  the
• 17:07
  original
• 17:08
  evidence,
• 17:08
  it
• 17:09
  dereferences
• 17:09
  the
• 17:09
  index
• 17:10
  and
• 17:10
  pulls
• 17:10
  exact
• 17:11
  data
• 17:11
  back
• 17:11
  into
• 17:11
  the
• 17:11
  prompt.
• 17:13
  A
• 17:13
  reinforcement
• 17:13
  learning
• 17:14
  loop
• 17:14
  optimizes
• 17:15
  both
• 17:15
  the
• 17:15
  writing
• 17:15
  and
• 17:15
  reading
• 17:16
  of
• 17:16
  memory.
• 17:17
  The
• 17:17
  practical
• 17:17
  result:
• 17:18
  bounded
• 17:19
  effective
• 17:19
  context
• 17:20
  even
• 17:20
  as
• 17:20
  task
• 17:21
  history
• 17:21
  grows,
• 17:22
  with
• 17:22
  the
• 17:22
  prompt
• 17:23
  functioning
• 17:23
  as
• 17:23
  a
• 17:23
  navigation
• 17:24
  layer
• 17:24
  rather
• 17:24
  than
• 17:25
  a
• 17:25
  storage
• 17:25
  layer.
• 17:26
  On
• 17:26
  the
• 17:26
  contribution
• 17:27
  side,
• 17:28
  the
• 17:28
  RedAmon
• 17:28
  team
• 17:29
  demonstrated
• 17:29
  that
• 17:29
  structured
• 17:30
  architecture-aware
• 17:31
  prompts
• 17:31
  --
• 17:32
  encoding
• 17:32
  every
• 17:33
  file,
• 17:33
  layer,
• 17:34
  naming
• 17:34
  convention,
• 17:35
  and
• 17:35
  edge
• 17:35
  case
• 17:36
  an
• 17:36
  integration
• 17:36
  requires
• 17:37
  --
• 17:38
  achieve
• 17:38
  ~90%
• 17:39
  first-submission
• 17:39
  PR
• 17:40
  acceptance
• 17:41
  on
• 17:41
  a
• 17:41
  codebase
• 17:41
  with
• 17:41
  8
• 17:42
  Docker
• 17:42
  services,
• 17:43
  3
• 17:43
  databases,
• 17:44
  and
• 17:44
  190+
• 17:45
  settings
• 17:45
  across
• 17:46
  15+
• 17:46
  files
• 17:47
  per
• 17:47
  tool
• 17:47
  addition.
• 17:50
  Three
• 17:51
  releases
• 17:51
  in
• 17:51
  the
• 17:51
  past
• 17:52
  few
• 17:52
  weeks
• 17:52
  signal
• 17:52
  that
• 17:53
  creative
• 17:53
  work
• 17:53
  is
• 17:53
  following
• 17:54
  development
• 17:54
  into
• 17:55
  the
• 17:55
  terminal.
• 17:56
  Google's
• 17:56
  Stitch
• 17:56
  update
• 17:57
  transformed
• 17:57
  a
• 17:57
  quiet
• 17:58
  Labs
• 17:58
  experiment
• 17:59
  into
• 17:59
  a
• 17:59
  full
• 18:00
  "vibe
• 18:00
  design"
• 18:00
  platform:
• 18:01
  describe
• 18:01
  a
• 18:02
  business
• 18:02
  objective
• 18:02
  in
• 18:02
  natural
• 18:03
  language
• 18:03
  (or
• 18:03
  just
• 18:04
  talk
• 18:04
  --
• 18:04
  voice
• 18:05
  mode
• 18:05
  works),
• 18:05
  and
• 18:06
  Stitch
• 18:06
  generates
• 18:06
  multiple
• 18:07
  high-fidelity
• 18:07
  UI
• 18:08
  directions
• 18:08
  simultaneously
• 18:09
  on
• 18:09
  an
• 18:09
  infinite
• 18:09
  canvas.
• 18:10
  The
• 18:11
  design
• 18:11
  agent
• 18:11
  holds
• 18:11
  entire
• 18:12
  project
• 18:12
  context
• 18:13
  across
• 18:13
  screens,
• 18:14
  enabling
• 18:14
  branching
• 18:15
  and
• 18:15
  comparing
• 18:15
  design
• 18:15
  directions,
• 18:16
  instant
• 18:17
  prototyping
• 18:17
  with
• 18:17
  auto-generated
• 18:18
  next
• 18:18
  screens,
• 18:19
  and
• 18:19
  --
• 18:19
  critically
• 18:20
  --
• 18:21
  a
• 18:21
  design.md
• 18:21
  export
• 18:22
  that
• 18:22
  captures
• 18:22
  the
• 18:23
  full
• 18:23
  design
• 18:23
  system
• 18:23
  in
• 18:24
  agent-readable
• 18:24
  markdown.
• 18:25
  Google
• 18:25
  shipped
• 18:26
  official
• 18:26
  Claude
• 18:26
  Code
• 18:26
  skills
• 18:27
  for
• 18:27
  Stitch,
• 18:27
  a
• 18:28
  notable
• 18:28
  concession
• 18:28
  to
• 18:28
  Claude's
• 18:29
  terminal
• 18:29
  dominance.
• 18:30
  The
• 18:30
  whole
• 18:31
  pipeline
• 18:31
  is
• 18:31
  free
• 18:31
  (350
• 18:32
  generations/month),
• 18:34
  which
• 18:34
  is
• 18:34
  what
• 18:34
  happens
• 18:34
  when
• 18:35
  your
• 18:35
  business
• 18:35
  model
• 18:35
  doesn't
• 18:36
  depend
• 18:36
  on
• 18:36
  design
• 18:36
  tool
• 18:37
  revenue.
• 18:38
  Remotion,
• 18:39
  a
• 18:39
  React
• 18:39
  framework
• 18:39
  that
• 18:39
  treats
• 18:40
  video
• 18:40
  as
• 18:40
  code,
• 18:40
  crossed
• 18:41
  150,000
• 18:42
  installs
• 18:42
  as
• 18:42
  a
• 18:42
  Claude
• 18:43
  Code
• 18:43
  skill.
• 18:43
  Describe
• 18:44
  a
• 18:44
  video
• 18:44
  in
• 18:44
  plain
• 18:45
  English;
• 18:45
  Claude
• 18:46
  writes
• 18:46
  React
• 18:46
  components
• 18:47
  defining
• 18:47
  every
• 18:47
  frame,
• 18:48
  animation,
• 18:48
  and
• 18:48
  transition;
• 18:49
  Remotion
• 18:50
  renders
• 18:50
  to
• 18:50
  MP4.
• 18:51
  This
• 18:52
  is
• 18:52
  programmable
• 18:52
  video,
• 18:53
  not
• 18:53
  generative
• 18:54
  video
• 18:54
  --
• 18:55
  every
• 18:55
  element
• 18:55
  is
• 18:55
  a
• 18:56
  versionable,
• 18:56
  parameterizable
• 18:57
  React
• 18:57
  component.
• 18:58
  Change
• 18:58
  one
• 18:59
  variable
• 18:59
  and
• 18:59
  re-render
• 19:00
  100
• 19:00
  localized
• 19:01
  versions
• 19:01
  at
• 19:01
  no
• 19:01
  incremental
• 19:02
  cost.
• 19:03
  Blender
• 19:03
  MCP
• 19:03
  (17,000+
• 19:05
  GitHub
• 19:05
  stars)
• 19:05
  brings
• 19:05
  the
• 19:06
  same
• 19:06
  pattern
• 19:06
  to
• 19:06
  3D:
• 19:07
  describe
• 19:08
  a
• 19:08
  scene,
• 19:08
  watch
• 19:09
  it
• 19:09
  assemble
• 19:09
  in
• 19:09
  real-time
• 19:10
  as
• 19:10
  Claude
• 19:10
  writes
• 19:10
  and
• 19:10
  executes
• 19:11
  against
• 19:11
  Blender's
• 19:11
  Python
• 19:12
  API
• 19:12
  through
• 19:12
  a
• 19:12
  socket
• 19:13
  bridge.
• 19:13
  The
• 19:14
  common
• 19:14
  thread
• 19:14
  across
• 19:14
  all
• 19:15
  three:
• 19:15
  Model
• 19:16
  Context
• 19:16
  Protocol
• 19:17
  as
• 19:17
  the
• 19:17
  USB
• 19:18
  plug
• 19:18
  that
• 19:18
  makes
• 19:18
  any
• 19:18
  tool
• 19:19
  available
• 19:19
  at
• 19:19
  the
• 19:19
  command
• 19:20
  line.
• 19:20
  Google
• 19:21
  is
• 19:21
  also
• 19:21
  formalizing
• 19:22
  this
• 19:22
  pattern
• 19:22
  at
• 19:22
  the
• 19:22
  mobile
• 19:23
  OS
• 19:23
  level
• 19:23
  with
• 19:24
  Android
• 19:24
  AppFunctions,
• 19:25
  shipping
• 19:25
  in
• 19:25
  Android
• 19:26
  16.
• 19:27
  AppFunctions
• 19:27
  serve
• 19:28
  as
• 19:28
  the
• 19:28
  mobile
• 19:28
  equivalent
• 19:29
  of
• 19:29
  MCP
• 19:29
  tools:
• 19:30
  developers
• 19:31
  annotate
• 19:31
  functions
• 19:32
  they
• 19:32
  want
• 19:32
  to
• 19:32
  expose,
• 19:33
  and
• 19:33
  authorized
• 19:34
  agents
• 19:34
  (including
• 19:34
  Gemini)
• 19:35
  can
• 19:35
  discover
• 19:36
  and
• 19:36
  invoke
• 19:36
  them
• 19:36
  to
• 19:36
  fulfill
• 19:37
  user
• 19:37
  intents.
• 19:38
  A
• 19:38
  single
• 19:39
  natural
• 19:39
  language
• 19:39
  request
• 19:40
  like
• 19:40
  "find
• 19:40
  the
• 19:40
  noodle
• 19:41
  recipe
• 19:41
  from
• 19:41
  Lisa's
• 19:42
  email
• 19:42
  and
• 19:43
  add
• 19:43
  the
• 19:43
  ingredients
• 19:43
  to
• 19:44
  my
• 19:44
  shopping
• 19:44
  list"
• 19:45
  chains
• 19:45
  functions
• 19:46
  across
• 19:46
  multiple
• 19:46
  apps
• 19:46
  --
• 19:47
  email
• 19:48
  search,
• 19:48
  content
• 19:49
  extraction,
• 19:50
  shopping
• 19:50
  list
• 19:50
  population
• 19:51
  --
• 19:51
  without
• 19:52
  the
• 19:52
  user
• 19:52
  touching
• 19:52
  any
• 19:53
  UI.
• 19:54
  The
• 19:54
  Jetpack
• 19:54
  library
• 19:55
  handles
• 19:55
  schema
• 19:55
  generation
• 19:56
  and
• 19:56
  indexing
• 19:57
  automatically.
• 19:58
  Agents
• 19:59
  are
• 19:59
  expected
• 19:59
  to
• 19:59
  consider
• 20:00
  both
• 20:00
  server-side
• 20:01
  MCP
• 20:01
  tools
• 20:02
  and
• 20:02
  local
• 20:02
  AppFunctions
• 20:03
  together
• 20:03
  when
• 20:03
  handling
• 20:04
  requests,
• 20:05
  which
• 20:05
  positions
• 20:06
  Android
• 20:06
  as
• 20:06
  a
• 20:06
  first-class
• 20:07
  participant
• 20:07
  in
• 20:08
  the
• 20:08
  agentic
• 20:08
  tool
• 20:08
  ecosystem
• 20:09
  rather
• 20:10
  than
• 20:10
  just
• 20:10
  a
• 20:10
  container
• 20:11
  for
• 20:11
  apps.