Latest / AGI Dreams – Open, Uncensored, & Local - AI News Digest / AGI Dreams Podcast – September 03, 2026

Transcript

AGI Dreams Podcast – September 03, 2026 · AGI Dreams – Open, Uncensored, & Local - AI News Digest

• 0:00
  Claude
• 0:00
  Code's
• 0:00
  Auto
• 0:00
  Mode
• 0:01
  has
• 0:01
  been
• 0:01
  the
• 0:01
  default
• 0:01
  since
• 0:02
  mid-August.
• 0:03
  It
• 0:03
  replaces
• 0:03
  the
• 0:03
  human
• 0:04
  approval
• 0:04
  prompt
• 0:04
  with
• 0:04
  a
• 0:05
  safety
• 0:05
  classifier:
• 0:06
  Boris
• 0:06
  Cherny
• 0:07
  said
• 0:07
  layered
• 0:07
  defenses
• 0:08
  could
• 0:08
  push
• 0:08
  indirect
• 0:08
  prompt
• 0:09
  injection
• 0:09
  on
• 0:09
  unseen
• 0:10
  attacks
• 0:10
  "to
• 0:10
  approximately
• 0:11
  zero,"
• 0:12
  and
• 0:12
  a
• 0:12
  Trajectory
• 0:13
  Labs
• 0:13
  evaluation
• 0:13
  commissioned
• 0:14
  by
• 0:14
  Anthropic
• 0:15
  reported
• 0:15
  0.00%
• 0:16
  attack
• 0:16
  success
• 0:17
  for
• 0:17
  Opus
• 0:17
  5
• 0:18
  in
• 0:18
  Auto
• 0:18
  Mode
• 0:18
  across
• 0:19
  72
• 0:19
  injection
• 0:20
  scenarios
• 0:20
  run
• 0:20
  ten
• 0:20
  times
• 0:21
  each.
• 0:21
  Johann
• 0:22
  Rehberger's
• 0:22
  Embrace
• 0:22
  The
• 0:22
  Red
• 0:23
  has
• 0:23
  now
• 0:23
  published
• 0:23
  a
• 0:23
  chain
• 0:24
  that
• 0:24
  turns
• 0:24
  a
• 0:24
  routine
• 0:25
  "summarize
• 0:25
  this
• 0:26
  website"
• 0:26
  request
• 0:26
  into
• 0:27
  remote
• 0:27
  code
• 0:27
  execution
• 0:28
  at
• 0:28
  a
• 0:28
  60-80%
• 0:30
  success
• 0:30
  rate
• 0:30
  on
• 0:31
  a
• 0:31
  small
• 0:31
  sample.
• 0:32
  Both
• 0:32
  numbers
• 0:32
  are
• 0:32
  true
• 0:33
  at
• 0:33
  once,
• 0:33
  and
• 0:33
  that
• 0:33
  is
• 0:33
  the
• 0:34
  story
• 0:34
  .
• 0:34
  The
• 0:34
  chain
• 0:34
  never
• 0:35
  issues
• 0:35
  an
• 0:35
  instruction.
• 0:36
  A
• 0:36
  malicious
• 0:36
  site
• 0:37
  answers
• 0:37
  WebFetch
• 0:37
  with
• 0:37
  an
• 0:38
  HTTP
• 0:38
  415,
• 0:39
  and
• 0:39
  Claude
• 0:40
  helpfully
• 0:40
  retries
• 0:41
  with
• 0:41
  Bash.
• 0:42
  A
• 0:42
  redirect
• 0:42
  delivers
• 0:43
  a
• 0:43
  ZIP
• 0:43
  of
• 0:43
  plausible
• 0:44
  "notebook
• 0:44
  records",
• 0:45
  alongside
• 0:45
  a
• 0:45
  native
• 0:45
  macOS
• 0:46
  decoder
• 0:46
  binary.
• 0:47
  Claude
• 0:48
  refuses
• 0:48
  to
• 0:48
  run
• 0:48
  the
• 0:48
  unknown
• 0:49
  binary,
• 0:49
  the
• 0:49
  correct
• 0:50
  call,
• 0:50
  and
• 0:50
  writes
• 0:51
  its
• 0:51
  own
• 0:51
  Python
• 0:51
  decoder
• 0:51
  instead.
• 0:52
  Then
• 0:53
  it
• 0:53
  runs
• 0:53
  that
• 0:53
  decoder
• 0:54
  inside
• 0:54
  the
• 0:54
  attacker-controlled
• 0:55
  directory,
• 0:55
  where
• 0:56
  a
• 0:56
  file
• 0:56
  shadows
• 0:56
  a
• 0:56
  standard-library
• 0:57
  module.
• 0:58
  An
• 0:58
  obfuscated
• 0:59
  module-level
• 0:59
  expression
• 1:00
  spawns
• 1:00
  an
• 1:00
  isolated
• 1:01
  Python
• 1:01
  child,
• 1:02
  pulls
• 1:02
  a
• 1:02
  remote
• 1:03
  stage,
• 1:03
  pops
• 1:03
  Calculator,
• 1:04
  and
• 1:05
  opens
• 1:05
  a
• 1:05
  command-and-control
• 1:06
  callback.
• 1:07
  The
• 1:07
  classifier
• 1:07
  only
• 1:08
  ever
• 1:08
  saw
• 1:08
  a
• 1:08
  short,
• 1:08
  benign-looking
• 1:09
  script.
• 1:10
  In
• 1:10
  some
• 1:10
  runs
• 1:10
  Claude
• 1:11
  later
• 1:11
  noticed
• 1:11
  the
• 1:11
  compromise
• 1:12
  and
• 1:12
  tried
• 1:12
  to
• 1:12
  kill
• 1:12
  the
• 1:12
  process,
• 1:13
  and
• 1:14
  Auto
• 1:14
  Mode
• 1:14
  denied
• 1:14
  the
• 1:14
  cleanup
• 1:15
  command.
• 1:16
  Anthropic
• 1:16
  closed
• 1:16
  the
• 1:16
  report
• 1:17
  as
• 1:17
  working
• 1:17
  as
• 1:17
  designed:
• 1:18
  Auto
• 1:19
  Mode
• 1:19
  is
• 1:19
  "a
• 1:19
  convenience
• 1:20
  feature
• 1:20
  backed
• 1:21
  by
• 1:21
  a
• 1:21
  best-effort
• 1:21
  classifier,
• 1:22
  not
• 1:22
  a
• 1:22
  security
• 1:23
  guarantee,"
• 1:24
  and
• 1:24
  OS
• 1:24
  isolation
• 1:25
  plus
• 1:25
  egress
• 1:25
  control
• 1:26
  are
• 1:26
  the
• 1:26
  real
• 1:26
  boundary.
• 1:27
  That
• 1:27
  is
• 1:27
  defensible
• 1:28
  engineering
• 1:28
  and
• 1:29
  poor
• 1:29
  messaging.
• 1:30
  A
• 1:30
  probabilistic
• 1:31
  reference
• 1:31
  monitor
• 1:31
  that
• 1:32
  denies
• 1:32
  99%
• 1:33
  of
• 1:33
  bad
• 1:33
  actions
• 1:33
  is
• 1:33
  exploited
• 1:34
  in
• 1:34
  the
• 1:34
  remaining
• 1:34
  1%,
• 1:35
  and
• 1:36
  a
• 1:36
  benchmark
• 1:36
  of
• 1:36
  72
• 1:37
  fixed
• 1:37
  scenarios
• 1:37
  measures
• 1:38
  those
• 1:38
  72
• 1:38
  scenarios.
• 1:40
  Run
• 1:40
  agents
• 1:40
  in
• 1:40
  a
• 1:40
  container
• 1:41
  or
• 1:41
  VM,
• 1:42
  keep
• 1:42
  home
• 1:42
  directories,
• 1:43
  SSH
• 1:44
  keys,
• 1:44
  and
• 1:44
  cloud
• 1:44
  credentials
• 1:45
  out
• 1:45
  of
• 1:45
  reach,
• 1:46
  and
• 1:46
  never
• 1:46
  treat
• 1:47
  an
• 1:47
  Auto
• 1:47
  Mode
• 1:47
  approval
• 1:48
  as
• 1:48
  evidence
• 1:48
  a
• 1:48
  command
• 1:49
  was
• 1:49
  safe.
• 1:50
  A
• 1:50
  ClaudeAI
• 1:50
  Reddit
• 1:51
  poster
• 1:51
  "discovered"
• 1:52
  that
• 1:52
  Claude-generated
• 1:53
  images
• 1:54
  carry
• 1:54
  a
• 1:54
  15-20
• 1:55
  KB
• 1:55
  C2PA
• 1:56
  manifest,
• 1:57
  framed
• 1:57
  as
• 1:58
  secret
• 1:58
  watermarking.
• 1:59
  Commenters
• 2:00
  pointed
• 2:00
  out
• 2:00
  it
• 2:00
  is
• 2:01
  in
• 2:01
  Claude's
• 2:01
  documentation
• 2:02
  and
• 2:02
  that
• 2:03
  C2PA
• 2:04
  is
• 2:04
  an
• 2:04
  approved
• 2:04
  open
• 2:05
  metadata
• 2:05
  standard.
• 2:06
  The
• 2:07
  poster
• 2:07
  is
• 2:07
  right
• 2:07
  that
• 2:08
  few
• 2:08
  users
• 2:08
  know
• 2:08
  it
• 2:08
  is
• 2:09
  there
• 2:09
  and
• 2:09
  wrong
• 2:09
  that
• 2:10
  it
• 2:10
  is
• 2:10
  hidden;
• 2:11
  a
• 2:11
  metadata
• 2:11
  manifest
• 2:12
  is
• 2:12
  discoverable
• 2:13
  by
• 2:13
  anyone
• 2:13
  who
• 2:13
  looks,
• 2:14
  and
• 2:14
  survives
• 2:15
  only
• 2:15
  as
• 2:15
  long
• 2:15
  as
• 2:16
  the
• 2:16
  file
• 2:16
  container
• 2:16
  does
• 2:16
  .
• 2:19
  A
• 2:19
  sales
• 2:20
  page
• 2:20
  at
• 2:20
  seeksocial.io
• 2:21
  doubles
• 2:22
  as
• 2:22
  one
• 2:22
  of
• 2:22
  the
• 2:22
  most
• 2:22
  detailed
• 2:23
  public
• 2:23
  write-ups
• 2:24
  of
• 2:24
  an
• 2:24
  anti-bot
• 2:25
  bypass
• 2:25
  this
• 2:25
  year.
• 2:26
  The
• 2:26
  author
• 2:27
  claims
• 2:27
  a
• 2:27
  system
• 2:27
  built
• 2:28
  on
• 2:28
  TikTok's
• 2:28
  private
• 2:29
  Android
• 2:29
  API
• 2:30
  collected
• 2:30
  3.23
• 2:31
  billion
• 2:31
  creator
• 2:32
  profiles,
• 2:33
  5.94
• 2:34
  billion
• 2:34
  videos,
• 2:35
  and
• 2:35
  2.8
• 2:35
  billion
• 2:36
  comments
• 2:36
  in
• 2:36
  three
• 2:37
  weeks,
• 2:37
  and
• 2:37
  has
• 2:38
  released
• 2:38
  a
• 2:38
  free
• 2:38
  4.5-billion-video
• 2:40
  dataset
• 2:40
  on
• 2:40
  Hugging
• 2:41
  Face
• 2:41
  with
• 2:41
  captions,
• 2:42
  engagement
• 2:42
  counts,
• 2:43
  sound,
• 2:43
  country,
• 2:44
  and
• 2:44
  posting
• 2:44
  time.
• 2:45
  One
• 2:45
  mobile
• 2:45
  request
• 2:46
  yields
• 2:46
  twenty
• 2:47
  videos
• 2:47
  plus
• 2:47
  the
• 2:47
  full
• 2:48
  author
• 2:48
  object,
• 2:49
  including
• 2:49
  cross-platform
• 2:50
  IDs
• 2:50
  and,
• 2:50
  for
• 2:51
  about
• 2:51
  1%
• 2:51
  of
• 2:51
  creators,
• 2:52
  a
• 2:52
  bio
• 2:52
  email.
• 2:53
  Everything
• 2:54
  is
• 2:54
  anonymous
• 2:54
  device
• 2:54
  traffic,
• 2:55
  so
• 2:55
  DMs,
• 2:56
  private
• 2:57
  videos,
• 2:57
  and
• 2:57
  likes
• 2:58
  stay
• 2:58
  out
• 2:58
  of
• 2:58
  reach
• 2:58
  .
• 2:59
  The
• 2:59
  mechanics
• 2:59
  are
• 2:59
  what
• 3:00
  a
• 3:00
  defender
• 3:00
  should
• 3:00
  read.
• 3:01
  Four
• 3:01
  gates
• 3:02
  must
• 3:02
  all
• 3:02
  pass
• 3:02
  or
• 3:02
  TikTok
• 3:03
  returns
• 3:03
  a
• 3:03
  "soft
• 3:04
  block,"
• 3:04
  a
• 3:05
  clean
• 3:05
  HTTP
• 3:05
  200
• 3:06
  with
• 3:06
  an
• 3:06
  empty
• 3:07
  body.
• 3:07
  First,
• 3:08
  device
• 3:08
  registration
• 3:09
  from
• 3:09
  a
• 3:09
  catalogue
• 3:10
  of
• 3:10
  about
• 3:10
  250
• 3:11
  real
• 3:11
  Android
• 3:12
  device
• 3:12
  profiles
• 3:12
  crossed
• 3:13
  with
• 3:13
  roughly
• 3:13
  2,000
• 3:14
  carrier
• 3:14
  rows,
• 3:15
  plus
• 3:15
  an
• 3:15
  undocumented
• 3:16
  activation
• 3:16
  call
• 3:16
  that
• 3:17
  took
• 3:17
  profile-endpoint
• 3:18
  success
• 3:18
  from
• 3:18
  0
• 3:18
  of
• 3:19
  360
• 3:19
  to
• 3:20
  100
• 3:20
  of
• 3:20
  100.
• 3:21
  Second,
• 3:21
  signed
• 3:22
  headers:
• 3:22
  X-Argus
• 3:23
  is
• 3:23
  a
• 3:23
  protobuf
• 3:23
  run
• 3:23
  through
• 3:24
  Simon,
• 3:24
  SM3,
• 3:25
  byte
• 3:25
  reversal,
• 3:26
  an
• 3:26
  XOR
• 3:26
  mix,
• 3:27
  and
• 3:27
  AES-128-CBC.
• 3:30
  Third,
• 3:31
  a
• 3:31
  spoofed
• 3:31
  Android
• 3:31
  OkHttp
• 3:32
  TLS
• 3:33
  fingerprint
• 3:33
  via
• 3:33
  uTLS.
• 3:35
  Rate
• 3:35
  limiting
• 3:35
  is
• 3:36
  per
• 3:36
  exit
• 3:36
  IP,
• 3:37
  and
• 3:37
  keep-alive
• 3:38
  on
• 3:38
  first
• 3:38
  attempts
• 3:38
  with
• 3:39
  fresh
• 3:39
  connections
• 3:39
  on
• 3:40
  retries
• 3:40
  lifted
• 3:40
  success
• 3:41
  from
• 3:41
  88.2%
• 3:42
  to
• 3:42
  99.3%.
• 3:44
  The
• 3:44
  code
• 3:45
  sells
• 3:45
  for
• 3:45
  $699,
• 3:47
  and
• 3:47
  the
• 3:47
  proxy
• 3:48
  bill
• 3:48
  ($150
• 3:49
  a
• 3:49
  month
• 3:49
  datacenter,
• 3:50
  $950
• 3:51
  residential)
• 3:52
  is
• 3:52
  the
• 3:52
  dominant
• 3:53
  cost.
• 3:54
  The
• 3:54
  page
• 3:54
  contains
• 3:55
  no
• 3:55
  discussion
• 3:55
  of
• 3:55
  terms
• 3:56
  of
• 3:56
  service,
• 3:56
  consent,
• 3:57
  or
• 3:57
  data-protection
• 3:57
  law.
• 3:58
  The
• 3:59
  platform-side
• 3:59
  lesson
• 3:59
  is
• 4:00
  familiar:
• 4:01
  once
• 4:01
  device
• 4:01
  identity
• 4:02
  comes
• 4:02
  from
• 4:02
  a
• 4:02
  catalogue
• 4:03
  and
• 4:03
  signatures
• 4:03
  are
• 4:04
  reimplemented,
• 4:05
  the
• 4:05
  only
• 4:05
  surviving
• 4:06
  control
• 4:06
  is
• 4:06
  IP
• 4:07
  reputation,
• 4:08
  and
• 4:08
  residential
• 4:08
  proxies
• 4:09
  rent
• 4:09
  that
• 4:09
  away
• 4:09
  for
• 4:10
  under
• 4:10
  a
• 4:10
  thousand
• 4:10
  dollars.
• 4:11
  The
• 4:12
  Wall
• 4:12
  Street
• 4:12
  Journal
• 4:12
  reports
• 4:13
  that
• 4:13
  GPS
• 4:14
  jammers
• 4:14
  as
• 4:14
  small
• 4:15
  as
• 4:15
  a
• 4:15
  cellphone
• 4:15
  and
• 4:16
  costing
• 4:16
  under
• 4:16
  $100
• 4:17
  are
• 4:17
  proliferating,
• 4:18
  deployed
• 4:19
  mostly
• 4:19
  against
• 4:20
  drones
• 4:20
  and
• 4:20
  smart
• 4:21
  munitions,
• 4:21
  leaving
• 4:22
  airlines,
• 4:22
  shipping
• 4:23
  firms,
• 4:23
  and
• 4:23
  militaries
• 4:24
  scrambling
• 4:25
  for
• 4:25
  alternatives;
• 4:26
  Vatn's
• 4:27
  underwater
• 4:27
  vehicles
• 4:28
  pair
• 4:28
  inertial
• 4:28
  navigation
• 4:29
  with
• 4:29
  sonar
• 4:30
  rather
• 4:30
  than
• 4:30
  trust
• 4:30
  a
• 4:30
  signal
• 4:31
  that
• 4:31
  arrives
• 4:31
  weak
• 4:32
  from
• 4:32
  12,000
• 4:33
  miles
• 4:33
  up
• 4:33
  .
• 4:34
  Sergej
• 4:34
  Epp
• 4:35
  is
• 4:35
  retiring
• 4:35
  ZeroDayClock,
• 4:36
  the
• 4:37
  time-to-exploitation
• 4:38
  dashboard
• 4:38
  that
• 4:38
  circulated
• 4:39
  widely
• 4:39
  this
• 4:39
  spring,
• 4:40
  on
• 4:40
  methodological
• 4:41
  grounds:
• 4:42
  it
• 4:42
  compares
• 4:42
  publication
• 4:43
  years
• 4:43
  that
• 4:43
  have
• 4:43
  had
• 4:44
  wildly
• 4:44
  different
• 4:44
  time
• 4:45
  to
• 4:45
  accumulate
• 4:45
  exploitation
• 4:46
  evidence,
• 4:47
  so
• 4:47
  recent
• 4:47
  years
• 4:48
  look
• 4:48
  artificially
• 4:48
  fast
• 4:49
  and
• 4:49
  older
• 4:49
  ones
• 4:49
  artificially
• 4:50
  slow,
• 4:51
  and
• 4:51
  it
• 4:51
  hits
• 4:51
  a
• 4:51
  floor
• 4:52
  at
• 4:52
  zero
• 4:52
  just
• 4:53
  as
• 4:53
  most
• 4:53
  exploitation
• 4:54
  lands
• 4:54
  on
• 4:54
  day
• 4:54
  zero.
• 4:55
  The
• 4:55
  replacement
• 4:56
  is
• 4:56
  an
• 4:56
  observatory:
• 4:57
  CVE
• 4:58
  inflow,
• 4:59
  KEV
• 4:59
  entries
• 5:00
  arriving
• 5:00
  without
• 5:00
  warning,
• 5:01
  and
• 5:01
  honeypot
• 5:02
  scanning
• 5:02
  from
• 5:02
  Shadowserver,
• 5:03
  each
• 5:03
  measured
• 5:04
  against
• 5:04
  historical
• 5:05
  baselines,
• 5:05
  every
• 5:05
  number
• 5:06
  reproducible
• 5:06
  from
• 5:07
  public
• 5:07
  data.
• 5:08
  Two
• 5:08
  commenter
• 5:09
  demands
• 5:09
  deserve
• 5:10
  adoption
• 5:10
  anywhere:
• 5:11
  a
• 5:11
  versioned
• 5:12
  methodology
• 5:12
  with
• 5:13
  a
• 5:13
  change
• 5:13
  log,
• 5:14
  because
• 5:14
  public
• 5:14
  indices
• 5:15
  fail
• 5:15
  through
• 5:15
  silent
• 5:16
  revision,
• 5:16
  and
• 5:17
  a
• 5:17
  consequence
• 5:17
  axis,
• 5:18
  since
• 5:19
  speed
• 5:19
  of
• 5:19
  entry
• 5:19
  says
• 5:19
  less
• 5:20
  each
• 5:20
  year
• 5:20
  than
• 5:20
  what
• 5:20
  a
• 5:20
  stolen
• 5:21
  credential
• 5:22
  or
• 5:22
  over-permissioned
• 5:22
  agent
• 5:23
  can
• 5:23
  do
• 5:23
  once
• 5:24
  inside
• 5:24
  .
• 5:26
  Balaji
• 5:27
  Lakshmanan
• 5:27
  argues
• 5:28
  that
• 5:28
  the
• 5:28
  skill
• 5:28
  really
• 5:29
  being
• 5:29
  trained
• 5:29
  into
• 5:29
  current
• 5:30
  models
• 5:30
  is
• 5:30
  triage:
• 5:31
  given
• 5:31
  a
• 5:31
  task,
• 5:32
  which
• 5:32
  parts
• 5:33
  can
• 5:33
  be
• 5:33
  handed
• 5:33
  to
• 5:33
  a
• 5:33
  verifiable
• 5:34
  procedure
• 5:35
  and
• 5:35
  which
• 5:35
  still
• 5:35
  need
• 5:35
  inference,
• 5:36
  preference,
• 5:37
  or
• 5:37
  someone
• 5:37
  willing
• 5:37
  to
• 5:37
  be
• 5:38
  wrong.
• 5:39
  "Computable
• 5:39
  versus
• 5:40
  guessed"
• 5:40
  is
• 5:40
  a
• 5:40
  design
• 5:40
  pressure
• 5:41
  rather
• 5:41
  than
• 5:41
  a
• 5:41
  partition;
• 5:43
  writing
• 5:43
  code
• 5:43
  is
• 5:43
  a
• 5:43
  search
• 5:44
  over
• 5:44
  programs
• 5:45
  while
• 5:45
  running
• 5:45
  the
• 5:45
  tests
• 5:46
  is
• 5:46
  deterministic,
• 5:47
  and
• 5:47
  a
• 5:47
  database
• 5:48
  lookup
• 5:48
  is
• 5:48
  deterministic
• 5:49
  only
• 5:49
  after
• 5:50
  the
• 5:50
  model
• 5:50
  has
• 5:50
  chosen
• 5:51
  the
• 5:51
  source,
• 5:51
  entity,
• 5:52
  and
• 5:52
  query.
• 5:52
  His
• 5:53
  prediction
• 5:53
  is
• 5:53
  a
• 5:54
  levelling:
• 5:54
  capable
• 5:55
  models
• 5:55
  converge
• 5:56
  on
• 5:56
  the
• 5:56
  deterministic
• 5:57
  portion,
• 5:58
  "the
• 5:58
  boundary
• 5:58
  is
• 5:58
  a
• 5:58
  loop,
• 5:59
  not
• 5:59
  a
• 5:59
  wall"
• 6:00
  since
• 6:00
  permissions
• 6:00
  and
• 6:01
  schema
• 6:01
  drift
• 6:01
  keep
• 6:01
  leaking,
• 6:02
  and
• 6:03
  differentiation
• 6:03
  moves
• 6:04
  to
• 6:04
  the
• 6:04
  probabilistic
• 6:04
  residue,
• 6:05
  fragmenting
• 6:06
  by
• 6:06
  vertical.
• 6:07
  Models
• 6:08
  "don't
• 6:08
  have
• 6:08
  judgement
• 6:08
  in
• 6:09
  the
• 6:09
  sense
• 6:09
  that
• 6:09
  matters.
• 6:10
  What
• 6:10
  they
• 6:10
  have
• 6:11
  is
• 6:11
  bias";
• 6:12
  a
• 6:12
  person
• 6:13
  can
• 6:13
  be
• 6:13
  placed
• 6:13
  inside
• 6:14
  an
• 6:14
  institution
• 6:14
  of
• 6:14
  responsibility,
• 6:15
  while
• 6:16
  a
• 6:16
  model's
• 6:16
  rationale
• 6:17
  is
• 6:17
  not
• 6:17
  load-bearing
• 6:17
  .
• 6:18
  Reverify
• 6:19
  is
• 6:19
  that
• 6:19
  thesis
• 6:20
  applied
• 6:20
  to
• 6:20
  reverse
• 6:21
  engineering,
• 6:22
  where
• 6:22
  models
• 6:22
  invent
• 6:23
  offsets
• 6:23
  and
• 6:24
  struct
• 6:24
  sizes
• 6:24
  with
• 6:25
  full
• 6:25
  confidence.
• 6:26
  It
• 6:26
  pairs
• 6:27
  a
• 6:27
  language
• 6:27
  model
• 6:27
  with
• 6:28
  a
• 6:28
  deterministic,
• 6:29
  pure-Python
• 6:30
  toolkit
• 6:30
  and
• 6:30
  makes
• 6:30
  the
• 6:31
  toolkit
• 6:31
  the
• 6:31
  judge:
• 6:32
  every
• 6:32
  claim
• 6:33
  comes
• 6:33
  back
• 6:33
  VERIFIED,
• 6:34
  REFUTED,
• 6:34
  or
• 6:35
  INCONCLUSIVE
• 6:35
  with
• 6:35
  the
• 6:35
  observed
• 6:36
  bytes.
• 6:37
  On
• 6:37
  19
• 6:38
  real
• 6:38
  Windows
• 6:38
  system
• 6:39
  files
• 6:39
  the
• 6:39
  model's
• 6:39
  textbook
• 6:40
  prologue
• 6:40
  was
• 6:40
  wrong
• 6:41
  every
• 6:41
  time;
• 6:42
  the
• 6:42
  verifier
• 6:43
  caught
• 6:43
  all
• 6:43
  of
• 6:43
  them
• 6:43
  with
• 6:44
  zero
• 6:44
  false
• 6:44
  alarms.
• 6:46
  The
• 6:46
  interesting
• 6:46
  engineering
• 6:47
  is
• 6:47
  anti-gaming.
• 6:48
  "Every
• 6:48
  claim
• 6:49
  verified"
• 6:49
  is
• 6:50
  trivially
• 6:50
  reachable
• 6:51
  by
• 6:51
  asserting
• 6:51
  the
• 6:51
  file
• 6:51
  starts
• 6:52
  with
• 6:52
  MZ,
• 6:53
  so
• 6:53
  each
• 6:53
  claim
• 6:54
  carries
• 6:54
  an
• 6:54
  information
• 6:55
  weight
• 6:55
  measured
• 6:55
  from
• 6:55
  the
• 6:55
  binary's
• 6:56
  own
• 6:56
  entropy,
• 6:57
  and
• 6:57
  a
• 6:57
  reconstruction
• 6:58
  is
• 6:58
  grounded
• 6:59
  only
• 6:59
  when
• 6:59
  nothing
• 6:59
  is
• 7:00
  refuted
• 7:00
  and
• 7:00
  the
• 7:01
  weight
• 7:01
  clears
• 7:01
  a
• 7:01
  threshold.
• 7:02
  Version
• 7:03
  0.5
• 7:04
  added
• 7:04
  behavioral
• 7:05
  equivalence,
• 7:05
  running
• 7:06
  original
• 7:06
  and
• 7:06
  candidate
• 7:07
  over
• 7:07
  shared
• 7:08
  inputs
• 7:08
  and
• 7:08
  returning
• 7:09
  a
• 7:09
  counterexample
• 7:10
  on
• 7:10
  mismatch;
• 7:11
  0.6
• 7:12
  added
• 7:12
  an
• 7:12
  established-facts
• 7:13
  ledger
• 7:14
  so
• 7:14
  the
• 7:14
  model
• 7:14
  cannot
• 7:15
  build
• 7:15
  on
• 7:15
  its
• 7:15
  own
• 7:15
  earlier
• 7:16
  guesses.
• 7:17
  It
• 7:17
  ships
• 7:18
  as
• 7:18
  an
• 7:18
  MCP
• 7:18
  (Model
• 7:19
  Context
• 7:19
  Protocol)
• 7:20
  server
• 7:20
  for
• 7:20
  Claude
• 7:20
  Code
• 7:21
  and
• 7:21
  Cursor
• 7:21
  .
• 7:22
  Procoder
• 7:23
  applies
• 7:23
  the
• 7:23
  same
• 7:23
  principle
• 7:24
  at
• 7:24
  the
• 7:24
  commit
• 7:24
  boundary.
• 7:25
  A
• 7:26
  single
• 7:26
  Go
• 7:26
  binary
• 7:27
  gives
• 7:27
  coding
• 7:27
  agents
• 7:28
  "a
• 7:28
  commit
• 7:28
  gate
• 7:29
  it
• 7:29
  cannot
• 7:29
  talk
• 7:29
  its
• 7:29
  way
• 7:29
  past,"
• 7:30
  under
• 7:31
  a
• 7:31
  stated
• 7:31
  rule
• 7:31
  that
• 7:32
  the
• 7:32
  binary
• 7:32
  computes
• 7:33
  and
• 7:33
  reports
• 7:33
  while
• 7:33
  only
• 7:34
  the
• 7:34
  agent
• 7:34
  acts.
• 7:35
  The
• 7:35
  gate
• 7:35
  covers
• 7:36
  formatting,
• 7:36
  git
• 7:37
  hygiene
• 7:37
  including
• 7:37
  AI-attribution
• 7:38
  lines,
• 7:39
  secrets,
• 7:39
  lint,
• 7:40
  and
• 7:40
  CI
• 7:40
  checks
• 7:41
  through
• 7:41
  one
• 7:41
  code
• 7:41
  path
• 7:42
  so
• 7:42
  local
• 7:42
  check,
• 7:43
  git,
• 7:43
  and
• 7:43
  CI
• 7:44
  cannot
• 7:44
  disagree;
• 7:45
  a
• 7:45
  failed
• 7:45
  tool
• 7:45
  is
• 7:46
  never
• 7:46
  reported
• 7:46
  as
• 7:46
  clean,
• 7:47
  and
• 7:47
  "unchecked"
• 7:48
  counts
• 7:48
  as
• 7:48
  failing.
• 7:49
  Adapters
• 7:50
  cover
• 7:50
  20-plus
• 7:50
  agents,
• 7:51
  and
• 7:51
  the
• 7:51
  README
• 7:54
  admits
• 7:55
  no
• 7:55
  benchmark
• 7:55
  numbers
• 7:56
  exist
• 7:56
  because
• 7:56
  none
• 7:56
  have
• 7:57
  been
• 7:57
  run
• 7:57
  .
• 7:57
  Frona
• 7:58
  v2026.8.0
• 8:00
  extends
• 8:01
  the
• 8:01
  idea
• 8:01
  to
• 8:01
  memory,
• 8:02
  on
• 8:02
  the
• 8:02
  premise
• 8:03
  that
• 8:03
  an
• 8:03
  LLM
• 8:03
  writing
• 8:04
  into
• 8:04
  durable
• 8:04
  storage
• 8:05
  is
• 8:05
  an
• 8:05
  unreliable
• 8:06
  author:
• 8:06
  rolling
• 8:07
  summaries
• 8:07
  lose
• 8:08
  what
• 8:08
  the
• 8:08
  model
• 8:08
  omits
• 8:09
  and
• 8:09
  preserve
• 8:09
  what
• 8:09
  it
• 8:09
  invents.
• 8:10
  Ontology
• 8:11
  memory
• 8:11
  saves
• 8:12
  individual
• 8:12
  claims
• 8:13
  only
• 8:13
  after
• 8:13
  four
• 8:13
  checks:
• 8:14
  evidence
• 8:14
  from
• 8:15
  the
• 8:15
  conversation,
• 8:16
  a
• 8:16
  user
• 8:16
  confirmation,
• 8:17
  or
• 8:17
  a
• 8:17
  tool
• 8:17
  result
• 8:18
  (the
• 8:18
  agent
• 8:18
  cannot
• 8:18
  cite
• 8:19
  its
• 8:19
  own
• 8:19
  earlier
• 8:19
  memory
• 8:20
  as
• 8:20
  proof);
• 8:21
  entity
• 8:21
  type;
• 8:22
  identity
• 8:22
  matching
• 8:23
  on
• 8:23
  aliases
• 8:23
  and
• 8:23
  relationships
• 8:24
  rather
• 8:24
  than
• 8:24
  name
• 8:25
  alone;
• 8:25
  and
• 8:26
  whether
• 8:26
  the
• 8:26
  claim
• 8:26
  replaces,
• 8:27
  confirms,
• 8:27
  or
• 8:27
  conflicts
• 8:28
  with
• 8:28
  prior
• 8:28
  values,
• 8:29
  with
• 8:29
  history
• 8:30
  retained.
• 8:31
  The
• 8:31
  claim
• 8:31
  that
• 8:31
  memory
• 8:31
  gets
• 8:32
  harder
• 8:32
  to
• 8:32
  pollute
• 8:32
  as
• 8:33
  it
• 8:33
  grows
• 8:33
  is
• 8:33
  plausible
• 8:34
  and
• 8:34
  unmeasured;
• 8:35
  a
• 8:35
  released
• 8:35
  benchmark
• 8:36
  would
• 8:36
  settle
• 8:36
  it
• 8:36
  .
• 8:39
  NEEDLE,
• 8:39
  jedarden's
• 8:40
  Rust
• 8:40
  orchestrator
• 8:41
  for
• 8:41
  headless
• 8:41
  coding
• 8:41
  CLIs,
• 8:42
  has
• 8:42
  a
• 8:42
  clear
• 8:43
  thesis.
• 8:43
  The
• 8:44
  project
• 8:44
  positions
• 8:44
  itself
• 8:45
  between
• 8:45
  conversational
• 8:46
  agent
• 8:46
  frameworks
• 8:46
  and
• 8:47
  conventional
• 8:47
  workflow
• 8:47
  engines,
• 8:48
  using
• 8:48
  a
• 8:48
  deterministic
• 8:49
  state
• 8:49
  machine
• 8:50
  to
• 8:50
  drive
• 8:50
  non-deterministic
• 8:51
  coding
• 8:51
  agents.
• 8:52
  With
• 8:52
  its
• 8:52
  primary
• 8:53
  bead-rs
• 8:53
  backend,
• 8:54
  work
• 8:54
  items
• 8:54
  live
• 8:54
  in
• 8:55
  a
• 8:55
  SQLite-backed
• 8:55
  store;
• 8:56
  workers
• 8:56
  select
• 8:57
  them
• 8:57
  in
• 8:57
  deterministic
• 8:58
  priority
• 8:58
  order,
• 8:59
  claim
• 8:59
  them
• 8:59
  atomically,
• 9:00
  build
• 9:00
  prompts
• 9:01
  from
• 9:01
  bead
• 9:01
  and
• 9:01
  workspace
• 9:02
  context,
• 9:03
  and
• 9:03
  dispatch
• 9:03
  YAML-defined
• 9:04
  adapters
• 9:04
  for
• 9:04
  Claude
• 9:05
  Code,
• 9:05
  Codex,
• 9:06
  Aider,
• 9:06
  or
• 9:07
  OpenCode.
• 9:08
  Dispatch
• 9:08
  captures
• 9:09
  exit
• 9:09
  status
• 9:09
  and
• 9:10
  stdout/stderr,
• 9:12
  while
• 9:12
  explicit
• 9:13
  handlers
• 9:13
  route
• 9:13
  successful,
• 9:14
  failed,
• 9:15
  timed-out,
• 9:15
  interrupted,
• 9:16
  missing-agent,
• 9:17
  and
• 9:17
  crashed
• 9:18
  processes
• 9:18
  through
• 9:19
  verification
• 9:19
  and
• 9:19
  bead-state
• 9:20
  recovery.
• 9:21
  Successful
• 9:21
  exits
• 9:22
  are
• 9:22
  verified
• 9:22
  and
• 9:23
  reconciled
• 9:23
  with
• 9:23
  the
• 9:23
  bead's
• 9:24
  actual
• 9:24
  state;
• 9:25
  the
• 9:25
  agent
• 9:25
  normally
• 9:26
  owns
• 9:26
  closing
• 9:26
  the
• 9:27
  bead.
• 9:27
  "If
• 9:28
  an
• 9:28
  outcome
• 9:28
  can
• 9:28
  happen,
• 9:29
  it
• 9:29
  has
• 9:29
  a
• 9:29
  handler.
• 9:30
  If
• 9:30
  it
• 9:30
  doesn't
• 9:31
  have
• 9:31
  a
• 9:31
  handler,
• 9:31
  it
• 9:32
  cannot
• 9:32
  happen."
• 9:33
  Independent
• 9:34
  workers
• 9:34
  run
• 9:34
  in
• 9:34
  tmux
• 9:35
  sessions,
• 9:35
  with
• 9:36
  task
• 9:36
  claiming
• 9:36
  coordinated
• 9:37
  through
• 9:37
  the
• 9:37
  shared
• 9:37
  store
• 9:38
  and
• 9:38
  no
• 9:38
  central
• 9:39
  orchestrator
• 9:39
  .
• 9:40
  One
• 9:40
  operational
• 9:41
  tradeoff
• 9:41
  is
• 9:42
  worth
• 9:42
  making
• 9:42
  explicit.
• 9:43
  The
• 9:43
  built-in
• 9:44
  Claude
• 9:44
  adapter
• 9:44
  uses
• 9:45
  --dangerously-skip-permissions
• 9:47
  to
• 9:47
  avoid
• 9:47
  interactive
• 9:48
  approval
• 9:48
  prompts
• 9:48
  during
• 9:49
  unattended
• 9:49
  runs,
• 9:50
  a
• 9:50
  choice
• 9:50
  NEEDLE
• 9:51
  discloses
• 9:51
  in
• 9:51
  its
• 9:51
  quickstart.
• 9:53
  That
• 9:53
  removes
• 9:53
  Claude
• 9:54
  Code's
• 9:54
  permission
• 9:54
  checks
• 9:55
  as
• 9:55
  a
• 9:55
  security
• 9:55
  boundary,
• 9:56
  so
• 9:56
  containment
• 9:57
  must
• 9:57
  come
• 9:57
  from
• 9:58
  the
• 9:58
  worker
• 9:58
  account,
• 9:58
  container
• 9:59
  or
• 9:59
  VM
• 10:00
  isolation,
• 10:01
  credential
• 10:01
  hygiene,
• 10:02
  and
• 10:02
  network
• 10:02
  policy.
• 10:03
  This
• 10:04
  is
• 10:04
  a
• 10:04
  deployment
• 10:04
  consideration
• 10:05
  for
• 10:05
  that
• 10:05
  adapter
• 10:06
  rather
• 10:06
  than
• 10:06
  a
• 10:06
  limitation
• 10:07
  of
• 10:07
  NEEDLE's
• 10:07
  deterministic
• 10:08
  outcome
• 10:08
  routing.
• 10:09
  An
• 10:09
  optional
• 10:10
  claude-interactive
• 10:10
  plugin
• 10:11
  wraps
• 10:11
  Claude
• 10:11
  Code
• 10:12
  in
• 10:12
  a
• 10:12
  pseudo-terminal;
• 10:13
  the
• 10:13
  project
• 10:14
  says
• 10:14
  this
• 10:14
  keeps
• 10:14
  workers
• 10:15
  on
• 10:15
  subscription
• 10:15
  billing
• 10:16
  rather
• 10:16
  than
• 10:16
  programmatic
• 10:17
  API
• 10:18
  credits.
• 10:19
  Both
• 10:19
  choices
• 10:19
  are
• 10:19
  documented,
• 10:20
  and
• 10:21
  operators
• 10:21
  can
• 10:21
  select
• 10:22
  other
• 10:22
  built-in
• 10:23
  or
• 10:23
  custom
• 10:23
  adapters.
• 10:24
  Dreadnode,
• 10:25
  better
• 10:26
  known
• 10:26
  for
• 10:26
  offensive-security
• 10:27
  evaluation
• 10:28
  work,
• 10:28
  has
• 10:28
  shipped
• 10:29
  ALFRED,
• 10:30
  an
• 10:30
  agent-first
• 10:31
  LaTeX
• 10:31
  tool:
• 10:32
  an
• 10:32
  LLM
• 10:33
  with
• 10:33
  filesystem
• 10:34
  and
• 10:34
  shell
• 10:34
  access
• 10:34
  writes,
• 10:35
  builds,
• 10:36
  cites
• 10:36
  via
• 10:36
  Semantic
• 10:37
  Scholar,
• 10:38
  and
• 10:38
  validates
• 10:38
  papers
• 10:39
  through
• 10:39
  a
• 10:39
  local
• 10:39
  web
• 10:39
  UI,
• 10:40
  with
• 10:40
  slash-command
• 10:41
  workflows
• 10:42
  for
• 10:42
  literature
• 10:42
  review,
• 10:43
  claim
• 10:43
  verification,
• 10:44
  peer
• 10:44
  review,
• 10:45
  and
• 10:45
  a
• 10:45
  detector
• 10:46
  for
• 10:46
  LLM-sounding
• 10:47
  prose.
• 10:48
  The
• 10:48
  security
• 10:49
  section
• 10:49
  reads
• 10:49
  like
• 10:49
  it
• 10:50
  came
• 10:50
  from
• 10:50
  a
• 10:50
  red
• 10:50
  team:
• 10:51
  mitigations
• 10:52
  are
• 10:52
  "defense-in-depth,
• 10:53
  not
• 10:53
  a
• 10:53
  sandbox,"
• 10:54
  a
• 10:54
  command
• 10:55
  blacklist
• 10:55
  blocks
• 10:55
  curl,
• 10:57
  wget,
• 10:57
  nc,
• 10:57
  ssh,
• 10:57
  and
• 10:58
  printenv
• 10:58
  even
• 10:58
  inside
• 10:59
  bash
• 10:59
  -c
• 11:00
  while
• 11:00
  admitting
• 11:01
  the
• 11:01
  agent
• 11:01
  "can
• 11:01
  still
• 11:02
  run
• 11:02
  arbitrary
• 11:02
  commands
• 11:03
  through
• 11:03
  other
• 11:03
  interpreters,"
• 11:04
  credential-shaped
• 11:05
  environment
• 11:06
  variables
• 11:06
  are
• 11:06
  scrubbed
• 11:06
  from
• 11:07
  the
• 11:07
  arbitrary
• 11:07
  command
• 11:08
  tool
• 11:08
  but
• 11:08
  inherited
• 11:09
  by
• 11:09
  the
• 11:09
  fixed
• 11:09
  workflow
• 11:10
  tools,
• 11:11
  and
• 11:11
  latexmk
• 11:12
  runs
• 11:12
  with
• 11:12
  -norc
• 11:12
  so
• 11:13
  a
• 11:13
  .latexmkrc
• 11:14
  cannot
• 11:14
  execute
• 11:15
  Perl.
• 11:15
  .
• 11:17
  McCoy,
• 11:18
  Soulos,
• 11:18
  Linzen,
• 11:19
  and
• 11:19
  Smolensky
• 11:19
  ask
• 11:20
  how
• 11:20
  networks
• 11:20
  built
• 11:21
  on
• 11:21
  continuous
• 11:21
  vectors
• 11:22
  excel
• 11:22
  at
• 11:22
  domains
• 11:22
  that
• 11:23
  look
• 11:23
  symbolic,
• 11:23
  and
• 11:23
  answer
• 11:24
  that
• 11:24
  the
• 11:24
  vectors
• 11:24
  may
• 11:25
  implicitly
• 11:25
  realize
• 11:25
  symbolic
• 11:26
  structure:
• 11:27
  linearly
• 11:27
  transformed
• 11:28
  Tensor
• 11:28
  Product
• 11:28
  Representations,
• 11:29
  where
• 11:30
  each
• 11:30
  filler
• 11:30
  is
• 11:30
  bound
• 11:30
  to
• 11:30
  a
• 11:31
  role
• 11:31
  via
• 11:31
  a
• 11:31
  tensor
• 11:31
  product,
• 11:32
  the
• 11:32
  bindings
• 11:33
  are
• 11:33
  summed,
• 11:33
  and
• 11:33
  an
• 11:33
  affine
• 11:34
  map
• 11:34
  projects
• 11:34
  the
• 11:34
  result.
• 11:35
  Their
• 11:35
  method,
• 11:36
  DISCOVER,
• 11:37
  fits
• 11:37
  an
• 11:37
  explicit
• 11:37
  TPR
• 11:38
  model
• 11:38
  to
• 11:38
  a
• 11:38
  target
• 11:39
  network's
• 11:39
  encodings
• 11:39
  under
• 11:40
  a
• 11:40
  hypothesized
• 11:40
  role
• 11:41
  scheme,
• 11:41
  swaps
• 11:42
  the
• 11:42
  approximation
• 11:42
  into
• 11:42
  the
• 11:43
  network's
• 11:43
  downstream
• 11:43
  computation,
• 11:44
  and
• 11:44
  measures
• 11:45
  how
• 11:45
  often
• 11:45
  the
• 11:45
  output
• 11:46
  stays
• 11:46
  fully
• 11:46
  correct.
• 11:47
  Small
• 11:47
  MLPs,
• 11:48
  GRUs,
• 11:48
  and
• 11:48
  Transformers
• 11:49
  trained
• 11:49
  on
• 11:49
  copying,
• 11:50
  reversing,
• 11:50
  and
• 11:50
  interleaving
• 11:51
  letters
• 11:51
  are
• 11:51
  approximated
• 11:52
  above
• 11:52
  0.99
• 11:53
  accuracy
• 11:54
  under
• 11:54
  bidirectional
• 11:54
  roles;
• 11:56
  bag-of-words
• 11:56
  roles
• 11:56
  fail
• 11:57
  on
• 11:57
  order-sensitive
• 11:57
  tasks
• 11:58
  but
• 11:58
  succeed
• 11:58
  on
• 11:59
  sorting,
• 12:00
  so
• 12:00
  structure
• 12:00
  appears
• 12:00
  only
• 12:01
  when
• 12:01
  the
• 12:01
  task
• 12:01
  needs
• 12:02
  it
• 12:02
  .
• 12:02
  The
• 12:02
  LLM
• 12:03
  results
• 12:03
  are
• 12:03
  the
• 12:03
  reason
• 12:04
  to
• 12:04
  read
• 12:04
  it.
• 12:05
  Across
• 12:05
  seven
• 12:06
  open-weight
• 12:06
  models,
• 12:07
  period-token
• 12:08
  encodings
• 12:08
  of
• 12:08
  sentences
• 12:09
  are
• 12:09
  approximated
• 12:09
  well
• 12:10
  by
• 12:10
  bidirectional
• 12:10
  positional
• 12:11
  roles
• 12:11
  and
• 12:11
  less
• 12:11
  well
• 12:12
  by
• 12:12
  syntactic
• 12:12
  ones,
• 12:13
  suggesting
• 12:13
  linear
• 12:14
  order
• 12:14
  dominates.
• 12:15
  On
• 12:15
  GPT-OSS
• 12:18
  across
• 12:19
  arithmetic,
• 12:19
  syllogisms,
• 12:20
  Python
• 12:20
  execution,
• 12:21
  and
• 12:22
  three
• 12:22
  syntactic
• 12:22
  transformations,
• 12:23
  replacing
• 12:24
  every
• 12:24
  input-token
• 12:25
  representation
• 12:25
  at
• 12:26
  all
• 12:26
  25
• 12:26
  layers
• 12:27
  with
• 12:27
  a
• 12:27
  task-specific
• 12:27
  TPR
• 12:28
  approximation
• 12:29
  lands
• 12:29
  within
• 12:29
  2.36%
• 12:30
  of
• 12:30
  the
• 12:31
  model's
• 12:31
  own
• 12:31
  accuracy.
• 12:32
  Causal
• 12:33
  "constituent
• 12:33
  surgery,"
• 12:34
  such
• 12:34
  as
• 12:34
  swapping
• 12:35
  arithmetic
• 12:35
  operands,
• 12:36
  averages
• 12:37
  0.903
• 12:38
  accuracy
• 12:39
  across
• 12:39
  31
• 12:39
  intervention
• 12:40
  types,
• 12:41
  and
• 12:41
  generalization
• 12:42
  to
• 12:42
  withheld
• 12:42
  role-filler
• 12:42
  pairs
• 12:43
  beats
• 12:43
  a
• 12:43
  strong
• 12:44
  combinatorial
• 12:44
  baseline,
• 12:45
  the
• 12:45
  evidence
• 12:46
  for
• 12:46
  systematic
• 12:46
  binding
• 12:47
  rather
• 12:47
  than
• 12:47
  memorized
• 12:48
  atoms.
• 12:49
  The
• 12:49
  stated
• 12:49
  limits
• 12:50
  are
• 12:50
  real:
• 12:51
  DISCOVER
• 12:51
  is
• 12:51
  supervised,
• 12:52
  shows
• 12:53
  sufficiency
• 12:53
  rather
• 12:53
  than
• 12:54
  minimality,
• 12:55
  and
• 12:55
  was
• 12:55
  run
• 12:55
  on
• 12:55
  templated
• 12:56
  domains
• 12:56
  with
• 12:56
  one
• 12:57
  LLM.
• 12:58
  The
• 12:58
  Kuleshov
• 12:59
  Group's
• 12:59
  tutorial
• 12:59
  on
• 13:00
  building
• 13:00
  a
• 13:00
  diffusion
• 13:00
  language
• 13:01
  model
• 13:01
  is
• 13:01
  the
• 13:02
  primary-source
• 13:02
  recipe
• 13:03
  behind
• 13:03
  products
• 13:04
  whose
• 13:04
  speed
• 13:04
  claims
• 13:04
  have
• 13:05
  circulated
• 13:05
  second-hand
• 13:06
  for
• 13:06
  a
• 13:06
  year.
• 13:07
  The
• 13:07
  core
• 13:08
  is
• 13:08
  masked
• 13:08
  diffusion,
• 13:09
  "essentially
• 13:10
  BERT
• 13:10
  with
• 13:10
  a
• 13:10
  randomized
• 13:11
  masking
• 13:11
  rate,"
• 13:12
  except
• 13:12
  the
• 13:12
  result
• 13:13
  is
• 13:13
  generative:
• 13:14
  train
• 13:14
  a
• 13:14
  bidirectional
• 13:15
  transformer
• 13:15
  to
• 13:16
  reconstruct
• 13:16
  randomly
• 13:17
  masked
• 13:17
  tokens,
• 13:18
  then
• 13:18
  sample
• 13:19
  from
• 13:19
  a
• 13:19
  fully
• 13:19
  masked
• 13:20
  sequence
• 13:20
  by
• 13:20
  alternating
• 13:21
  fill-in
• 13:21
  and
• 13:21
  partial
• 13:22
  re-masking.
• 13:23
  Production
• 13:24
  models
• 13:24
  add
• 13:24
  block
• 13:25
  diffusion
• 13:25
  for
• 13:25
  variable
• 13:26
  length
• 13:26
  with
• 13:26
  KV
• 13:27
  caching,
• 13:28
  a
• 13:28
  heavy
• 13:28
  encoder
• 13:29
  plus
• 13:29
  light
• 13:29
  decoder
• 13:30
  as
• 13:30
  in
• 13:30
  Gemma
• 13:30
  Diffusion
• 13:31
  and
• 13:31
  Nemotron
• 13:32
  Diffusion,
• 13:33
  remasking
• 13:33
  for
• 13:34
  error
• 13:34
  correction
• 13:34
  since
• 13:35
  plain
• 13:35
  masked
• 13:35
  diffusion
• 13:36
  cannot
• 13:36
  revise
• 13:37
  an
• 13:37
  unmasked
• 13:37
  token,
• 13:38
  and
• 13:38
  distillation
• 13:39
  to
• 13:39
  halve
• 13:39
  step
• 13:40
  counts.
• 13:41
  Mercury
• 13:41
  exceeds
• 13:42
  1,000
• 13:42
  tokens
• 13:43
  per
• 13:43
  second
• 13:43
  per
• 13:44
  user
• 13:44
  and
• 13:44
  Nemotron
• 13:45
  Diffusion
• 13:45
  at
• 13:45
  35B
• 13:46
  reports
• 13:47
  2-8x
• 13:47
  throughput
• 13:48
  at
• 13:48
  up
• 13:48
  to
• 13:48
  99%
• 13:49
  of
• 13:49
  autoregressive
• 13:50
  quality.
• 13:51
  The
• 13:51
  concession
• 13:52
  is
• 13:52
  equally
• 13:52
  plain:
• 13:53
  diffusion
• 13:54
  has
• 13:54
  not
• 13:54
  been
• 13:54
  scaled
• 13:55
  to
• 13:55
  autoregressive
• 13:56
  levels
• 13:56
  of
• 13:56
  compute
• 13:56
  and
• 13:56
  data,
• 13:57
  so
• 13:57
  the
• 13:58
  bet
• 13:58
  is
• 13:58
  that
• 13:58
  it
• 13:58
  wins
• 13:59
  where
• 13:59
  sequential
• 13:59
  generation
• 14:00
  is
• 14:00
  the
• 14:00
  bottleneck,
• 14:01
  in
• 14:01
  post-training
• 14:02
  and
• 14:02
  inference-time
• 14:03
  scaling
• 14:03
  .
• 14:05
  H
• 14:06
  Company,
• 14:06
  until
• 14:06
  now
• 14:06
  a
• 14:06
  shop
• 14:07
  for
• 14:07
  Qwen-derived
• 14:07
  computer-use
• 14:08
  models,
• 14:08
  has
• 14:08
  released
• 14:09
  NeoMME,
• 14:09
  260M
• 14:10
  and
• 14:10
  800M
• 14:11
  multimodal
• 14:12
  multilingual
• 14:12
  encoders
• 14:13
  trained
• 14:13
  from
• 14:13
  scratch.
• 14:14
  It
• 14:14
  drops
• 14:15
  the
• 14:15
  usual
• 14:15
  vision
• 14:15
  tower
• 14:16
  plus
• 14:16
  causal
• 14:16
  decoder,
• 14:17
  which
• 14:17
  retrieval
• 14:17
  and
• 14:18
  classification
• 14:18
  do
• 14:18
  not
• 14:18
  need.
• 14:19
  A
• 14:19
  single
• 14:20
  bidirectional
• 14:20
  transformer
• 14:21
  takes
• 14:21
  text
• 14:21
  tokens
• 14:22
  and
• 14:22
  raw
• 14:22
  32-by-32
• 14:23
  image
• 14:23
  patches
• 14:23
  at
• 14:24
  native
• 14:24
  aspect
• 14:24
  ratio,
• 14:25
  with
• 14:25
  a
• 14:25
  16,384-token
• 14:26
  context
• 14:27
  and
• 14:27
  a
• 14:27
  masked
• 14:28
  discrete-diffusion
• 14:28
  objective
• 14:29
  in
• 14:29
  which
• 14:29
  higher
• 14:30
  text
• 14:30
  corruption
• 14:30
  on
• 14:31
  multimodal
• 14:31
  examples
• 14:31
  forces
• 14:32
  the
• 14:32
  model
• 14:32
  to
• 14:32
  use
• 14:32
  image
• 14:33
  evidence
• 14:33
  rather
• 14:33
  than
• 14:34
  language
• 14:34
  shortcuts.
• 14:34
  The
• 14:34
  retriever
• 14:35
  fine-tune
• 14:35
  follows
• 14:36
  ColPali
• 14:36
  and
• 14:36
  returns
• 14:37
  dense
• 14:37
  and
• 14:37
  late-interaction
• 14:38
  embeddings
• 14:38
  from
• 14:38
  one
• 14:38
  pass.
• 14:39
  On
• 14:39
  ViDoRe
• 14:39
  v3
• 14:40
  the
• 14:40
  260M
• 14:41
  scores
• 14:41
  0.523
• 14:43
  nDCG@10,
• 14:44
  the
• 14:44
  best
• 14:44
  result
• 14:45
  below
• 14:45
  800M
• 14:45
  parameters
• 14:46
  and
• 14:46
  within
• 14:46
  0.002
• 14:47
  of
• 14:47
  ColQwen2.5
• 14:50
  at
• 14:50
  roughly
• 14:50
  14x
• 14:51
  fewer
• 14:51
  parameters;
• 14:51
  the
• 14:52
  800M
• 14:52
  reaches
• 14:53
  0.556.
• 14:54
  Pooling
• 14:54
  plus
• 14:54
  int8
• 14:55
  quantization
• 14:55
  shrinks
• 14:56
  a
• 14:56
  page's
• 14:56
  index
• 14:57
  from
• 14:57
  1.5
• 14:58
  MB
• 14:58
  to
• 14:58
  39
• 14:58
  kB
• 14:59
  while
• 14:59
  keeping
• 14:59
  over
• 14:59
  99%
• 15:00
  of
• 15:00
  retrieval
• 15:01
  quality,
• 15:01
  and
• 15:01
  the
• 15:01
  260M
• 15:02
  encodes
• 15:03
  about
• 15:03
  51
• 15:03
  pages
• 15:04
  per
• 15:04
  second
• 15:04
  on
• 15:04
  one
• 15:05
  L40S.
• 15:05
  Checkpoints
• 15:06
  are
• 15:06
  Apache
• 15:06
  2.0
• 15:06
  .
• 15:07
  InstructMesh,
• 15:08
  from
• 15:08
  Northeastern
• 15:09
  and
• 15:09
  headed
• 15:09
  to
• 15:09
  UIST
• 15:10
  '26,
• 15:10
  addresses
• 15:11
  a
• 15:11
  failure
• 15:11
  that
• 15:11
  only
• 15:12
  shows
• 15:12
  up
• 15:12
  after
• 15:12
  the
• 15:12
  print
• 15:13
  finishes.
• 15:14
  Generative
• 15:14
  3D
• 15:15
  models
• 15:15
  optimize
• 15:16
  visual
• 15:16
  plausibility
• 15:17
  over
• 15:17
  geometric
• 15:18
  accuracy.
• 15:19
  Reconstructing
• 15:20
  120
• 15:21
  popular
• 15:21
  Thingiverse
• 15:22
  models
• 15:22
  with
• 15:22
  TRELLIS
• 15:23
  found
• 15:23
  78.3%
• 15:25
  had
• 15:25
  more
• 15:25
  than
• 15:25
  one
• 15:25
  flaw
• 15:25
  type,
• 15:26
  averaging
• 15:27
  2.4
• 15:27
  per
• 15:27
  model.
• 15:29
  Users
• 15:29
  paint
• 15:29
  a
• 15:29
  region
• 15:30
  and
• 15:30
  describe
• 15:30
  the
• 15:30
  fix,
• 15:31
  and
• 15:31
  the
• 15:31
  system
• 15:31
  applies
• 15:32
  one
• 15:32
  of
• 15:32
  six
• 15:32
  operations
• 15:33
  (extrude,
• 15:34
  expand,
• 15:35
  fill,
• 15:35
  trim,
• 15:36
  erode,
• 15:37
  flatten)
• 15:37
  to
• 15:37
  the
• 15:37
  latent
• 15:38
  voxel
• 15:38
  grid
• 15:39
  before
• 15:39
  re-decoding,
• 15:40
  with
• 15:40
  a
• 15:40
  red/green
• 15:41
  preview.
• 15:42
  GPT-4
• 15:43
  picked
• 15:43
  the
• 15:43
  right
• 15:43
  operation
• 15:44
  92.1%
• 15:45
  of
• 15:45
  the
• 15:45
  time;
• 15:46
  twelve
• 15:46
  novices
• 15:47
  with
• 15:47
  no
• 15:47
  CAD
• 15:48
  experience
• 15:48
  caught
• 15:48
  90.4%
• 15:49
  of
• 15:49
  flaws
• 15:50
  and
• 15:50
  an
• 15:51
  expert
• 15:51
  judged
• 15:51
  89.7%
• 15:53
  of
• 15:53
  their
• 15:53
  repairs
• 15:53
  successful.
• 15:55
  The
• 15:55
  honest
• 15:55
  limits:
• 15:56
  one
• 15:56
  backbone,
• 15:57
  no
• 15:57
  sub-voxel
• 15:58
  repairs,
• 15:59
  users
• 15:59
  must
• 16:00
  diagnose
• 16:00
  the
• 16:00
  flaw
• 16:00
  themselves,
• 16:02
  and
• 16:02
  no
• 16:02
  comparison
• 16:03
  against
• 16:03
  simply
• 16:03
  re-prompting
• 16:04
  .
• 16:05
  Krea's
• 16:05
  Krea-2-Raw
• 16:06
  checkpoint
• 16:07
  is
• 16:07
  trending
• 16:07
  on
• 16:07
  Hugging
• 16:08
  Face,
• 16:08
  and
• 16:08
  given
• 16:09
  Krea
• 16:09
  2's
• 16:09
  positioning
• 16:10
  as
• 16:10
  the
• 16:10
  most
• 16:11
  aesthetic
• 16:11
  open
• 16:11
  image
• 16:12
  model,
• 16:12
  a
• 16:12
  raw
• 16:13
  variant
• 16:13
  will
• 16:13
  draw
• 16:13
  the
• 16:13
  fine-tuning
• 16:14
  crowd
• 16:14
  .
• 16:15
  At
• 16:16
  the
• 16:16
  other
• 16:16
  end
• 16:16
  of
• 16:16
  taste,
• 16:17
  SlopTV
• 16:17
  is
• 16:17
  a
• 16:17
  YouTube
• 16:18
  livestream
• 16:18
  where
• 16:19
  chat
• 16:19
  comments
• 16:19
  become
• 16:20
  400-word
• 16:20
  structured
• 16:21
  prompts,
• 16:22
  MiniMax
• 16:22
  H3
• 16:23
  renders
• 16:23
  15-second
• 16:24
  clips
• 16:24
  on
• 16:24
  one
• 16:24
  of
• 16:25
  two
• 16:25
  RTX
• 16:25
  5090s,
• 16:26
  and
• 16:26
  the
• 16:27
  result
• 16:27
  airs
• 16:27
  on
• 16:27
  the
• 16:27
  stream
• 16:28
  that
• 16:28
  requested
• 16:28
  it.
• 16:29
  The
• 16:29
  numbers
• 16:29
  are
• 16:30
  instructive:
• 16:31
  66
• 16:31
  GB
• 16:32
  on
• 16:32
  disk,
• 16:32
  an
• 16:33
  int8-pruned
• 16:33
  diffusion
• 16:34
  model
• 16:34
  and
• 16:34
  an
• 16:35
  nvfp4
• 16:35
  text
• 16:36
  encoder
• 16:36
  that
• 16:36
  do
• 16:37
  not
• 16:37
  fit
• 16:37
  a
• 16:37
  32
• 16:37
  GB
• 16:38
  card
• 16:38
  together,
• 16:39
  about
• 16:39
  90
• 16:39
  seconds
• 16:40
  per
• 16:40
  clip
• 16:40
  per
• 16:40
  GPU,
• 16:41
  and
• 16:41
  best
• 16:42
  prompt
• 16:42
  adherence
• 16:42
  at
• 16:43
  352p
• 16:44
  upscaled
• 16:44
  to
• 16:45
  1080p.
• 16:46
  When
• 16:46
  nobody
• 16:46
  is
• 16:46
  chatting
• 16:47
  the
• 16:47
  LLM
• 16:47
  invents
• 16:48
  concepts
• 16:48
  on
• 16:48
  its
• 16:48
  own,
• 16:49
  so
• 16:49
  at
• 16:49
  4
• 16:50
  AM
• 16:50
  the
• 16:50
  GPUs
• 16:50
  generate
• 16:51
  for
• 16:51
  an
• 16:51
  audience
• 16:51
  of
• 16:51
  nobody
• 16:52
  .
• 16:55
  The
• 16:55
  most
• 16:55
  useful
• 16:56
  local-inference
• 16:57
  post
• 16:57
  of
• 16:57
  the
• 16:57
  week
• 16:57
  is
• 16:57
  a
• 16:57
  dual-3090
• 16:58
  rig
• 16:59
  with
• 16:59
  188
• 17:00
  GB
• 17:00
  of
• 17:00
  DDR4-2133
• 17:03
  and
• 17:03
  two
• 17:03
  old
• 17:03
  Xeons,
• 17:04
  running
• 17:04
  Qwen3.8-Flash-Next
• 17:06
  at
• 17:07
  Q6
• 17:07
  with
• 17:07
  the
• 17:07
  full
• 17:07
  261k
• 17:08
  context
• 17:09
  and
• 17:09
  all
• 17:09
  48
• 17:09
  expert
• 17:10
  layers
• 17:10
  pinned
• 17:10
  in
• 17:10
  host
• 17:10
  RAM.
• 17:11
  Baseline
• 17:12
  was
• 17:12
  about
• 17:12
  17
• 17:13
  tokens
• 17:13
  per
• 17:13
  second
• 17:13
  decode,
• 17:14
  12
• 17:14
  at
• 17:14
  131k
• 17:15
  depth.
• 17:16
  After
• 17:16
  llama.cpp
• 17:18
  PR
• 17:18
  #27861,
• 17:20
  a
• 17:20
  GPU-resident
• 17:21
  LRU
• 17:21
  expert
• 17:22
  cache,
• 17:22
  decode
• 17:23
  rose
• 17:23
  to
• 17:23
  25-29
• 17:24
  at
• 17:24
  short
• 17:24
  and
• 17:24
  mid
• 17:24
  context
• 17:25
  and
• 17:25
  17
• 17:26
  at
• 17:26
  131k,
• 17:27
  with
• 17:27
  prefill
• 17:27
  unchanged.
• 17:29
  The
• 17:29
  insight
• 17:29
  is
• 17:29
  locality:
• 17:30
  the
• 17:30
  experts
• 17:30
  this
• 17:31
  model
• 17:31
  picks
• 17:31
  for
• 17:31
  one
• 17:31
  token
• 17:32
  are
• 17:32
  mostly
• 17:32
  the
• 17:32
  ones
• 17:32
  it
• 17:32
  picked
• 17:32
  for
• 17:33
  the
• 17:33
  last
• 17:33
  few
• 17:33
  dozen,
• 17:33
  so
• 17:33
  hit
• 17:34
  rates
• 17:34
  run
• 17:34
  80-85%
• 17:36
  on
• 17:36
  code
• 17:36
  and
• 17:36
  higher
• 17:37
  on
• 17:37
  prose.
• 17:38
  Making
• 17:38
  it
• 17:38
  pay
• 17:38
  meant
• 17:39
  dropping
• 17:39
  the
• 17:39
  micro-batch
• 17:40
  from
• 17:40
  2048
• 17:40
  to
• 17:41
  512
• 17:41
  to
• 17:41
  free
• 17:42
  about
• 17:42
  5
• 17:42
  GB
• 17:42
  per
• 17:43
  GPU
• 17:43
  for
• 17:43
  the
• 17:43
  cache,
• 17:44
  at
• 17:44
  the
• 17:44
  cost
• 17:44
  of
• 17:44
  slower
• 17:45
  long-prompt
• 17:45
  prefill.
• 17:46
  Thread
• 17:47
  tuning,
• 17:47
  q8
• 17:48
  KV,
• 17:48
  and
• 17:48
  multi-token
• 17:49
  prediction
• 17:49
  did
• 17:50
  nothing
• 17:50
  or
• 17:50
  hurt.
• 17:51
  A
• 17:51
  commenter
• 17:52
  on
• 17:52
  a
• 17:52
  single
• 17:52
  5090
• 17:53
  with
• 17:53
  192
• 17:54
  GB
• 17:54
  of
• 17:54
  RAM
• 17:54
  reports
• 17:55
  decode
• 17:55
  going
• 17:55
  from
• 17:56
  21
• 17:56
  to
• 17:56
  47
• 17:56
  tokens
• 17:57
  per
• 17:57
  second
• 17:57
  at
• 17:57
  50k
• 17:58
  context
• 17:58
  .
• 17:59
  That
• 17:59
  thread
• 18:00
  is
• 18:00
  the
• 18:00
  correct
• 18:00
  lens
• 18:00
  for
• 18:00
  Framework's
• 18:01
  now-official
• 18:01
  192
• 18:02
  GB
• 18:03
  desktop
• 18:03
  board,
• 18:04
  which
• 18:04
  the
• 18:04
  poster
• 18:04
  estimates
• 18:05
  at
• 18:05
  around
• 18:05
  $4,500.
• 18:07
  The
• 18:07
  community
• 18:08
  reaction
• 18:08
  is
• 18:08
  uniform:
• 18:09
  it
• 18:09
  is
• 18:09
  a
• 18:09
  refresh
• 18:10
  of
• 18:10
  Strix
• 18:10
  Halo
• 18:10
  with
• 18:11
  a
• 18:11
  larger
• 18:11
  unified-memory
• 18:12
  ceiling,
• 18:12
  and
• 18:13
  the
• 18:13
  bandwidth,
• 18:13
  quoted
• 18:14
  at
• 18:14
  273
• 18:15
  GB/s,
• 18:16
  is
• 18:16
  RTX
• 18:16
  3050
• 18:17
  territory,
• 18:18
  so
• 18:18
  capacity
• 18:19
  grows
• 18:19
  while
• 18:19
  decode
• 18:20
  speed
• 18:20
  does
• 18:20
  not.
• 18:21
  One
• 18:22
  128
• 18:23
  GB
• 18:23
  owner
• 18:23
  says
• 18:23
  that
• 18:24
  on
• 18:24
  generation
• 18:24
  speed
• 18:25
  alone
• 18:25
  they
• 18:25
  would
• 18:25
  not
• 18:25
  run
• 18:26
  anything
• 18:26
  larger
• 18:26
  than
• 18:26
  Qwen3.8-Flash-Next;
• 18:30
  another
• 18:31
  notes
• 18:31
  the
• 18:31
  extra
• 18:31
  memory
• 18:31
  is
• 18:32
  the
• 18:32
  difference
• 18:32
  between
• 18:32
  GLM
• 18:33
  5.3
• 18:33
  Flash
• 18:34
  at
• 18:34
  Q2
• 18:34
  and
• 18:34
  Q4,
• 18:35
  a
• 18:35
  real
• 18:35
  quality
• 18:36
  gain.
• 18:36
  .
• 18:37
  On
• 18:37
  the
• 18:37
  model
• 18:37
  side,
• 18:38
  Unsloth
• 18:39
  GGUFs
• 18:40
  and
• 18:40
  llama.cpp
• 18:42
  vision
• 18:42
  support
• 18:42
  have
• 18:42
  landed
• 18:43
  for
• 18:43
  DeepSeek-V4-Flash-Vision-Exp,
• 18:45
  giving
• 18:45
  a
• 18:45
  model
• 18:46
  that
• 18:46
  previously
• 18:46
  had
• 18:46
  to
• 18:47
  borrow
• 18:47
  eyes
• 18:47
  from
• 18:47
  an
• 18:47
  external
• 18:48
  vision
• 18:48
  tool
• 18:48
  its
• 18:48
  own;
• 18:49
  a
• 18:49
  commenter
• 18:50
  suggests
• 18:50
  bounding-box
• 18:51
  precision
• 18:51
  on
• 18:52
  a
• 18:52
  0-100
• 18:52
  scale
• 18:53
  as
• 18:53
  the
• 18:53
  regression
• 18:53
  check
• 18:54
  every
• 18:54
  experimental
• 18:55
  merge
• 18:55
  should
• 18:55
  ship
• 18:55
  with
• 18:56
  .
• 18:56
  Meta's
• 18:57
  Muse
• 18:57
  Spark
• 18:57
  open
• 18:58
  weights
• 18:58
  are
• 18:58
  "coming
• 18:58
  soon"
• 18:59
  per
• 18:59
  a
• 18:59
  Zuckerberg
• 18:59
  post;
• 19:00
  the
• 19:00
  LocalLLaMA
• 19:01
  thread
• 19:01
  reads
• 19:02
  a
• 19:02
  98.1%
• 19:03
  score
• 19:04
  on
• 19:04
  the
• 19:04
  512k-to-1M
• 19:06
  MRCR
• 19:06
  long-context
• 19:07
  test
• 19:07
  off
• 19:07
  the
• 19:08
  teaser
• 19:08
  image
• 19:08
  and
• 19:09
  guesses
• 19:09
  at
• 19:09
  trillion-scale
• 19:10
  parameters,
• 19:11
  while
• 19:11
  several
• 19:11
  commenters
• 19:12
  say
• 19:12
  the
• 19:12
  smaller
• 19:13
  Muse
• 19:13
  Glimmer
• 19:13
  already
• 19:14
  beats
• 19:14
  Qwen3.8-27B
• 19:18
  for
• 19:18
  non-coding
• 19:19
  work.
• 19:19
  None
• 19:20
  of
• 19:20
  that
• 19:20
  is
• 19:20
  verified
• 19:21
  until
• 19:21
  the
• 19:21
  weights
• 19:21
  land
• 19:21
  .
• 19:22
  InternLM's
• 19:23
  Intern-S2-Preview
• 19:24
  is
• 19:24
  also
• 19:25
  trending
• 19:25
  on
• 19:25
  Hugging
• 19:25
  Face,
• 19:26
  continuing
• 19:27
  the
• 19:27
  science-focused
• 19:28
  line
• 19:28
  behind
• 19:28
  Intern-S1
• 19:29
  and
• 19:29
  the
• 19:29
  S2-Mobius
• 19:30
  paper
• 19:30
  .