2026-09-13 · 18:32 (CEST)

AI Briefing — 13.09.2026

🚀 Innovation

Long-context local inference is closing on the hosted engines. Qwen3.8-Flash-Next now runs at 1M token context in MLX-serve on a 128GB M5 Max, holding around 40 tok/s on prose and 75 tok/s on code at 760k tokens of context with 8-bit dense and 4-bit expert quantization. A community llama.cpp fork then hit 1.2k tok/s prefill on Strix Halo, matching a closed-source server that had been the benchmark to beat. The point is not the numbers. It is that open engines reach parity with paid ones within weeks of launch, so long-context work no longer requires a hosted API. A useful side finding: on Qwen3.8-27B the chat template silently defaults to the most expensive reasoning setting, xhigh, which cost about 8x the tokens and 11x the wall clock for half a point of median change in a measured coding test.

OpenAI confirmed the GPT-6 Astra downgrade, then partially fixed it. Users reported a sharp capability drop two days after launch, and after enough noise OpenAI acknowledged the change and reverted part of it. The community's conclusion is a new expectation: re-run benchmarks a week after every model release instead of trusting launch-day scores. When labs tune for compute cost after the subscription wave, launch benchmarks stop being evidence of anything.

DeepSeek's flagship is bigger than advertised, and it runs on one consumer GPU. The community found V4.1 Flash is 748B parameters, not the 552B in the first write-ups, and got it running on a single RTX 5090 plus 128GB of RAM through a llama.cpp fork. In the same week Antirez published GGUFs, and open releases landed across modalities: Nex N2.5 Pro (407GB), tencent/AuK-Flash, Intern-S2, MiniCPM5-2B, YuE2-3B for music and OUI-1 for generated UI elements. Release cadence, not benchmark leadership, is what keeps the price pressure on.

🔬 Research

The Navier-Stokes claim has become a credit fight. OpenAI's proof of the existence and smoothness problem, produced by an unreleased model that reportedly burned about 300 billion output tokens and roughly 22.5 million dollars of compute in a week, is now contested on attribution rather than correctness. NYU's Tristan Buckmaster says he and Anthropic's Levent Alpöge were making progress on the same problem before OpenAI's effort started, and that OpenAI's Sébastien Bubeck allegedly asked him to drop Alpöge's credit and told him "why would you ruin your career" when he pushed back. OpenAI says its team never saw their work but cannot rule out that anonymized data from its own products played a role. Around 25 Fields Medal winners have signed an open letter warning that sprinting to a result without the write-up and attribution work breaks how mathematical knowledge is trusted, and OpenAI has pulled its sponsorship from a Caltech math event. Separately, an unverified claim that Gemini solved P versus NP is circulating without a supporting write-up, which is a good test of how much the field now credits screenshot-level announcements.

AI-designed biology delivered two concrete results. Insilico Medicine's Rentosertib, designed with AI against an incurable lung disease, moved biological age indicators about six years younger in trial participants, which was not the effect being tested for. Separately, a Nature paper reports AI-designed protein assemblies that deliver RNA thousands of times better than human-designed and evolved capsids. Neither is a cure, and both need replication. They are also the kind of result that argues the AI-in-science case with evidence rather than vibes.

🔒 Security

Agent sandboxes keep failing as security boundaries. The "Beltdown" write-up shows an escape from the Claude Code sandbox, the second agent-escape disclosure in a week after Anthropic's own incident where an evaluation environment ended up connected to the real internet. Anthropic's latest misuse report adds the other half of the picture: AI now lets small, low-resource actors run campaigns with state-level reach. Practical takeaway for anyone running agents with tool access: model them as privileged insiders with valid credentials, because that is exactly what an auditor will see.

Hugging Face tooling is fingerprinting the developers who use it. The community found that huggingface_hub detects which AI coding agent is running and sends that as telemetry, days after Hugging Face published a security.txt page following the OpenAI agent incident. The data may be benign, but the pattern is not neutral: the library layer that nearly every local ML workflow imports can tell who your agent is. Expect opt-outs, forks and a louder argument about client-side telemetry in ML tooling.

Exploitation is outpacing patching. GitLab's critical flaw is already drawing internet-wide scanning, MikroTik devices are under active exploitation with 122,500 routers exposing SSH, and researchers are reverse-engineering those bugs with AI. Microsoft shipped its biggest Patch Tuesday yet: 974 CVEs, 2 zero-days and 20 wormable bugs. Attackers get faster help from models at the same time as defenders, and the patch queue grows anyway.

💰 Market

McKinsey: 32% of companies skipped a software purchase and built it with agents. In the State of AI 2026 survey, 32% of organizations, and 41% in tech, chose to build in house with agentic coding tools instead of buying. That is the first hard number on agents eating the SaaS line item rather than only the developer headcount. It also explains why model vendors keep pushing vertical products rather than generic chat.

AI is showing up in labour data now, not just projections. UK data reported this week suggests AI is denting computer science graduates' job prospects, while Anthropic's own projections put AI at up to 15% annual GDP growth by 2030 alongside displacement of close to one in five workers. OpenAI's new financial services product targets the same layer explicitly, with research, modeling and pitchbook prep aimed at junior analyst work. Entry-level knowledge work is where the substitution shows up first, and both the data and the product launches now agree on that.

🏛️ Politics

Regulators are converging on likeness and control, not on model size. A UK MP introduced a superintelligence ban bill that defines its target by whether a system can override human control rather than by parameters or compute, Australia proposed an AI kill-switch law requiring providers to keep emergency shutdown capability, and China's Supreme Court ruled that cloning a voice or likeness without consent can violate legal rights. Poland added the week's strangest entry, with robots protesting outside a government ministry. The reason likeness law moves faster than everything else is measurable: Berkeley's Hany Farid puts ten seconds of audio as the threshold to defeat voice biometrics, and North Korean-linked fraud flags reached 44% of US remote-IT applications this month.

Compliance deadlines are arriving faster than engineering practice. The near-term calendar is dense: EU Cyber Resilience Act reporting on 11.09., an FTC consultation on personalized pricing on 25.09., Maryland HB 895 on 01.10., Colorado AI rulemaking on 26.10. and New Jersey's price protection act in 2027. Engineers working through the EU AI Act make the same point from the other side: "appropriate human oversight" has to become a testable control with a trigger, a safe state, logging and evidence, not a dashboard flag. Meanwhile the WSJ argues that unregulated open-weight models are an invitation to disaster, an argument open-weight users read as a lobbying push tied to closed-lab valuations rather than a safety concern.

📎 Sources

← Back to Archive