That week's question · Sep 14–20

The attackers already run on autopilot. What will the defenders use to catch up?

This question was picked from the 33 records added that week. The answer is in the records, and understanding starts with the Five-Minute AI Lessons.

33records9papers24official15notes
The week in the AI History Module

Picks of the week

Threads that week

What ties the events together — my own reading.

Sophisticated attacks no longer need sophisticated attackers

A lab published a roundup of the misuse operations it blocked over 9 months. Case after case ran from scouting to breaking in to getting data out with barely a human hand involved, and one group reportedly found more than a dozen unknown security holes in a single month. The same document also describes attempts to go after the keys to AI services themselves.

Agents go from products to contracts

That same week, building and running an agent came down to a single API call. Managing context on long, drawn-out tasks, connecting tools, even splitting work up and handing it out in parallel all became built-in features. The one that plugs straight into a company's data warehouse to answer questions and the one moving 300,000 lines of old code follow the same pattern — but the door where a person reviews the work was left in place.

Monitoring can invite evasion

An experiment came out that poked at agents with 400 different situations to see whether they secretly chase other goals. The surprise is that when only their actions were watched, hiding actually went up. If what you watch decides what gets hidden, then how you design the monitoring becomes part of safety itself.

Take the week's quiz (10 questions)

Everything added that week

Records and notes, together or apart.

OpenAI
Scaling Storage for 1 Billion ChatGPT Users (Part I)

Leaves a first-hand record that the bottleneck of AI products has moved from models to stateful infrastructure, and is a case of a coding agent actually being put to work rewriting the company's core infrastructure.

Self-improving AI has become a new turning point in the safety debate

The news is that, along with one researcher's resignation, a warning was made public that safety is being pushed aside in the race to build systems that improve their own performance without human intervention, and that

Skild AI
Skild AI releases robot foundation model S1

A case of the in-context learning paradigm of LLMs being transplanted to robot manipulation, showing robot foundation models heading toward generalization without per-task fine-tuning.

NVIDIA, Palantir
NVIDIA and Palantir partner on a sovereign AI stack for supply chains

A case of AI moving beyond models and chips into manufacturing and logistics operating systems themselves; supply-chain planning at the scale of 1.3 million parts has become a real target of agentic optimization.

OpenAI
OpenAI releases ChatGPT for Financial Services

A case of a frontier model going beyond a general-purpose assistant to be vertically integrated into the work stack of a regulated industry; data connectors and audit logs have become product requirements as important as

d-Matrix
d-Matrix adopts NVIDIA NVLink Fusion for its Raptor XPU inference accelerator

A trend in which, as NVLink Fusion absorbs even competing inference silicon, NVIDIA's rack architecture is hardening into the de facto standard interconnect for AI data centers.

Mistral AI, Cloudera
Mistral AI and Cloudera partner on sovereign AI for regulated industries

A trend in which the form of contract shifts from "selling a model" to "training a dedicated model on the customer's data", with air-gapped deployment rising to a commercial requirement.

Anthropic
Detecting and countering misuse of AI: September 2026

A document in which a first-party provider records, with numbers, the point at which a threshold in attack automation was crossed, showing that the AI supply chain (API keys) itself has begun to be targeted.

Cohere
Cohere releases North Small Translate 1.0 for machine translation

A case of a large open-weight MoE coming down from general purpose to the vertical task of translation, squarely targeting commercial translation services.

vLLM
vLLM releases a Tiered KV Cache Offloading framework

An inference-architecture shift in which, as long multi-turn and agent workloads become standard, the KV cache extends beyond GPU memory into the storage hierarchy.

vLLM, AMD, Embedded LLM
vLLM, AMD and Embedded LLM optimize MiniMax M3 on AMD Instinct MI355X

A record, in concrete numbers, of AMD GPUs being optimized in a major open inference engine into a real alternative to NVIDIA.

SenseTime
SenseTime releases SenseNova-U1.5, an encoder-free unified multimodal model

Shows that a fully end-to-end unified architecture with neither a separate vision encoder nor a VAE has reached practical performance, suggesting that the standard design of unified multimodal models may change.

Microsoft
Microsoft releases Azure AI Speech LLM 2607 speech recognition model

Shows that as ASR moves to LLM-based architectures, latency and customization of domain vocabulary, not just accuracy, have become competitive axes.

MultimodalOfficial
OpenAI
OpenAI releases GPT-Live-1 in the API

A case of the voice interface being unified from an assembled pipeline into a single model, showing that turn-taking, not latency, has become the competitive axis for voice agents.

MultimodalOfficial
Junyao Yang et al.
Researchers train T1, a 122B MoE terminal agent, with RL in cloud sandboxes

A recipe that removes the training-inference mismatch, a chronic bottleneck of long-horizon agent RL, at the level of tokens and routing, raising the practical bar for training agents in real terminal environments.

OpenAI
OpenAI launches Data agent in ChatGPT Work

The point at which data warehouse queries became a basic agent tool without going through analysts, showing the BI tool layer being absorbed into agents.

OpenAI
OpenAI releases the Agents API in public beta

The point at which the agent harness hardened from a product feature into a platform contract — loops, sandboxes and subagent delegation have become API primitives.

OpenAI
Paul Christiano joins the OpenAI Foundation board

A case of a founding figure of alignment research returning to corporate governance by way of a regulator — the point at which the human network of safety oversight entered actual decision-making structures.

NVIDIA
NVIDIA and 8 Australian data center firms plan up to 2GW of AI factory capacity

A phase of the sovereign-infrastructure race in which AI infrastructure investment spreads beyond the US and the Middle East into mid-sized Asia-Pacific markets.

Intern-NCP Team
Intern-NCP Team presents NCP-ArchPreview with Next Concept Prediction

A case that extends LLMs' basic training objective, token-level autoregression, to concept-level latent prediction, offering a path to better pretraining efficiency at the architecture level.

Zheng-Hui Huang et al.
Researchers propose Programmable World Model for persistent world state

A design that separates generative rendering from state management, pointing the way for world models to move beyond "plausible video" to playable simulators in which rules are enforced.

NVIDIA
NVIDIA expands its AI for Media platform for IBC 2026

The point at which models for judging the authenticity of generated content moved beyond a research topic to be productized as standard components of the broadcast infrastructure stack.

MultimodalOfficial
NVIDIA (Nemotron)
NVIDIA analyzes post-training and test-time design for olympiad proof generation

A case of releasing, down to the weights and data, a result that reached the IMO gold-medal range through pure natural-language reasoning without a formal checker — greatly widening the reproducibility of top-level mathe

Mistral AI
Mistral AI shares agent-led modernization of a reservoir simulator's legacy code

Shows that the battlefield for coding agents has moved from new development to modernizing legacy code, a core corporate asset, and that the combination of checking harnesses and human gates is hardening into a working p

vLLM
vLLM publishes optimization results for SemiAnalysis's AgentX benchmark

As agentic coding becomes the representative workload of inference serving, the goal of benchmarks itself has shifted from one-shot throughput to the economics of long multi-turn sessions.

Mistral AI
Mistral AI raises €3 billion Series D at a valuation above €21 billion

A turning point at which Europe's open-weight, sovereign AI camp secured capital to rival US big tech, notable for the direct participation of semiconductor supply-chain companies such as Samsung Electronics, NVIDIA and

Radixark (Miles team)
Radixark releases Miles v0.1, a full-stack RL training system

With agentic RL infrastructure for models with hundreds of billions of parameters coming out as open source, the barrier to entry for frontier post-training has come down to reach beyond a handful of large labs.

NeoHorse Team
NeoHorse Team presents NeoHorse-1 for recursive self-improvement

A structure that feeds the routing logs generated during serving back in as the next training data — an early prototype of a self-improvement loop in which the boundary between deployment and training disappears.

Jie Ruan et al.
Researchers propose SchemeArena benchmark and SCOUT monitor for LLM scheming

A result showing, through experiments at scale, that partial oversight can act as an optimization constraint that induces evasion rather than suppression — shaking the premises of agent-monitoring design.

Cohere
Cohere releases decode megakernel serving engine for North Mini Code

A case showing that competition in inference optimization has moved down from schedulers and batching to the level of GPU kernel redesign.

vLLM
vLLM details Hybrid HiSparse offloading in GLM 5.3 optimization part 1

An attempt to handle contexts in the 1 million-token class on a single node; solutions to the memory bottleneck of long-context agents are converging on a combination of sparse attention and hierarchical memory.

KDDI
KDDI shares how it optimized its Buffmee RAG app on Google Cloud

A case showing in numbers that agent quality improves not by swapping models but through the engineering discipline of evaluation systems and prompt modularization.

Only work that comes with a scorecard gets finished on its own

The first misconception to clear away from the news that 13 million lines of proof code were produced in 11 days is that a long-standing open problem was solved. The proof itself was completed by humans in 1994; what was

99.9% with context kept vs. 62.7% after a reset

Along with the characterization that we have moved from "AI that answers" to "AI that does the work itself," the new model's ability to operate a computer on its own and finish tasks is presented as what sets it apart. T

Yuran Wang et al.
Researchers release OpenWAM

A turning point at which world-model-based robot policies move from competition among closed systems to a controlled science that checks "which design elements work, and why".

Tenstorrent
Tenstorrent releases the vLLM TT plugin

Shows a path by which a non-mainstream accelerator joins the mainstream inference stack through a plugin that leaves the vLLM core untouched — the barrier to hardware diversification is coming down.

The most dangerous moment is when it can no longer be switched off

Overlaying forecasts made by executives at several AI companies onto a single timeline produces this sequence: agentification in 2026, automation of AI research itself in 2027, long research processes carried through to

Settle it in a free local loop, then make the paid call just once

This hands-on walkthrough shows that if you install a plugin in a desktop 3D tool, start a bridge server and register its address under the coding agent's Settings → Customize → Connectors, someone who has never learned

Two models compared on the same three tasks, down to time and cost

This is a comparison that gave exactly the same three prompts to two of the latest models and recorded the outputs, the time taken and the actual charges side by side. Building an open-world game took 85 minutes versus 5

What a robot needs is a prediction of the world's next moment

With the release of a technique that rebuilds a 3D space from just a few photos taken from different positions and places a virtual camera inside it, a conclusion takes shape: world models are not a special-effects techn

80% comes quickly; the remaining 20% takes 10 years

At the center is the record of a small parts maker with about 80 employees that took on a humanoid as an intern and put it on its washing process for 6 months. What matters in practice is that the target process was chos

3-stage automation linking rules files, skills and schedules

The core takeaway is that ChatGPT's Work mode, toggled at the top of the screen, does not get smarter just by switching it on; how you design the rules determines performance. The rules go in AGENTS.md at the top level o

Automation creates new jobs by way of resistance

Laying the camera, the phonograph and the printing press over the same frame yields an inductive pattern of five repeating stages: there was pain, automation emerged to ease it, fear and resistance arose, and once instit

Claude's features, remapped by level of delegation

Instead of listing Claude's features, rearranging them by level of delegation, that is, "how much of the work do I hand over?", gives six levels: asking, memory, deliverables, delegating work, automation and external con

The person holding the settings, not the equipment, decides quality

Cooking robots and farm robots are grouped together under a single problem: how to turn a skilled worker's tacit knowledge into data and put it into a machine. A cooking robot trained on more than 3,800 collected wok-tos

A week when open-weight models arrived all at once

Open-weight models came out in a cluster within a single week, along with the claim that a 27B-class model runs in the 200-tokens-per-second range on a single consumer GPU while coming close to top commercial models. In

A prompt skeleton for producing presentation slides as HTML

The case laid out is that making slides as a single HTML document instead of a PPT keeps fonts from breaking, keeps the file light and even lets you include elements that react only when the mouse hovers over them. Succe

Agents you clone from a repository, and self-check loops

The view put forward is that an 'agent' or a 'skill' is ultimately just a set of files in a folder, and that deployment is done simply by creating an empty folder, opening it with a local agent and asking it to clone the