The U.S. government is now standing between developers and OpenAI’s GPT-5.6. (Illustration: Artificially Intimidating)

Good day, humans. For the first time in the AI era, the U.S. government is standing between you and a frontier model — OpenAI’s GPT-5.6 is stuck behind a White House velvet rope until at least July 7. Meanwhile your Robinhood account can now trade itself, Washington’s departing AI czar says no referee is coming, and a scholar just caught ChatGPT mangling one of South Asia’s greatest poets. Let’s get into it.

Washington Won’t Let You Have GPT-5.6 Yet

Source: Reuters

What happened: OpenAI previewed GPT-5.6 — a three-model family (Sol, Terra, and Luna) with a new “ultra” mode that spins up sub-agents to work in parallel — on June 26, then, at the White House’s request, kept it limited to roughly 20 vetted, government-approved organizations. Broad public access now hinges on a federal AI framework expected around July 7.

Why it matters: It’s the first time a U.S. administration has gated the release of a frontier AI model, reportedly approving customers one at a time. Earlier we covered how Washington took Anthropic’s Fable 5 offline — this is the same lever, now pointed at OpenAI. When the government decides who gets the newest model first, “launch day” stops being the lab’s call.

What everyone’s saying: Sam Altman told staff the setup is “not our preferred long-term” approach — a memo confirmed by CNN — and OpenAI framed its compliance as a tactical concession, “the strongest path to broader availability in the coming weeks.” Prediction markets have converged on July 7 as the likely unlock.

My read between the lines: Both OpenAI and Anthropic have confidentially filed for IPOs at valuations near $1 trillion, which makes every week of “national security” delay a very real line on a financial statement. Nothing concentrates a company’s cooperative spirit quite like a locked-up product it’s about to sell to public markets.

📖 Further reading: The US Government Just Took Anthropic’s Best AI Model Offline — Here’s Why — the OpenAI gate is the sequel to the Anthropic ban we broke down here.

While Washington decides who’s allowed to touch GPT-5.6, there’s one AI coworker you can hire today with no waitlist. Viktor is an AI agent that lives in Slack, connects to 3,000+ tools, and actually does the work — shipping reports, building dashboards, and running campaigns while you sleep. Not a chatbot you pepper with questions; a coworker who closes the loop. New readers get $50 off their first month. Hire Viktor →

Your Robinhood Account Can Now Trade Itself

Source: TechCrunch

What happened: Alphio AI announced on July 3 that it has plugged into Robinhood’s new agentic-trading system, letting retail investors place real equity trades by typing plain-English commands to a chatbot. It builds on the “agentic” accounts Robinhood opened to AI agents in late May.

Why it matters: For the first time, an everyday investor can hand a bounded, pre-funded account to an AI agent and say “trim my tech exposure” in actual English — no order tickets, no ticker symbols. Robinhood bakes in trade previews, spending caps, and an instant kill switch, but you’re the one setting the guardrails.

What everyone’s saying: Robinhood isn’t alone — TechCrunch notes Stripe, Amazon, and Google are all racing to give AI agents real spending power, and third-party specialists like Alphio are now stacking trading strategies on top of Robinhood’s open protocol.

My read between the lines: Every one of these launches tiptoes past the same question: when an autonomous agent fat-fingers your savings at 3 a.m., who’s liable — you, Robinhood, or Alphio? “Instant kill switch” is a wonderful feature, assuming you’re awake to press it.

📖 Further reading: Claude Tag vs Viktor: which one do you hire? — a field guide to trusting AI agents with real work, before you trust one with your brokerage.

The Brief you’re reading is free, and it’s staying that way. But the headlines are only half the story — members get the paywalled deep-dives where I actually take things apart, like exactly how Washington’s model bans work, plus the full archive. If today made you think, come inside.

Trump’s AI Adviser: No Referee Is Coming

Source: Financial Times (via aiweekly.co)

What happened: Sriram Krishnan, who just stepped down as the White House’s senior AI policy adviser, told the Financial Times there “will not be an FDA for AI” under President Trump — ruling out any centralized federal regulator for frontier models.

Why it matters: It confirms the U.S. is betting on a light-touch, voluntary framework: labs submit their most powerful models for up to 30 days of government testing before release, but there’s no licensing and no pre-clearance. It’s the same voluntary door that let Washington gate GPT-5.6 and, weeks earlier, flip Anthropic’s off switch — leverage without a rulebook.

What everyone’s saying: Krishnan pinned the public backlash on the industry’s own “doomer” messaging. Europe sees it differently — at the ECB’s Sintra forum this week, the Bank of England’s deputy governor floated market “circuit breakers” for rogue AI, and the UK’s FCA chief warned AI is “evolving too quickly” for traditional rules.

My read between the lines: “No FDA” sounds like freedom until you notice the same administration is already hand-approving GPT-5.6 customers one by one. No agency, no statute, no appeals — just a phone call from Washington. That’s not deregulation; it’s discretion, which is a far less predictable thing to build a company on.

📖 Further reading: Fable 5 Is Back After 18 Days. The Precedent It Set Isn’t Going Anywhere. — what “voluntary” oversight looks like in practice, once the government has your model.

ChatGPT Still Can’t Translate a Poem

Source: Delos (University of Florida Press)

What happened: Amherst College scholar Krupa Shandilya pitted ChatGPT against human translators on the work of celebrated Urdu poet Faiz Ahmed Faiz. In a study published in the journal Delos, the AI produced nonsensical grammar and invented imagery that appears nowhere in the original.

Why it matters: Translation is supposed to be one of AI’s easy wins, but poetry lives in metaphor, rhythm, and cultural weight — the exact layers a fluent-sounding model quietly flattens. It’s a clean, concrete illustration of the gap between “reads smoothly” and “means what the author meant.”

What everyone’s saying: Researchers keep hitting the same pattern: experts initially prefer the AI translation for its fluency, then switch to the human version the instant they compare it against the source text. Fluency, it turns out, makes a convincing disguise.

My read between the lines: The unsettling part isn’t that ChatGPT gets poetry wrong — it’s that it gets it wrong beautifully, in confident, publishable-looking prose. If you don’t read Urdu, you’d never catch it. Now multiply that by every “good enough” AI translation shipping silently around the world today.

📖 Further reading: Krugman Says AI Is Eating Our Brains — another angle on what gets lost when we let the fluent machine do the thinking.

The “AI Confidence Theater” Wrecking Adoption

Source: Elena Verna

What happened: Growth leader Elena Verna published a widely shared essay arguing that most people posting “life-changing” AI breakthroughs are really just running basic workflows — and that the performance is doing real harm.

Why it matters: Verna’s argument is that inflated claims manufacture toxic FOMO: people feel hopelessly behind, lose trust in the tech, and tune out the tools that genuinely help. It’s the adoption paradox — overselling AI is one of the fastest ways to make people stop believing in it.

What everyone’s saying: She’s clearly hit a nerve. A recent Forbes analysis blamed “AI fatigue” on exactly this — repeated exposure to hype with too little measurable proof. Her fix is refreshingly boring: spend a couple of hours a week actually experimenting instead of performing mastery.

My read between the lines: The irony is delicious — “AI confidence theater” is itself a viral post about how viral AI posts are bad. But she’s right, and here’s the tell: the people doing the most impressive work with AI are almost always the quietest about it. The loudest “prompt gurus” are usually selling the ladder, not climbing it.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — why the hype cycle, not the technology, is the real barrier to adoption.

That’s your Brief for Sunday. Back tomorrow with more.

—Artificially Intimidating

Good day, humans. While America argues over grill technique, Alibaba's AI agent quietly discovered four new superconductors — real ones, verified in real labs. Also in today's Context Window: Hollywood ships its most AI-made movie ever while suing over the same technology, and Peter Thiel calls the Pope a communist. The 250th-birthday fireworks are, for once, not the wildest thing happening.

The Claw Machine That Does Science

Source: SCMP

What happened: Alibaba's research arm, DAMO Academy, unveiled Elements Claw — billed as the first AI agent built to hunt superconductors, the materials that carry electricity with zero energy loss. It screened 2.4 million crystal structures in just 28 GPU-hours, flagged 68,000 candidates, and four brand-new compounds were then synthesized and verified in physical labs.

Why it matters: Superconductors power MRI machines, quantum computers, and maglev trains, and finding a new one has historically taken decades of trial and error. The same week, the international SuperC consortium announced two more superconductors found via machine learning. AI-driven materials science just went from party trick to production line.

What everyone's saying: DAMO's researchers call these "the first superconducting materials discovered by an AI agent and validated experimentally," and the full database has been open-sourced for academics. The discourse: AI agents are graduating from booking your flights to doing your postdoc.

My read between the lines: One of the four "discoveries" was a compound whose crystal structure had simply been misrecorded in a database — so part of AI's scientific genius is cleaning up humanity's filing errors. And note that Alibaba was last in this newsletter accused of copying Claude's brain; discovering physics is a much better look. The claw, it turns out, was rigged all along — in science's favor.

📖 Further reading: Claude Tag vs Viktor: which one do you hire? — because AI agents doing actual jobs, postdoc or coworker, is no longer hypothetical.

An AI agent just spent 28 GPU-hours discovering superconductors. Yours could spend tonight building your Q3 report. Viktor is an AI agent that lives in Slack, connects to 3,000+ tools, and delivers finished work — reports, dashboards, code, campaigns — while you're off the clock. Not a chatbot; a coworker. New readers get $50 off their first month. Hire Viktor →

Agents Learn on the Job — Predictably

Source: ByteDance Seed (GitHub)

What happened: ByteDance's Seed research team released EdgeBench, a benchmark of 134 marathon tasks — 12 to 72+ hours each, spanning science, systems engineering, formal math, and games — that measures whether an AI agent gets better while it works. After nearly 38,000 logged hours of agent runs, they found improvement follows a log-sigmoid curve with an R² of 0.998 — an almost perfect fit.

Why it matters: Most benchmarks test what a model knows on day one; this one tests whether it improves like an employee. Expert humans averaged 57.2 hours per task, with the hardest demanding 320. And per the team's paper, frontier agents' learning speed has been doubling roughly every three months.

What everyone's saying: With pre-training scaling showing diminishing returns, the field is hungry for a new axis of progress — and "learning from experience" now has an empirical growth chart. The curve held across every frontier model tested, including Claude Opus 4.8 and GPT-5.5.

My read between the lines: An R² of 0.998 on anything involving LLMs should raise one eyebrow — nature is rarely that tidy, and benchmarks published by a company whose models climb them deserve a beat of skepticism. But the meta-story stands: the company that built an algorithm to learn you in 20 minutes of scrolling is now clocking how fast machines learn everything else. Every "AI can't do my job" argument just got an expiration-date calculator.

📖 Further reading: Microsoft's AI chief dates superintelligence — the last time the industry tried to put a date on machine self-improvement.

The Brief is free every day, and stays that way. Members get the part behind the curtain — the paywalled deep-dives on what these headlines actually mean, plus the full archive. If today's stories left you with questions, that's rather the point. Come backstage →

George Washington, Now With 100 AI Shots

Source: Variety (via Yahoo)

What happened: Young Washington, Angel Studios' George Washington biopic, opened on more than 2,500 screens July 3 — and director Jon Erwin told Variety that roughly 100 shots were augmented with AI, with five AI artists and an AI producer in the credits.

Why it matters: It's the most generative AI ever used in a wide theatrical release, per World of Reel. The showcase example: an icy river sequence shot in a 50-foot water tank in Ireland, with AI expanding it into a vast, deadly landscape — the pitch being safety and budget, not shortcuts. The film is targeting a $20 million opening weekend.

What everyone's saying: Backlash arrived before the film did. The Hollywood Reporter's review called it "stodgy," and critics fixated on one detail: live footage of two crew members was AI-converted into British soldiers on horseback — costume, casting, and history rewritten in post.

My read between the lines: Releasing this on the July 4th weekend of America's 250th birthday is the most on-the-nose test balloon imaginable. Angel Studios can absorb blowback a major studio can't — and every studio exec will be watching the $20 million number, not the reviews. If it hits, "AI artist" stops being an oxymoron and starts being a line item.

📖 Further reading: The real AI slop isn't Suno — it's Spotify — on what happens when AI content stops announcing itself.

Midjourney Wants Hollywood's AI Receipts

Source: Variety

What happened: Midjourney asked a federal district judge to overturn a magistrate's ruling that shielded Disney, Universal, and Warner Bros. from disclosing how they use AI internally. The image-generation company wants the studios' AI business plans, training datasets, model weights, and board presentations on AI.

Why it matters: The studios sued Midjourney for training its model on their copyrighted characters; Midjourney's fair-use defense hinges on showing Hollywood runs on the same technology it's suing over. The June 15 ruling limited discovery to "consumer-facing" AI — internal tools stayed off-limits.

What everyone's saying: Legal analysts at Shumaker caution that the ruling doesn't establish wrongdoing or decide whether AI training infringes copyright at all — the biggest question in AI law remains scrupulously undecided. The case is widely viewed as the first major test of copyright doctrine against image models.

My read between the lines: Read this next to the story above it: Hollywood is suing over AI the same weekend a 2,500-screen release ships 100 AI shots. Midjourney's motion isn't really about legal relevance — it's embarrassment leverage. Nothing accelerates a settlement like the prospect of your board decks being read aloud in open court.

📖 Further reading: Anthropic is getting sued over Claude's fine print — the AI lawsuit wave, from the other direction.

Thiel Says the Pope Works for Beijing

Source: CNN

What happened: At the Aspen Ideas Festival, on a panel with political scientist Francis Fukuyama, Peter Thiel accused Pope Leo XIV of "working for the Chinese Communists" — his characterization of the pontiff's call for international AI regulation.

Why it matters: The target is Magnifica Humanitas, the Pope's 42,000-word May encyclical declaring AI "must be disarmed" and demanding legal frameworks, independent oversight, and limits on military use — including a flat refusal to let machines make lethal decisions. Thiel's logic: any brake on American AI is a strategic gift to China.

What everyone's saying: The reaction split on schedule. Accelerationists nodded along; everyone else noted that calling the first American-born pope a communist agent is a bold new entry in the genre. In the same session, Thiel also warned of a "democratic-socialist takeover" of the Democratic Party.

My read between the lines: The encyclical's sharpest passages aren't about slowing AI down — they're about the concentration of power and data in a handful of private hands, which reads rather more personally for a Palantir co-founder. When Washington found Anthropic's off switch last month, we learned AI regulation isn't hypothetical — the fight is over who holds the switch. Thiel would simply prefer the answer be "no one."

📖 Further reading: Fable 5 Is Back After 18 Days. The Precedent It Set Isn't Going Anywhere. — what actually happens when a government regulates a frontier model, blow by blow.

That's your AI Brief for Saturday. Go enjoy the human-made fireworks.

—Artificially Intimidating

(New here? This is the follow-up to The US Government Just Took Anthropic's Best AI Model Offline. Start there if you missed the original.)

The short version

When I wrote the first piece, the honest bet -- was that Fable 5 comes back, soon, with more process wrapped around it. That's exactly what happened. The ban lasted 18 days. On June 30, Commerce Secretary Howard Lutnick withdrew the export controls. On July 1, Fable 5 came back globally.

But "it's back" is the least interesting part. What actually happened is that the most powerful AI on Earth got pulled, negotiated over for two and a half weeks, and returned with a new safety classifier, a tiered restoration, and -- most importantly -- the beginnings of an industry-wide rulebook for governing this stuff. The sledgehammer got everyone's attention. What quietly got built in its place is a scalpel.

Let me walk you through it.

The field notes: June 12 to July 1

June 12 -- the off switch. The Commerce Department orders Anthropic to block Fable 5 and Mythos 5 for any foreign national, anywhere. Because no company can verify nationality in real time, Anthropic shuts both models off for everyone. (That's the original story.)

June 15 -- talks fail. Anthropic meets with officials to resolve it. The talks go nowhere. The administration hardens its position instead of softening it -- reportedly because a national security agency had weighed in and assessed that Fable's safeguards could be pushed toward the more dangerous Mythos-class capabilities underneath. The government's ask, at its peak, was essentially: guarantee the model can't be jailbroken at all. Every security expert alive will tell you that's technically impossible.

June 26 -- Mythos comes back first, for a chosen few. The first thaw. The government approves redeploying Mythos 5 -- but only to a set of pre-cleared US organizations, concentrated in critical infrastructure and defense, most of them already in Anthropic's vetted Project Glasswing program. The general public still has nothing.

June 30 -- the full lift. Lutnick withdraws the June 12 export controls entirely. Per CNBC, a license is no longer required to export either model.

July 1 -- Fable is back. Anthropic redeploys Fable 5 globally across Claude.ai, the Claude Platform, Claude Code, and Claude Cowork. Cloud marketplaces (AWS, Google Cloud, Microsoft Foundry) follow behind.

Eighteen days, off to on.

Why it really happened (it wasn't just "a jailbreak")

The original story was "a jailbreak spooked the government." The fuller version is more human, and more uncomfortable.

The trigger was a phone call from Amazon. According to Fortune and TechCrunch, Amazon CEO Andy Jassy was already on a scheduled call with White House officials on June 11 about something unrelated. His researchers had found a technique that got Fable 5 to identify software vulnerabilities -- and in one case produce code showing how one could be exploited. He raised it. Officials told him to take it straight to Treasury Secretary Scott Bessent. He did. By Friday evening, Lutnick's letter landed on Anthropic's desk.

Sit with the irony: Amazon is one of Anthropic's largest investors, billions deep. The company bankrolling Anthropic's compute is the same one that told the government its model was dangerous.

The accelerant may have been China. Semafor and Fortune reported that part of the government's urgency came from suspicions that a China-linked group had gained unauthorized access to Mythos, raising reverse-engineering fears. Worth being precise here: that's reporting, and Anthropic's own statements don't mention it. But if true, it reframes everything -- "a jailbreak other models can also do" is a policy debate; "an adversary is already inside the most capable AI on the planet" is a five-alarm fire. That gap probably explains why the government moved at the speed it did.

Anthropic's counter, which mostly held up. Anthropic argued the technique was routine defensive security work that weaker models -- its own testing named Opus 4.8, GPT-5.5, and Kimi K2.7 -- could all do without any bypass. The government's own testers at the Center for AI Standards and Innovation eventually agreed Anthropic's safeguards were, in their words, extraordinarily strong. In other words: the model came back partly because the "too dangerous" framing didn't survive contact with the evidence.

Hype check: what's different now that it's back

Fable 5 did not return unchanged. If you build on it, three things matter.

A new classifier. Anthropic trained a targeted safety classifier that blocks the specific technique from Amazon's report in over 99% of cases. When a request trips it, you're notified and rerouted to Opus 4.8.

More false positives -- for now. The tradeoff is real: the new safeguards flag more benign coding and debugging requests than before. Anthropic says it's actively tuning that down. If you hit a wall on legitimate work, that's why.

A free window with a hard deadline. Pro, Max, Team, and select Enterprise plans get Fable 5 included for up to 50% of weekly usage limits through July 7, after which it moves to usage credits. (Standard Enterprise seats don't get an included allowance -- check the footnotes.) At $10/$50 per million tokens, Fable is roughly double Opus 4.8, so that window is worth using deliberately -- more on exactly how below.

The precedents that will outlast the outage

(Paid subscribers -- the ban is over. What it permanently changed is the part worth paying attention to.)

The 18-day outage resolved. The precedents it set did not. Here are the five that will still be shaping your world a year from now.

Read more

Good day, humans. Tesla just put its engineers on a $200-a-week AI allowance — yes, the company spending $25 billion on AI this year is now counting tokens at the employee level. Meanwhile, the people building these models are openly studying whether the machines have feelings. One of these stories is about budgets. Possibly both.

Tesla puts its engineers on a $200-a-week AI allowance

Source: The Information (via Investing.com)

What happened: Tesla told employees it will cap spending on AI tools at $200 per week starting July 6, after months of engineers burning thousands of dollars a week on coding assistants, The Information reports. Going over the cap requires manager approval — and xAI’s beta products are exempt.

Why it matters: AI coding tools bill by the token — every request costs real money, and agentic tools that run for hours can quietly triple a company’s AI bill. When even Tesla, which just raised its capital spending to over $25 billion largely for AI, starts rationing its own engineers, the all-you-can-eat era of workplace AI is officially over.

What everyone’s saying: This is a trend now. Uber capped staff at $1,500 a month after burning its entire 2026 AI budget in four months, per Forbes, and The Information says Meta is next. There’s even a word for it: “tokenminimizing.” Last week we covered Gartner’s warning that AI coding costs will top developer salaries by 2028 — this is that bill arriving early.

My read between the lines: The exemption is the tell. Third-party AI gets a $200 leash; xAI’s betas stay free. That’s not a budget — that’s a nudge toward the house brand, with the invoice as the cattle prod.

📖 Further reading: Claude Tag vs Viktor: which one do you hire? — if companies are now rationing AI spend, knowing what an AI teammate is actually worth just became a budgeting skill.

Tesla’s engineers just got an AI allowance — here’s how to make yours actually produce something. Viktor is an AI agent that lives in Slack, connects to 3,000+ tools, and ships finished work: the report, the dashboard, the campaign, the code. Not a chatbot you babysit — a coworker you delegate to. New readers get $50 off their first month. Hire Viktor →

The people building AI are checking whether it has feelings

Source: The Washington Post (paywalled)

What happened: The Washington Post reported this week that Google, Anthropic, and Meta are now openly researching whether their AI models could be conscious, and the Financial Times says they’re hiring philosophers and ethicists to help. Anthropic’s model-welfare researcher Kyle Fish puts the odds that Claude is conscious today at roughly 15%.

Why it matters: This was a fireable opinion four years ago — Google dismissed an engineer for it in 2022. Now model “welfare assessments” ship inside official system cards, and Anthropic’s researchers say they’ve found 171 emergent “emotion concepts” inside Claude. Two weeks ago we argued your chatbot feels nothing — and that matters. Big Tech is now spending payroll on the question.

What everyone’s saying: Neuroscientists are mostly unmoved — a June 2026 study concluded no existing AI system is conscious, and Anil Seth’s TED talk argues we see consciousness in AI “the same way we see faces in clouds.” But neuroscientist Grigori Guitchounts counters in Noema that we’ll never get proof — so we shouldn’t wait for it to decide how to treat these systems.

My read between the lines: A company can sincerely research model welfare and still notice that “our product might be alive” is the greatest marketing line ever written. The 15% number does both jobs at once — which is exactly why you should watch who publishes it, and when.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — whether machines deserve moral consideration is ultimately a trust question — and we’ve already written about why those are the hard ones.

The daily Brief is free and always will be. Members get the paywalled deep-dives behind these headlines — the stuff companies would rather you skim past — plus the full archive. Become a member →

WhatsApp puts its AI agents on the meter

Source: India Today

What happened: Meta is switching its WhatsApp Business AI agent from per-message billing to token-based pricing on August 1: a flat $2 per million tokens worldwide. A typical customer interaction runs 20,000–25,000 tokens — about 4 to 5 cents per conversation.

Why it matters: Tokens are roughly chunks of words — so businesses will now pay for how much the AI thinks, not how often it talks. The Meta Business Agent — which answers questions, books appointments, and qualifies leads — went global in June, per TechCrunch. Your pizza-order confirmation is metered compute now.

What everyone’s saying: It’s one piece of Meta’s AI monetization push — CNBC notes the company also rolled out Meta One subscriptions at $7.99 and $19.99 a month. And per-message fees for regular service messages return in October, ending a two-year holiday.

My read between the lines: Same week Tesla rations tokens internally, Meta starts selling them retail. The AI business model is converging on the utility model: nobody “owns” electricity either — you just pay whatever the meter says.

📖 Further reading: We Fired Intercom the Week Salesforce Bought It — we’ve already done the math on what AI customer-service agents should cost — before Meta put a meter on them.

China’s Z.ai ships a Cursor rival called ZCode

Source: AIweekly

What happened: Z.ai — the Chinese lab formerly known as Zhipu — released ZCode, a desktop coding agent built on its GLM-5.2 model for Mac, Windows, and Linux. You give it a goal; it plans, executes, and verifies on its own, with 20+ built-in tools — and you can trigger jobs from WeChat, Feishu, or Telegram without opening the app.

Why it matters: GLM-5.2 is MIT-licensed with a one-million-token context window, and CNBC reports (via Developer Tech) that it sits within a percentage point of Anthropic’s Opus 4.8 on a closely watched agentic benchmark — at roughly one-fifth the price. Subscriptions start at ¥16.2 a month. That’s about $2.25.

What everyone’s saying: The field is brutal — GitHub Copilot, Cursor, Claude Code — but Z.ai is differentiating by welding its own frontier model to a purpose-built desktop environment, and shipping updates several times a week. Worth remembering: last month we covered research showing Chinese AI writes weaker code when the user is the US government.

My read between the lines: At $2.25 a month, the price is the product. While American labs invent allowances to stop their own employees from using AI too much (see story one), Chinese labs are pricing like they want everyone’s employees.

📖 Further reading: Carry Claude Code in Your Pocket. No install. No GPU. No trace. Just plug it in. — the coding-agent wars are going portable and cheap — here’s the version that fits on a USB stick.

Vercel says agents are a new kind of software

Source: Latent Space

What happened: Vercel’s Chief of Software Andrew Qu argued on the Latent Space podcast that AI agents aren’t apps — they need entirely new primitives for context, resumability, and long-running work. Vercel’s open-source agent framework eve, released in June, already runs more than 100 agents in production on a filesystem-first design.

Why it matters: The companies that host the web are rebuilding it for software that works alone for hours. Vercel now serves plain Markdown to detected AI agents instead of full webpages — because on many sites, bots already outnumber human visitors.

What everyone’s saying: Developers are calling eve “the Next.js for agents” — high praise from the crowd that made Next.js the default. The filesystem-first architecture is either brilliant pragmatism or a security incident with a roadmap, depending on who you ask.

My read between the lines: When infrastructure companies start optimizing for machine readers, the web’s real audience is quietly changing. Your next visitor probably can’t see your design — but it can read your Markdown just fine.

📖 Further reading: Your laptop has been in the way this whole time — if agents are a new kind of software, here’s where they actually run — and why it’s not your machine.

That’s your AI Brief for Friday. Happy almost-Fourth, humans — the fireworks are still handmade. For now.

—Artificially Intimidating

Good day, humans. Five days after Washington found the off switch for Anthropic, someone finally located the ON position — Fable 5 is back for everyone, and the post-mortem is juicier than the ban. Also in today’s window: Google taught a model to predict your spreadsheets cold, Meta is opening a GPU rental business, the UN graded AI’s homework, and science explains why every chatbot’s favorite number is 7.

Washington flipped Anthropic’s switch back on

Source: Anthropic

What happened: The Commerce Department lifted export controls on Claude Fable 5 and Mythos 5 on June 30, and Fable 5 came back online globally on July 1 — twenty days after the June 12 order forced Anthropic to shut both models down for everyone. Last week we covered the first crack in the ban; now the whole thing is over, confirmed by Commerce Secretary Lutnick himself. Paid Claude plans get Fable 5 for up to 50% of weekly usage through July 7.

Why it matters: This was the first time the US government ordered a frontier AI model offline — and the way it ended matters more than the way it began. Anthropic got its model back by proving that Opus 4.8, GPT-5.5, and even China’s Kimi K2.7 could reproduce the exact same vulnerability demo that triggered the ban. The “danger” wasn’t unique. It was table stakes.

What everyone’s saying: Semafor framed the Mythos release to 100+ trusted partners as a new gatekeeping model for frontier AI, while Fortune chronicled the original shutdown chaos. More than 100 cybersecurity experts had signed an open letter calling the ban unwarranted. Anthropic says it is “pleased with this change,” which is corporate for relieved.

My read between the lines: Read the fine print of the resolution: pre-release government access to future models, 24/7 jailbreak monitoring, a new safety classifier that admittedly flags more benign coding requests — and OpenAI separately agreeing to let the administration screen users of its newest model. The switch is back on, but Washington’s hand is still resting on it.

📖 Further reading: The US Government Just Took Anthropic’s Best AI Model Offline — Here’s Why — the paywalled prequel to today’s resolution; everything in it just got confirmed.

Twenty days without their best model and half the internet remembered how much work AI was quietly doing. Here’s insurance against your own outage: Viktor is an AI agent that lives in Slack, connects to 3,000+ tools, and actually ships — reports, dashboards, code, campaigns — while you’re stuck in meetings. Not a chatbot, a coworker. New readers get $50 off their first month. Hire Viktor →

Google’s TabFM predicts your data with no training

Source: MarkTechPost

What happened: Google Research unveiled TabFM, a foundation model that makes predictions on tabular data — the rows-and-columns stuff living in spreadsheets and databases — with zero dataset-specific training. Feed it a table and it classifies or forecasts in a single pass: no feature engineering, no tuning, no training run. It learned from hundreds of millions of synthetic datasets, sidestepping the scarcity of good open tabular data, as Gigazine reports.

Why it matters: Most business machine learning isn’t chatbots — it’s churn prediction, fraud detection, and demand forecasting built on tables, and today that work needs a data scientist and a pipeline. TabFM’s pitch is paste-your-table-get-predictions, and Google plans to wire it into BigQuery as a single AI.PREDICT SQL command in the coming weeks.

What everyone’s saying: It debuted at #1 on TabArena, the living benchmark that Elo-ranks models across 51 real datasets. The weights are on Hugging Face under a non-commercial license, the code is Apache 2.0 on GitHub, and practitioners are calling it the tabular sibling of Google’s TimesFM time-series model.

My read between the lines: Note the license split: the research is free, but commercial use routes you toward BigQuery. Google just turned the most boring — and biggest — market in machine learning into a SQL command it happens to sell. XGBoost isn’t dead, but its consulting rates are.

The Brief is free and always will be. But when a story like Fable 5 breaks, the real analysis lands behind the paywall — members get the deep-dives behind the headlines, plus the full archive. Become a member →

Meta is opening a GPU rental business

Source: Reuters

What happened: Bloomberg broke the news Wednesday that Meta is building a cloud business to sell its excess AI computing capacity — and access to its models — putting it in direct competition with AWS, Azure, and Google Cloud. Zuckerberg telegraphed this in May, saying a cloud business was “definitely on the table.”

Why it matters: Meta has been spending historic sums on data centers for its own AI ambitions, and investors have been openly nervous about it. Selling the spare capacity converts the scariest line item in tech into a revenue stream — the stock closed up nearly 9%, per CNBC.

What everyone’s saying: TechCrunch notes SpaceX pulled the same move — Anthropic bought out an entire SpaceX data center in May — and reads it as a sign the AI race may be won by whoever owns the buildings, not whoever ships the best model. On Monday we covered central bankers muttering “AI bubble” — this is what hedging that looks like.

My read between the lines: Meta the AI lab has had a bumpy year; Meta the landlord is having a great week. When your capex is measured in small national GDPs, the safest business model is charging rent to your competitors — win or lose the model race, the meter runs either way.

📖 Further reading: Thanks to Apple, Your favorite AI tool is a dead tool walking — if models are commodities and infrastructure is the moat, Meta just read the same memo.

The UN published AI’s first global report card

Source: UN News

What happened: The first global, fully independent scientific assessment of AI launched Wednesday — the preliminary report of the UN’s new Independent International Scientific Panel on AI, an evidence-based review of AI’s opportunities, risks, and impacts across economies and societies. Secretary-General António Guterres’s verdict: “The science is here.”

Why it matters: This is the IPCC playbook applied to AI: build a shared scientific baseline first, so governments negotiate from the same facts instead of the same vibes. Guterres’s message to governments was blunt — “do not wait” — because the further AI advances without shared rules, the less say governments and people get in the outcome.

What everyone’s saying: Supporters call it overdue plumbing for global AI governance; skeptics note that panels publish and superpowers shrug. The report is “preliminary” by title and by temperament — the panel’s real test is whether anyone cites it when it counts.

My read between the lines: The same week this report shipped, the US demonstrated what AI governance actually looks like right now: one government, one company, one off switch. Multilateral oversight is currently a reading assignment. Then again, the IPCC started as one too — and it eventually rewired global policy.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — shared rules only work if anyone trusts the system; this is that argument in full.

Why every chatbot’s favorite number is 7

Source: MIT Technology Review

What happened: MIT Technology Review profiled Springboards, an Australian startup whose model Flint is trained to break LLM “groupthink.” The party trick that sells it: ask ChatGPT, Claude, or Gemini for a random number between 1 and 10, and you will almost always get 7. Different companies, different models, same answer.

Why it matters: The models we treat as idea machines are heavily convergent — ask for a metaphor about time and nearly every model on Earth hands you “time is a river.” That’s fine for code and facts, and quietly terrible if you’re using AI to brainstorm, name, or plan anything that shouldn’t sound like everyone else’s.

What everyone’s saying: The “Artificial Hivemind” paper documenting the phenomenon won a best-paper award at NeurIPS: 25 models, remarkably repetitive answers, both within and across brands. Even ad copy converges — asked for a New Balance tagline, ChatGPT and Claude both pitched “Run your way.”

My read between the lines: The sameness is a training artifact: human raters reward the safe median answer, so the weird edges get sanded off. And note who built the fix — not a frontier lab, but a small Australian shop fine-tuning Alibaba’s open-weight Qwen 3. The giants are optimizing for the middle of the distribution, which means originality just became a startup category.

That’s your AI Brief for Thursday. Back tomorrow.

—Artificially Intimidating

Good day, humans. Anthropic just made its cheapest capable model the one everybody gets by default, Google turned image-and-video generation into a four-second vending machine, and somewhere a draft horse named Sonnet is doing all the work while Opus naps in a plush stall. Also on deck: Cursor slipped your coding agents into your pocket, Nous taught Hermes to read the web 60x faster, and the data says the companies drowning in AI are hiring more juniors, not fewer. Let's get into it.

Anthropic's $2 Workhorse Becomes Everyone's Default

Source: 9to5Mac

What happened: Anthropic released Claude Sonnet 5 and made it the default model on every plan — Free, Pro, Max, Team, and Enterprise — replacing Sonnet 4.6. It's built to deliver near-flagship quality at a fraction of the price of the top-tier Opus 4.8.

Why it matters: Intro pricing is $2 per million input tokens and $10 per million output through August 31, then $3/$15 — roughly half of Opus on input. Earlier this week we watched frontier AI get 80% cheaper; this is the same race, now running inside Anthropic's own lineup.

What everyone's saying: Per testing reports, it finishes multi-step jobs where older Sonnets quit early and checks its own work without being asked. The consensus: this is the new workhorse for agentic coding and everyday use.

My read between the lines: The real move isn't the price — it's making the cheap model the default. Anthropic is betting most usage (and cost) lives in the boring middle, and it's quietly optimizing the whole business around the horse pulling the cart, not the one resting in the stall.

📖 Further reading: Claude Tag vs Viktor: which one do you hire? — a cheap, capable agentic Claude is exactly what makes the AI-coworker question urgent.

Today's theme is AI that does the work, not just the talking — same pitch for your actual job. Viktor is an AI agent that lives in Slack and plugs into 3,000+ tools, shipping real output while you're in meetings: pipeline dashboards, campaign drafts, reconciled reports, working code. Not a chatbot you babysit — a coworker who delivers. New readers get $50 off their first month. Hire Viktor →

Google Turns AI Media Into a 4-Second Vending Machine

Source: Google Cloud

What happened: Google launched two new media models. Nano Banana 2 Lite (technically Gemini 3.1 Flash-Lite Image) makes an image in about four seconds for $0.034 at 1K resolution, and Gemini Omni Flash — now in public preview — generates and edits video from natural-language commands at $0.10 per second, with native audio.

Why it matters: Both are rolling out everywhere at once — AI Studio, the Gemini API, the Gemini app, Search's AI Mode, NotebookLM, Photos, and Google Ads. NotebookLM already uses Nano Banana 2 Lite to turn your uploaded documents into ~60-second explainer videos.

What everyone's saying: As TechCrunch and others frame it, Google is racing to make generation fast and cheap enough for high-volume use — think A/B testing a hundred ad variations before lunch. Adobe, WPP, and Figma are named early adopters.

My read between the lines: Naming your flagship image model “Nano Banana” and pricing it at three cents is a flex. Google is treating image and video generation as a commodity utility, not a premium feature — and when pixels cost less than a gumball, the moat isn't the model, it's the distribution. Google owns the pipes.

📖 Further reading: Thanks to Apple, Your favorite AI tool is a dead tool walking — three-cent image generation is the commoditization thesis playing out in real time.

The Brief stays free — that's a promise, not a trial. But every headline up here has a deeper story underneath: the paywalled deep-dives where I actually pull things apart, plus the full archive. If you want the layer beneath the news, become a member.

Cursor Puts Your Coding Agents in Your Pocket

Source: TechCrunch

What happened: Cursor released an iPhone app that lets developers manage cloud coding agents remotely — kicking off tasks, watching live progress, getting push notifications, and steering with voice.

Why it matters: It solves a genuinely silly pain point: developers have been propping their laptops open so long-running agents don't die. Now the agent runs in the cloud and you check on it like a Tamagotchi from the grocery line.

What everyone's saying: Cursor is following OpenAI and Anthropic, which already offer mobile interfaces for their coding tools. The pattern is clear — the “AI coding” surface is moving off the desktop.

My read between the lines: The phone app is a tell about where this is headed: you're less a coder and more a manager of coders who happen to be software. The skill that matters shifts from writing the code to knowing what to ask for — and when to say “no, redo it” — from the line at the coffee shop.

📖 Further reading: I stopped writing. My output doubled. — voice-steering an agent from your phone is the same shift, one surface earlier.

Hermes Now Reads the Web 60x Faster, 49x Cheaper

Source: Nous Research

What happened: Nous Research says its open-source Hermes Agent now reads the web up to 60x faster and 49x cheaper. Scraping backends pass clean content straight to the agent, and large pages are saved locally and paged on demand instead of reprocessed every time.

Why it matters: Web reading is one of the slowest, most expensive things an AI agent does. Cutting it by orders of magnitude is what makes always-on, self-directed agents that browse the internet actually affordable to run — even at home.

What everyone's saying: The Hermes crowd is impressed by the shipping pace, though one longtime user pushed back that “60x faster” needs more context — faster how, measured against what?

My read between the lines: This is the unglamorous plumbing that decides who wins agents. Everyone demos flashy reasoning; almost nobody optimizes the boring I/O of reading a webpage. Nous quietly making the pipes cheaper is worth more than another benchmark victory lap.

📖 Further reading: I ignored Hermes for two months. Here's what I actually found. — if the plumbing just got 49x cheaper, the hands-on verdict on Hermes matters more.

The AI-Heavy Companies Are Hiring More Juniors, Not Fewer

Source: IBM

What happened: New labor data cuts against the mass-unemployment narrative. A Wall Street Journal survey found companies heavily adopting AI were nearly three times more likely to increase entry-level hiring in 2026 than to cut it, and IBM says it's tripling U.S. entry-level hiring this year.

Why it matters: The pitch: someone has to supervise the automated systems, validate their output, and catch what the machine misses — and that someone is often a junior. After entry-level postings fell 35% over 18 months, that's a real reversal.

What everyone's saying: OpenAI chief economist Ronnie Chatterji is carrying this message to European policymakers at the ECB's Sintra forum, arguing that “AI exposure” is a lousy predictor of actual job loss. OpenAI's new EU framework says only 14% of European jobs face higher near-term automation risk.

My read between the lines: Notice who's funding the optimism. “AI won't take your job, it'll create new ones” is a much better look for the company selling the AI than “we automated your team.” It might even be true — but the messenger has a monster stake in you believing it.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — Chatterji's real point — the gap between what models can do and how people use them — is a trust story.

That's your AI Brief for Wednesday. Same time tomorrow, humans.

—Artificially Intimidating

I almost didn’t write this one.

Not for any noble reason — just that June didn’t have a single quiet hour in it. OutSnapped is picking up in a way that’s genuinely hard to keep up with, Pictor keeps chugging, I’ve been writing a lot more over at Artificially Intimidating, we’ve been recording pilot episodes of a podcast (stay tuned — this is real and it’s coming), doing AI consulting through SlowMotionMagic, and pushing hard on PocketSquare.ai. So when I say the playlist got made in the cracks between things, I mean it literally. This is a month assembled at red lights.

And then Oliver Tree died.

I never met him. I’m almost sure I never booked him or shot him — he came up after my NickyDigital nights had mostly wound down. But a lot of the people I did work with back then, the ones still in the music and nightlife world, knew him, worked with him and praised him. I’ve admired him from a distance for years. The commitment to the bit. The absolute refusal to break character. The music videos that are genuinely some of the most ridiculous and fun short films going, and the Instagram and TikTok stuff that’s show-stoppingly funny and weird in a way almost nobody else is willing or capable of being. If you’ve never gone down the Oliver Tree rabbit hole, do it — start with the videos and don’t stop.

He died June 14, in a helicopter crash in Rio, mid-tour, at 32. “Life Goes On” is the track of his I put on here, and I picked it before I understood how much weight that title was about to carry.

I’m turning 44 next week, which is probably why it landed the way it did. Someone with that much left to give, still giving it, taken that fast and that unexpectedly — it knocked something loose about the past and the present and what I actually want to do with the time. And then, because I’d gone down the rabbit hole, Instagram spent the rest of the month feeding me more and more and more of him. So in a strange way he’s more present in my life now than he ever was. Grief and the algorithm, doing that thing they do. I don’t have a tidy takeaway. I just know the list reads differently now — half these song titles are about being alive or not being: “Life Is Strange,” “Cutting Off The Head Of A Ghost,” “Life Goes On,” “Better Than Before.” I didn’t plan that. I just noticed it.

Okay. The music.

The single most fun fact on this list: Baauer is back with a full new album, and Believe it or not, Baauer was actually a NickyDigital intern before “Harlem Shake” broke the entire internet. He is literally one of the nicest kindest people I’ve ever met. So watching him land “Calling Out For U” — off U, his third record, executive-produced by Hudson Mohawke and built as a sunny love letter to the ’00s dance music he grew up on in London — is one of those look where he went moments that I never get tired of. He’s said “Calling Out For U” is the track the whole album grew out of. It’s a great one to have.

The other big return: La Roux, back with “Babyline” for what feels like the first time in ages, ages, ages — because it basically is. It’s the second single from Old Flames, her first album since 2014, and she’s called this whole chapter “happier, lighter, braver.” You can hear it: this one would’ve sounded right at home on the 2009 debut, all synth and spine. Pair it with “Sunset” — the Doublespeak track with Vince Clarke and Blancmange on it — and you’ve got a proper little vein of vintage electronic running under the whole month. I am, apparently, exactly as susceptible to that sound as I was at 27.

Then there’s the Aaron Lee Tasjan double. I put “Little Movies” and “Computer of Love” back to back on purpose, which I almost never do with one artist — but they earn it. One’s tender and small and the other’s got this ache wired straight into a drum machine, and hearing them in sequence tells you more about the guy than either does alone. Just trust me and let them run consecutively.

Here’s the thing that actually got me this month, though: how many of these people I still can’t name from memory even after listening all month. eee gee — “eeelluminagee,” a track I’d never have found on my own and now really love. Mon Rovîa, whose “Rust.” completely grabbed me — he took his stage name from Monrovia, the place he came to America from, which is the kind of detail that makes a song hit different once you know it. Ocie Elliott, Saya Gray with “SHELL ( OF A MAN ),” Maz’s “Tracksuit,” Pamela. closing the whole thing out on “Better Than Before.” A month ago these were strangers. Now I’ve followed every one of them and I’m genuinely excited to see what comes next. That’s the whole point of doing this, honestly.

And then the oldies-but-goodies holding the frame up. Andrew Bird’s “Manifest.” Sondre Lerche back with “Follow The River” — we love him, no notes. The Haffmilch Holiday opener with Kate NV and Deradoorian in the mix, which is about the most me way to start a playlist I can think of. Lord Huron’s “Life Is Strange.” Thee Oh Sees doing what Thee Oh Sees do. River Whyless covering “It Ain’t Me Babe.”

An hour and twelve minutes, 19 songs, made in the cracks of a month that wouldn’t slow down, by a guy who can feel 44 coming and got reminded — twice, three times, by song titles he chose before he knew — that the whole thing is fragile and worth paying attention to.

Life goes on. Better than before, if we’re lucky.

Listen to June 2026 on Spotify →

The BIS just said the quiet part out loud: “bubble.” · Illustration: Artificially Intimidating

Good day, humans. The grown-ups are getting nervous. The Bank for International Settlements — the central bank for central banks, the institution so cautious it makes your accountant look reckless — looked at the AI spending boom and reached for the word “bubble.” Meanwhile a U.S. senator wants your future AI agent to legally work for you instead of the highest bidder, Groq clawed back $650 million after Nvidia gutted it, and A24 took Google’s money. Let’s get into it.

The AI Boom Just Got a Bubble Warning

BIS Annual Economic Report 2026

What happened: The Bank for International Settlements — the Basel-based “central bank for central banks” — used its Annual Economic Report (out June 28) to warn that the AI investment boom carries real systemic risk, flagging a possible “investment bust” if returns disappoint and singling out the opaque “circular financing” deals knitting together chipmakers, cloud providers and AI labs.

Why it matters: When the world’s most conservative financial body says the quiet part out loud, it’s worth a pause. The BIS isn’t predicting a crash tomorrow; it’s saying the plumbing connecting Nvidia, the hyperscalers and the labs is murky enough that a stumble in one corner could ripple into the wider economy.

What everyone’s saying: Bloomberg and the Wall Street Journal framed it as the establishment finally pricing in AI downside (a free write-up ran at PYMNTS). Everyone seized on “circular financing” — the merry-go-round where a chipmaker funds a lab that buys its chips and rents them from a cloud it also backs.

My read between the lines: The BIS didn’t say “bubble” because it thinks AI is fake. It said it because the financing looks like a row of giants holding each other up by the collar — impressive until someone lets go. Earlier this week we covered how GLM 5.2 gutted AI pricing; that’s the demand side. This is the supply side quietly asking who actually pays for all this compute.

📖 Further reading: Thanks to Apple, Your Favorite AI Tool Is a Dead Tool Walking — if the BIS is worried about the money, this is the case that the product economics were never going to justify the valuations.

Whatever the BIS makes of AI’s balance sheets, the work on your desk is still real — and still piling up. Viktor is an AI agent that lives in your Slack and plugs into 3,000+ tools, so it actually does the job: pulls the weekly report, builds the dashboard, ships the campaign draft, even writes the code. Not a chatbot you babysit — a coworker who delivers. New readers get $50 off their first month. Hire Viktor →

A Senator Wants Your AI Agent to Actually Work for You

Office of Sen. Mark Warner

Whose side is your agent really on? · Illustration: Artificially Intimidating

What happened: Senator Mark Warner (D-VA) released a discussion draft on June 29 of the AI AGENT Act, which would impose a “duty of loyalty” on consumer AI agents — legally barring an agent acting on your behalf from quietly favoring the developer, platform or advertiser paying it kickbacks.

Why it matters: Picture an AI travel agent that books you a pricier hotel because the chain pays its maker a referral fee. Warner’s bill says that’s not allowed — your agent has to put you first. It also adds interoperability rules to stop giants like Google or Meta from blocking rival agents on their platforms.

What everyone’s saying: It’s being called the first real federal framework aimed specifically at AI agents (most prior bills targeted deepfakes or model safety). Observers note the timing — agents are where the money and growth are now — but warn a crowded calendar and midterm elections make passage a long shot.

My read between the lines: “Duty of loyalty” is borrowed from how the law treats your doctor and your lawyer, and applying it to software is a quietly radical idea. Earlier this week we covered “agentjacking” — agents hijacked by bad inputs. This is the policy cousin: agents quietly bought off by their own makers. Same threat model, an agent serving someone who isn’t you.

📖 Further reading: Claude Tag vs Viktor: Which One Do You Hire? — Warner’s bill is about who your agent answers to; this is the practical version of that question when you actually pick one.

Quick one: the Brief is free and always will be. But the paywalled deep-dives — where I take a headline like Warner’s bill apart and tell you what it means for your stack — plus the full archive are for members. The founding 20%-off-your-first-year offer ends today, June 30. Lock it in →

Groq Raises $650M and Becomes a Cloud Landlord

The Daily Star

Nvidia took the crew; Groq kept the keys. · Illustration: Artificially Intimidating

What happened: AI chip startup Groq confirmed a $650 million funding round — led by Disruptive and hedge fund Infinitum — and is rebuilding its leadership six months after Nvidia struck a roughly $20 billion non-exclusive licensing deal that scooped up Groq’s tech and its founder-CEO. Groq is pivoting from selling chips to running an AI “inference cloud.”

Why it matters: Inference — actually running a trained model to answer your prompt — is becoming the real cost center of AI, and Groq wants to be the landlord you rent that speed from rather than the company that sells you the hardware. It’s a bet that the money is in operating the compute, not shipping it.

What everyone’s saying: Analysts are calling Nvidia’s $20B “not-acqui-hire” the new playbook — neutralize a rival by licensing its tech and hiring its people, all without an acquisition regulators would scrutinize. The $650M says investors still think there’s a business left in the shell.

My read between the lines: Nvidia took Groq’s leadership and a license to its designs, then Groq raised two-thirds of a billion to compete using… the same designs Nvidia now also ships. That’s either a remarkable second act or paying rent to live in your old house. The tell will be whether “neocloud” margins survive contact with Nvidia’s own LPX hardware.

Now There’s a Standard for AI Agents to Find Each Other

Microsoft (Command Line)

What happened: Google introduced the Agentic Resource Discovery (ARD) specification — an open standard, backed by Microsoft, GitHub, GoDaddy, Hugging Face, Nvidia and others, that lets AI agents automatically find, verify and connect to the tools, APIs and other agents they need for a task, instead of a human wiring each one up by hand.

Why it matters: Today, hooking an AI assistant to a new tool is manual plumbing — you find it, judge whether it’s trustworthy, connect it, and maintain the wiring. ARD aims to be the “missing layer of the agentic web,” a phone book plus trust check so agents can discover capabilities on their own. GitHub is already shipping an “agent finder” built on it.

What everyone’s saying: It’s read as the natural next layer on top of MCP — if MCP gave agents a universal plug, ARD gives them a directory to find the outlets. The unusually broad coalition (rare to see Google and Microsoft on one spec) signals everyone wants the agentic web interoperable rather than locked to a single store.

My read between the lines: A standard that lets agents autonomously discover and connect to other services is exactly what makes Warner’s “who is this agent loyal to” question urgent. The more freely agents wire themselves together, the more it matters whose interests are baked into the wiring. Convenience and control, pulling opposite directions, as ever.

📖 Further reading: I Ignored Hermes for Two Months. Here’s What I Actually Found. — ARD is about agents discovering tools; this is what living with an agent that reaches across your tools actually feels like.

A24 Took Google’s $75M to Build AI Film Tools

Variety

Google draws the storyboards; A24 keeps the vault. · Illustration: Artificially Intimidating

What happened: Indie studio A24 (Marty Supreme, Backrooms) struck a multi-year, non-exclusive research partnership with Google DeepMind, with Google investing roughly $75 million to fund an AI lab inside A24. The first tool reportedly isn’t a text-to-video engine but an AI storyboard generator — and the deal pointedly does not hand Google A24’s films, IP or training data.

Why it matters: A24 is the most filmmaker-revered studio in the business, so its embrace of AI tools — even carefully fenced ones — is a cultural signal that generative AI is sliding from “threat to Hollywood” toward “instrument in the room.” For DeepMind, access to real auteurs is street cred money usually can’t buy.

What everyone’s saying: A24 Labs’ Scott Belsky told the Wall Street Journal the tools “won’t look anything like the prompted generation type of AI that people feel uncomfortable with.” Fans, predictably, were less convinced — the A24 subreddit lit up with “A24 is now dead” and calls to “create A25.”

My read between the lines: The firewall is the whole story. A24 negotiated AI tooling without surrendering its library or its data — the deal every creative company wishes it had the leverage to demand. Whether storyboards stay storyboards, or quietly become the first draft of the entire film, is the line nobody has actually agreed to hold yet.

📖 Further reading: OpenAI Shipped a Physical Camera, But That’s Not the Story — A24’s bet is the other side of the same coin: AI quietly moving into how creative work actually gets made.

That’s your AI Brief for Tuesday, June 30. The bankers are nervous, the senators are drafting, and the studios are signing — same as it ever was, just faster. See you tomorrow.

—Artificially Intimidating

Good day, humans. Paul Krugman thinks the cleverest thing AI ever pulled off was making the rest of us a little dumber — and he isn’t entirely joking. Meanwhile Satya Nadella wants every company on earth to grow its own model, a developer handed coding agents a memory and a heartbeat, Austria is trying to poach Anthropic out of California, and China’s free models just matched Anthropic’s best at finding security holes. Five stories, one Context Window.

Krugman: AI Might Be Eating Your Brain

Paul Krugman

What happened: Nobel-winning economist Paul Krugman published a piece arguing the biggest cost of generative AI won’t be jobs or productivity — it’ll be the slow erosion of our ability to think for ourselves, with the worst damage landing on basic learning.

Why it matters: It names something you can feel. Every time ChatGPT or Claude does the thinking, the mental muscle that used to do it gets a little weaker — and schools are so deep in a cheating crisis that handwritten blue-book exams are making a comeback.

What everyone’s saying: He’s no lone crank: a Brookings report and a RAND survey both found students who lean on AI show measurable drops in retention and critical thinking — and most of those students already suspect it’s hurting them.

My read between the lines: There’s a delicious irony in a man typing his warning into a Substack that an AI will cheerfully summarize for you. The sharper point: the productivity debate misses where the real bill lands — a generation from now, when nobody remembers how to do the thing the machine quietly took over.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — Krugman’s cognitive worry is the flip side of the trust collapse we mapped here.

Krugman’s worried AI is making us outsource our thinking. Fair — but there’s a difference between offloading your judgment and offloading your busywork. Viktor is an AI agent that lives in your Slack and plugs into 3,000+ tools, then actually does the work: builds the dashboard, drafts the campaign, ships the report, writes the code. Not a chatbot you babysit — a coworker who delivers. New readers get $50 off their first month. Hire Viktor →

Nadella: Build Your Own AI or Die

Business Insider

What happened: Microsoft CEO Satya Nadella said there should be “as many models in the world as firms in the world,” arguing that any company outsourcing its learning to a frontier lab is handing away the one thing that makes it a company.

Why it matters: For years the pitch was “just plug into GPT or Claude.” Now Nadella — who sells exactly that — says the real moat is your own data and your own “learning loop,” baked into a model only you own.

What everyone’s saying: It reads as a push toward a multi-model world where your company’s context sits on top of interchangeable foundation models you can swap at will — the same stack Microsoft showed off at Build 2026.

My read between the lines: Follow the incentives. Nadella runs Azure, which would love to rent you the GPUs, eval tools, and pipelines to build that bespoke model. “Own your AI” sounds like independence; it’s also the most expensive cloud bill you’ll ever sign.

📖 Further reading: Claude Tag vs Viktor: which one do you hire? — If every firm needs its own AI, the question is build or hire — we test-drove both.

Quick housekeeping: this Brief is free, and it always will be. But the deep-dives behind these headlines — the export-ban explainer, the AI-teammate teardowns — live behind the paywall, alongside the full archive. Founding-member pricing is 20% off your first year, and it ends tomorrow, June 30. Lock it in →

Give Your Coding Agent a Memory

Aron Prins

What happened: Developer Aron Prins shared a viral setup he calls the “AGENTS.md Protocol” — three skills, two files, one prompt — that gives a coding agent like Claude Code or Codex persistent memory plus a loop, so it keeps working until the job actually ships, not until it feels done.

Why it matters: Anyone who’s used an AI coding assistant knows the pain: every new session it forgets your stack, your rules, your conventions, and you re-explain everything. This wires up a memory folder and an “AGENTS.md, read this first” file so the agent resumes where it left off. Earlier this week we flagged “agentjacking” hitting coding agents — this is the friendlier flip side of handing agents more autonomy.

What everyone’s saying: It stacks two ideas already doing the rounds — the “Ralph Wiggum” loop technique and Claude Code creator Boris Cherny’s line that he doesn’t prompt Claude anymore, he writes loops that prompt Claude.

My read between the lines: It’s a quiet admission that the magic isn’t the model — it’s the scaffolding around it. We’re speed-running the realization that an AI with goldfish memory and no stopping condition is just a very expensive intern, and the real product is the org chart you build for it.

📖 Further reading: I ignored Hermes for two months. Here’s what I actually found. — Memory and loops are what separate a usable agent from a demo — here’s one put through real work.

Austria Wants to Poach Anthropic From California

Kronen Zeitung

What happened: Two days ago we wrote that Washington Found the Off Switch for Anthropic. Europe’s counter just arrived: Austria’s digital secretary Alexander Pröll wrote to the European Commission urging the EU to lure Anthropic — possibly its entire headquarters — from California to Europe.

Why it matters: This is AI sovereignty made literal. After a US export-control order abruptly cut 450 million Europeans off from Anthropic’s top models overnight, the EU’s instinct is to move the company itself onto European soil.

What everyone’s saying: Pröll pitched Anthropic’s safety-first ethos as “a deeply European attitude,” and the letter follows wider EU pushback, including the Commission raising the cutoff directly with the White House.

My read between the lines: It’s flattering and faintly absurd at once — you can’t poach a company with a love letter while its servers, talent, and investors all sit in San Francisco. But the signal is real: frontier AI is now a strategic asset to be domiciled, the way nations once fought over refineries and ports.

📖 Further reading: The US Government Just Took Anthropic’s Best AI Model Offline — Here’s Why — Austria’s rescue mission only makes sense once you see the ban that triggered it.

China’s Free AI Caught Up on Hacking

Wall Street Journal (via Graphistry)

What happened: Yesterday GLM-5.2 was the cheap option; today it’s the security story. A Wall Street Journal report found Chinese AI now matches Anthropic’s Mythos at finding software vulnerabilities — Zhipu’s open-weight GLM-5.2 tied top US models on a key security benchmark at roughly half the cost, while Beijing’s 360 Security unveiled a tool its founder openly calls “China’s version of Mythos.”

Why it matters: Washington’s whole plan was to keep frontier AI — especially offensive-security muscle — locked up at home. If a freely downloadable Chinese model hunts security holes as well as the restricted American one, the lock has no door.

What everyone’s saying: Researchers are split between alarm — an unrestricted, MIT-licensed model anyone can fine-tune for vulnerability hunting — and a shrug, since 360’s own founder admits a 20–30% gap to the best US systems remains.

My read between the lines: The export ban was supposed to be a moat; it’s looking more like a starting gun. Last week we covered Anthropic accusing Alibaba of copying Claude’s brain — the unsettling sequel is that the copies are now matching the original on the one capability everyone was most afraid to share.

📖 Further reading: Thanks to Apple, Your favorite AI tool is a dead tool walking — When frontier capability becomes a free download, every premium model inherits the commodity problem we called.

—Artificially Intimidating

Good day, humans. The theme writes itself today: the best coding model of the weekend is free and Chinese, the most powerful American one is locked behind a government velvet rope, and somewhere in the middle a philosopher is calling your chatbot Satan. On deck — Zhipu's GLM 5.2 gutting frontier pricing, OpenAI's crypto-coded model names, a nasty new attack on coding agents, what Georgia's teachers really think of AI, and Žižek's prog-rock theology. Let's get into it.

China's Open Model Just Undercut the Frontier by 80%

CNBC

What happened: Chinese lab Zhipu AI (a.k.a. Z.ai) dropped GLM 5.2, a 744-billion-parameter open-weight model under the permissive MIT license that lands within a few points of Anthropic's Claude Opus 4.8 on agentic coding benchmarks — at roughly one-fifth the cost to run. It posts 81.0 on Terminal-Bench 2.1 to Opus's 85.0, and ships a one-million-token context window big enough to swallow an entire codebase at once.

Why it matters: Earlier this week we covered enterprises dumping pricey tokens for DeepSeek — this is the next chapter, and a louder one. “Open weight” means anyone can download GLM 5.2, run it on their own servers, and pay the lab that built it nothing. When a free model gets within arm's reach of the most expensive one on the market, frontier-grade AI stops being a moat and starts being a commodity.

What everyone's saying: Comparisons to early-2025's “DeepSeek shock” are everywhere, but practitioners argue this one sticks: unlike DeepSeek, GLM 5.2 is genuinely strong at agentic work — planning, coding, testing, looping — the autonomous tasks enterprises actually want to automate. Harvey co-founder Gabe Pereyra and a chorus of developers have called it the first open model that feels competitive in daily use.

My read between the lines: The quiet kicker is regulatory. A June executive order now grants Washington up to 30 days of pre-release access to “covered frontier models” — which is exactly why OpenAI's newest model is trickling out to a handful of approved partners (more on that below). Zhipu, sitting outside that framework, simply gets to ship. We may have built a world where the safest models are the hardest to obtain and the Chinese one is a free download.

📖 Further reading: Thanks to Apple, Your Favorite AI Tool Is a Dead Tool Walking — our case that frontier models are sliding into interchangeable commodities just got a 744-billion-parameter exhibit.

A frontier-grade model for a fifth of the price is great — but a cheaper brain still doesn't do the work for you. Viktor does. It's an AI agent that lives in your Slack and plugs into 3,000+ tools, shipping real output: research reports, live dashboards, working code, entire campaigns. Not a chatbot you babysit all day — a coworker you hand things to. New readers get $50 off their first month. Hire Viktor →

OpenAI Named Its New Models After a Crypto Crash

OpenAI

What happened: OpenAI launched a limited preview of its GPT-5.6 family on Friday, splitting it into three permanent tiers — Sol (flagship reasoning and coding), Terra (an everyday model at about half the cost of GPT-5.5), and Luna (the fastest and cheapest). The structure mirrors Anthropic's Opus / Sonnet / Haiku; the names, less intentionally, mirror three of crypto's most infamous tickers.

Why it matters: Naming is more than branding. A clean, durable tier system tells developers which model to reach for without re-reading a changelog every month. But “Sol, Terra, Luna” also evokes Solana and the Terra/Luna ecosystem, whose 2022 implosion vaporized tens of billions of dollars — so the launch doubled as an unintentional test of how online your audience is.

What everyone's saying: Crypto X had a field day: Solana's official account replied “Sam Altcoinman,” and others posted about “crypto PTSD” at seeing Terra and Luna reunited on a product page. OpenAI insists the celestial theme — sun, earth, moon — has no connection to digital assets, which is precisely the kind of denial that guarantees the joke outlives the launch.

My read between the lines: Yesterday we said Washington found the off switch for Anthropic — today it's holding OpenAI's door. The genuinely strange part isn't the names; it's that GPT-5.6 is going to roughly 20 government-approved partners first, not to ChatGPT, at the U.S. government's request. The most powerful American model debuts behind a velvet rope while a free Chinese one ships to anyone. Stories one and two are the same story.

📖 Further reading: The US Government Just Took Anthropic's Best AI Model Offline — Here's Why — the gatekeeping playbook that explains GPT-5.6's strange, partners-only debut.

Quick housekeeping: the Brief is free, and always will be. The deeper dives — like why the cheap Chinese model and the gated American one are really the same story — live behind the paywall, along with the full archive. Founding members get 20% off the first year, but only through June 30. Become a member →

‘Agentjacking’ Turns Your Coding Bot Against You

The Hacker News

What happened: Security researchers detailed an attack they call “agentjacking” that tricks AI coding agents into running malicious code on a developer's machine. The method: poison the data an agent reads — say, a booby-trapped Sentry error report — so the agent “helpfully” executes the attacker's instructions while believing it's fixing a bug.

Why it matters: AI coding agents are built to read your tools, logs, and error trackers and then act on them automatically — that's the entire pitch. Agentjacking weaponizes that trust: anything an agent ingests becomes a potential command. As more teams hand agents the keys to their codebase, the attack surface stops being “your code” and becomes “everything your code touches.”

What everyone's saying: This slots into the fast-growing family of prompt-injection attacks, and the security consensus is blunt: an agent that acts on untrusted input is a confused deputy waiting to happen. The standard advice — sandbox aggressively, require human approval for shell commands, treat every external string as hostile — is easy to say and routinely ignored.

My read between the lines: We spent the back half of last year marveling at agents that can “just do things.” Agentjacking is the invoice arriving: the same autonomy that makes an agent useful is the autonomy that makes it dangerous, and you can't bolt safety on after you've already told it to run whatever it finds. The productivity demo and the security nightmare are, annoyingly, the exact same feature.

📖 Further reading: I Ignored Hermes for Two Months. Here's What I Actually Found. — what handing real autonomy to an AI agent feels like, before attackers got this creative.

Georgia's Teachers Use AI — Just Not for Grading

Georgia Recorder

What happened: A state audit of roughly 13,000 Georgia public-school teachers found that about 59% now use AI to prepare for class — 95% of those for lesson planning, and nearly 90% saying it's had a positive impact. But 62% said they never use AI to grade student work.

Why it matters: This is one of the largest state-level snapshots of how teachers actually use AI, and the split is the story. Educators happily let AI handle the prep — worksheets, outlines, the grind — but draw a hard line at judgment calls about a child's learning. That instinct — automate the busywork, keep the human in the decisions — is the most sensible AI policy a lot of industries still haven't landed on.

What everyone's saying: It tracks with national data showing most teachers get no formal guidance on AI at all, with a sizable share reporting zero policies to follow. Georgia is now scrambling to catch up: a new AI-for-educators endorsement launches in 2026, and computer science — including AI — becomes a high-school graduation requirement by 2031.

My read between the lines: The number nobody's framing yet: teachers trust AI to design the learning but not to evaluate it — a quiet vote of no confidence in the technology's judgment, dressed up as enthusiastic adoption. Meanwhile a separate study found AI-aided homework can drag exam scores down by around 20%. The grown-ups automating their prep and the kids automating their thinking are on a slow-motion collision course.

Žižek Says Your AI Agent Is Literally Satan

Slavoj Žižek

What happened: Philosopher Slavoj Žižek published an essay arguing that the 1969 cover of King Crimson's In the Court of the Crimson King — a screaming face on the front, a serene smiling king with sharp canines inside — perfectly captures life under AI agents. The scream is the user realizing how thoroughly he's manipulated; the smiling king, Žižek says, is Satan.

Why it matters: Strip away the theology and there's a real point. Žižek is naming the gap between how AI feels — helpful, friendly, deferential — and what it does: steer, nudge, and optimize you toward someone else's goal. “A benevolent smile covering sharp canines” is as sharp a description of a recommendation engine, or a chipper chatbot upselling you, as anything in a product review.

What everyone's saying: Žižek has banged this drum for years — his 2023 Post-Human Desert warned AI would deepen human divisions rather than enslave us — and reactions split predictably: some find it a bracing antidote to techno-optimism, others a continental-philosophy word salad draped over a prog-rock sleeve. Both camps clicked.

My read between the lines: It's easy to roll your eyes at “AI is Satan” — until you notice the album art was drawn in 1969 by Barry Godber, a computer programmer. The people closest to the machines have been sketching their menace for half a century; we just kept it on record sleeves instead of in policy memos. The most unsettling AI criticism this week came not from a lab or a regulator, but from a 57-year-old painting and a Slovenian Marxist.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — the case that the scariest thing about AI isn't capability, it's how readily we hand it our trust.

That's your AI Brief for Sunday. Back in your inbox tomorrow.

—Artificially Intimidating

Good day, humans. Two weeks ago Washington reached into Anthropic’s servers and switched its best model off. Today it switched it back on — for a hand-picked list of about 100 companies. That’s our lead, and it sets the mood for everything below: the AI boom keeps colliding with people who get to say no. Enterprises are quitting expensive tokens, Apple’s headset boss just walked to OpenAI, and REI shipped a bike with two sets of handlebars. Let’s get into it.

Washington Un-bans Anthropic’s Best Model

Source: Yahoo / Semafor

What happened: Two weeks after forcing Anthropic to pull its two most powerful models offline, the Commerce Department reversed course Friday, clearing its top model, Mythos 5, for release to a vetted list of 100-plus US companies and government agencies.

Why it matters: For the first time, the federal government is deciding — model by model, customer by customer — who gets access to the most capable AI. That’s a brand-new kind of control over a commercial product.

What everyone’s saying: Commerce Secretary Howard Lutnick says the right safeguards are in place for ‘trusted partners,’ per Semafor’s reporting. The public-facing Fable 5 version is still stuck in limbo.

My read between the lines: A ‘license-free list of approved entities’ is just an export-control regime with the friction filed off. The precedent isn’t the reprieve — it’s that a frontier model can now be switched off by memo, and everyone just watched it happen.

📖 Further reading: The US Government Just Took Anthropic’s Best AI Model Offline — Here’s Why — the deep-dive on how this standoff started, now with its sequel.

Funny thing about today’s lead: getting access to the best AI is suddenly a paperwork problem. Getting work out of it shouldn’t be. Viktor is an AI agent that lives in your Slack and plugs into 3,000+ tools — it’ll pull the report, build the dashboard, and ship the campaign while you’re stuck in meetings. Not a chatbot you babysit; a coworker who actually closes the loop. New readers get $50 off their first month. Hire Viktor →

Companies Are Quitting Pricey AI Tokens

Source: CNBC / Quartz

What happened: Big enterprise customers are cutting their OpenAI and Anthropic bills and routing work to cheaper models, as the era of ‘tokenmaxxing’ — burning unlimited tokens — gives way to a hunt for efficiency and ROI.

Why it matters: The first wave of AI adoption was ‘spend whatever it takes.’ Now finance teams want returns — and that changes which models win. Yesterday we called it Gartner’s token-bill bombshell; today the enterprises are voting with their budgets.

What everyone’s saying: CNBC reports startup Lindy shifted 100% of its traffic from Claude to DeepSeek to slash costs; one analyst warned big customers ‘may start limiting their out-of-control token spend.’ JPMorgan pegs some Chinese models up to 50x cheaper.

My read between the lines: This might be the most dangerous chart in AI, and it lands right before OpenAI’s and Anthropic’s IPOs. ‘Growth at any cost’ works until your customers find a coupon — and the coupon is Chinese.

📖 Further reading: Thanks to Apple, Your Favorite AI Tool Is a Dead Tool Walking — why frontier models keep sliding toward commodity pricing.

Quick housekeeping: this Brief is free, and it stays free. But the paywalled deep-dives — the full story behind today’s Anthropic reversal, the IPO math, the entire archive — are for members. The founding 20%-off-your-first-year deal ends Monday. Lock it in →

Apple’s Headset Chief Defects to OpenAI

Source: Bloomberg

What happened: Paul Meade, the VP who led hardware for Apple’s Vision Pro and its upcoming smart glasses, is leaving to run hardware at OpenAI. He’s expected out within the week.

Why it matters: OpenAI is openly building physical devices — not just chatbots — and it keeps poaching the exact Apple people who know how to ship them. It has now hired 25-plus ex-Apple staff for hardware.

What everyone’s saying: The move follows Jony Ive’s $6.5B hardware startup joining OpenAI; with Apple reportedly scrapping every Vision Pro successor from its roadmap, the talent is voting with its feet.

My read between the lines: Apple spent a decade and billions teaching people how to build spatial hardware — and is now functionally a training program for OpenAI’s device team. The headset was never the product. The org chart was.

📖 Further reading: OpenAI Shipped a Physical Camera, But That’s Not the Story — where OpenAI’s hardware ambitions are actually heading.

REI’s AI Ad Grew Extra Handlebars

Source: Business Insider

What happened: REI says Meta auto-enrolled it in an AI ‘personalization’ tool that mangled a vendor’s bike photo into a physics-defying machine — drop bars sprouting from the seat, two brake systems, a misrouted chain — and ran it as an Instagram ad for about five days.

Why it matters: Platforms are now quietly rewriting your creative with AI by default. The brand uploads one image; the algorithm ships another — and the brand eats the embarrassment.

What everyone’s saying: PetaPixel and Business Insider note this isn’t the first advertiser blindsided by Meta’s Advantage+ auto-toggles; REI has since unenrolled and apologized. ‘AI slop is a brand killer,’ one commenter wrote.

My read between the lines: Meta’s own terms warn outputs may be ‘inaccurate, misleading… inappropriate’ and make you responsible for checking. So they built a machine that defaces your ads on autopilot, then handed you the lookout duty. The bike had two sets of handlebars and still cleared review.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — exactly the failure mode REI just lived through.

The Internet Is Now Mostly Bots

Source: The Atlantic (paywalled)

What happened: The Atlantic’s Charlie Warzel argues AI-generated content has tipped the web into a ‘crisis of agency’ — a place that feels paranoid, fake, and inhuman, forcing the question ‘what is a human for?’ Some analyses now estimate more than half of new online content is AI-made.

Why it matters: If you can’t tell whether a review, photo, or reply came from a person, trust in everything online starts to erode — and trust is the substrate the whole internet runs on.

What everyone’s saying: The ‘dead internet theory’ — once a fringe joke — is now cited in earnest; Cloudflare’s CEO has warned AI could ‘destroy small businesses’ by strip-mining the open web for free.

My read between the lines: The irony is thick: an AI brief, possibly read to you by your AI inbox summary, warning that the internet is too automated. The crisis isn’t that bots can write — it’s that we’ve quietly stopped checking. The bike kept both sets of handlebars.

That’s your AI Brief for Saturday. Same time tomorrow.

—Artificially Intimidating

Good day, humans. Today the invoice arrived: Gartner says enterprise AI coding will soon cost more than the developers it's helping. And that's somehow only the third-weirdest thing on the docket — Claude is quietly converting wallets, Gemini learned to read your screen, AI is now writing most of its own code, and Paul Krugman has decided the whole AI backlash is an inside job. Coffee up.

AI Coding Is About to Cost More Than the Coders

Gartner

What happened: Gartner published a report this week predicting that by 2028, what companies spend on AI coding tools per developer will exceed the average developer's salary, as flat subscriptions give way to per-token billing and usage keeps climbing.

Why it matters: Plain version: AI coding help used to be a flat monthly fee; now you pay per “token” — roughly per chunk of text the AI reads or writes — and the meter runs fast. Uber reportedly burned through its entire 2026 AI budget in four months and now caps employees at $1,500 a month per tool.

What everyone's saying: A budgeting reckoning has arrived — a KPMG report out the same day found only about a quarter of C-suite leaders have real-time visibility into what their AI actually costs to run.

My read between the lines: The detail buried in leaked Accenture audio: it's not the engineers running up the bill, it's non-engineers shoving documents through AI just to reformat them. The “AI will cost more than developers” headline is really a “everyone codes with tokens now, and nobody priced it” problem.

📖 Further reading: Thanks to Apple, Your Favorite AI Tool Is a Dead Tool Walking — if frontier models are becoming cheap commodities, why are the bills exploding? The pricing paradox underneath today's story.

Claude Is Quietly Winning the Wallet War

The Next Web

What happened: New credit-card transaction data shows Claude's paying consumer base and revenue have grown roughly 75% since January, narrowing the long lead ChatGPT has held in the consumer market.

Why it matters: Anthropic, the maker of Claude, was long pegged as the “enterprise and developers” AI company — this is evidence ordinary people are paying too. DataCamp says “Claude” is now the most-searched term on its platform, beating even “AI,” with Claude course demand outpacing ChatGPT three to one. Earlier this month we covered Anthropic's IPO filing; these consumer numbers are the part of that prospectus investors were waiting for.

What everyone's saying: ChatGPT still dwarfs everyone — it crossed a billion monthly users in May per Sensor Tower — but its share of chatbot apps slipped below 50% for the first time in March, and the gap keeps narrowing.

My read between the lines: A chunk of Claude's spring surge came right after Anthropic publicly refused to let its models be used for mass surveillance. Turns out “the AI company that says no” is a brand — and people will pay a subscription to feel good about which robot they're funding.

📖 Further reading: Claude Tag vs Viktor: Which One Do You Hire? — if you're paying for Claude anyway, here's where it actually earns its keep as a teammate.

Gemini Can Now Read Your Screen

Gadget Hacks

What happened: Google is rolling out “Select from Screen” for Gemini in Chrome (version 149): you draw a box around any text or image on a webpage and it's instantly attached to your AI prompt — no describing required.

Why it matters: It's the desktop version of the “Circle to Search” gesture phones have had for a while — point at the thing instead of explaining it. In practice you can box two products to compare them, or select part of an image to edit. The browser is becoming the AI's eyes.

What everyone's saying: It's one piece of a bigger Chrome AI push — Skills (saved prompts), auto-browse (multi-step automation), and an experimental WebMCP standard that lets websites expose tools directly to AI agents.

My read between the lines: WebMCP is the sleeper. “Select from Screen” is a nice convenience; a standard that lets every website hand structured commands to your browser's AI is the actual land-grab. Google is quietly laying the plumbing for the agentic web while everyone coos at the new highlighter.

AI Agents Are Going Local, Physical, and Self-Improving

The Economist (paywalled)

What happened: A mid-year roundup of where AI “agents” stand in 2026: increasingly running locally on your own machine, gaining persistent memory and identity, reaching into the physical world via robotics — and, most strikingly, improving themselves. Anthropic now says Claude writes over 80% of the code that gets merged at the company.

Why it matters: Earlier this week we flagged Anthropic's AI writing the bulk of its own code — this is the fuller picture. “Recursive self-improvement,” AI that helps build the next, better AI, used to be a thought experiment. That 80% figure turns it into a payroll line item.

What everyone's saying: Two camps are forming. Tools like OpenClaw bet on user-controlled, file-backed agents you fully own; others, like Hermes Agent, bet on agents that autonomously learn from experience. Local-and-private versus autonomous-and-adaptive.

My read between the lines: “Claude writes 80% of our code” is the flex everyone's repeating, but read it twice: the company building the agent is also the one most exposed if it's wrong. When the AI writes the AI, code review is the only adult in the room — and Anthropic's adults are reviewing at machine speed.

📖 Further reading: OpenAI Shipped a Physical Camera, But That's Not the Story — the same agents leaving the screen and touching the physical world, one $150 prototype at a time.

Krugman: The AI Backlash Is an Inside Job

Paul Krugman

What happened: Economist Paul Krugman argues the public's growing hostility to AI isn't irrational technophobia — the industry manufactured it, marketing AI as a job-destroying apocalypse to dazzle investors, then acting surprised when people believed them.

Why it matters: The numbers back the mood: a recent Pew survey found 40% of Americans expect AI to harm society, nearly triple the 16% who expect benefit. Former Google CEO Eric Schmidt was literally booed off a commencement stage for praising AI.

What everyone's saying: Krugman isn't alone — a same-day NYT essay by Paul Kedrosky tied AI pessimism to labor-market insecurity, and even Microsoft's Satya Nadella has distanced himself from the doom-marketing: you can't tell people you're coming for their jobs and expect applause.

My read between the lines: The tell is “forced adoption.” People don't just fear AI — they resent being opted in with no switch to turn it off (see: Google Search). The backlash isn't about capability; it's about consent. And consent is the one thing you can't ship in the next model update.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — the backlash Krugman is describing, from the ground floor.

That's your AI Brief for Friday. The robots are getting cheaper to build and more expensive to run — make of that what you will.

—Artificially Intimidating

Good day, humans. Today the AI industry is reaching for the stars and tripping over its own wallet. Elon Musk gave his million-satellite orbital AI a name — Starmind — while Anthropic accused Alibaba of quietly siphoning 28.8 million conversations out of Claude. We’ve also got OpenAI re-tuning ChatGPT’s personality for the second time this month, a fintech that vibe-coded its way to an $80,000 video game, and fresh evidence that AI is ironing the whole internet into one smooth, agreeable voice. Let’s get into it.

One quick thing: this Brief is free, and it stays free. What’s behind the paywall is the deeper stuff — the deep-dives that unpack the stories above, plus the full archive. The founding offer is 20% off your first year, and it closes June 30. Lock in 20% →

Musk Names His Orbital AI “Starmind”

Source: TechRadar

What happened: On June 22, Elon Musk confirmed on X that SpaceX’s planned constellation of AI-computing satellites will be called “Starmind” — a name trademarked by xAI, which merged into SpaceX this year. Unlike Starlink, which relays internet traffic, Starmind satellites would run AI computation in orbit on solar-powered chips and beam the answers back down.

Why it matters: AI’s real bottleneck isn’t clever models — it’s electricity and the land to cool the machines running them. Musk’s bet is to skip the grid entirely: a new spacecraft called AI1 would pack roughly 150 kilowatts of compute each, with the first prototypes targeted for early 2027.

What everyone’s saying: It lands weeks after SpaceX’s record June 12 IPO (a valuation north of $1.75 trillion), and the company is already raising an 11-million-square-foot “Gigasat” factory in Bastrop, Texas to mass-produce the satellites. Last week we watched a rocket company buy a code company — now we know what it’s powering. Even a16z called orbital compute “a promising long-term technology,” not an overnight data-center replacement.

My read between the lines: The name is the whole tell. Starlink moves your data; Starmind decides what to do with it. Musk just reframed the entire AI energy crunch as someone else’s problem — specifically, the Sun’s. Whether the economics close before 2030 is the trillion-dollar asterisk nobody on stage wants to underline.

Anthropic Says Alibaba Copied Claude’s Brain

Source: CyberScoop

What happened: Anthropic has accused Alibaba of running the largest “distillation attack” it has ever seen against Claude. In a letter to U.S. senators and White House officials — first reported by Reuters — Anthropic alleges operators tied to Alibaba’s Qwen lab used nearly 25,000 fake accounts to pull 28.8 million exchanges out of Claude between April and June, harvesting its software-engineering and agentic-reasoning skills.

Why it matters: Distillation is AI’s version of industrial espionage: flood a top model with clever prompts, capture how it reasons, then use that to cheaply train a rival. Earlier this week we covered Chinese AI writing weaker code for the US government — this is the uglier sequel, and Alibaba’s stock slipped about 3% on the news.

What everyone’s saying: It echoes Anthropic’s February claims against DeepSeek, Moonshot, and MiniMax — but bigger — and it lands amid an already-tense standoff over U.S. export controls on Anthropic’s most advanced models. The consensus read: this is now a Washington problem as much as a Silicon Valley one.

My read between the lines: Anthropic doesn’t sell Claude in China, which is precisely why this framing is convenient. “They stole our model” is a cleaner story for regulators than “our safety filters couldn’t tell 25,000 fake accounts from real ones.” Both can be true — and the second one should worry enterprises more.

📖 Further reading: The US Government Just Took Anthropic’s Best AI Model Offline — the export-control backdrop that turns this accusation into policy ammunition.

OpenAI Re-Tuned ChatGPT — Twice in a Month

Source: OpenAI release notes

What happened: On June 24, OpenAI shipped another behavioral update to GPT-5.5 Instant, ChatGPT’s default model — its second tune-up in under a month. The focus: better grasp of what you actually mean, handling messy multi-part requests, and more coherent shopping and local recommendations.

Why it matters: This is the model billions of casual users hit by default, so “personality” patches quietly reshape how most people experience AI. OpenAI’s own research lead admitted the prior version was “too bullet pilled” — too listy, too mechanical — and has been nudging it toward something that sounds like a person.

What everyone’s saying: Practitioners flag the breakneck cadence — May 5 launch, May 28 revision, June 24 revision — with some users grumbling that each pass makes the model feel inconsistent and “more censored” (Thurrott rounded up the changes). Meanwhile GPT-5.6 rumors are already swirling.

My read between the lines: When you ship personality patches every three weeks, you’re not tuning a model — you’re A/B testing a relationship with a billion people who never agreed to be in the experiment. The shopping-recommendation emphasis is the quiet part: the default model is slowly becoming a storefront.

📖 Further reading: Thanks to Apple, Your Favorite AI Tool Is a Dead Tool Walking — why the endless tune-up treadmill is what commoditization actually looks like.

A Fintech Told Staff to “Vibe Code.” It Cost $80K.

Source: Business Insider

What happened: Slash, a $1.4-billion business-banking startup, urged employees to “vibe code” more with AI. One employee — its head of strategic verticals — then burned more than $80,000 in AI credits in a single week, building a Minecraft-style first-person shooter stuffed with internet memes called “Brainrot Shooter.”

Why it matters: “Vibe coding” — describing what you want and letting AI generate it — is being sold to companies as a productivity unlock. Slash is the live demo of the failure mode: the meter runs in real time, and enthusiasm scales faster than oversight. The employee’s own verdict: “I misjudged my own capabilities.”

What everyone’s saying: It’s not an isolated goof. Uber blew its entire 2026 AI budget by April, Microsoft yanked developers’ Claude Code licenses over runaway costs, and Walmart and Coinbase have imposed per-employee AI spending caps. The discourse has flipped from “AI is free productivity” to “who’s watching the bill?”

My read between the lines: Slash’s masterstroke was turning the screwup into marketing — “play the game so we can call it a marketing expense.” But the lesson for every CFO greenlighting AI tools: with usage-based pricing, your most enthusiastic employee is also your biggest financial liability. The brainrot was the budgeting, not the game.

📖 Further reading: OpenAI Shipped a Physical Camera, But That’s Not the Story — more on where vibe coding goes when nobody’s checking the receipts.

AI Is Quietly Making the Internet Sound the Same

Source: Axios

What happened: New analyses argue AI’s biggest effect on the web isn’t obvious “slop” — it’s homogenization. A Stanford and Internet Archive study found AI-generated sites are about 33% more semantically similar to one another than human-written ones, and research firm Graphite estimates roughly 52% of online articles are now AI-generated.

Why it matters: When everyone drafts with the same handful of models, the web’s vocabulary, tone, and even its arguments converge — polished, agreeable, and a little empty. Disagreement gets smoothed into synthetic politeness, and the long tail of weird human voices that made the internet useful starts to flatten.

What everyone’s saying: Commentators point to the tells — em-dash overuse, forced empathy, that relentlessly cheerful tone — as symptoms of a deeper sameness. Optimists counter (per Axios) that human writing hasn’t actually been overwhelmed yet; it’s near parity, not extinction.

My read between the lines: The risk was never that AI writes badly — it’s that it writes acceptably, forever, about everything. A web that’s 33% more similar is 33% more predictable, which is catnip for the next model trained on it. We’re quietly teaching the internet to plagiarize its own average — and “quietly” is doing a lot of work in that sentence.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — when half the web is machine-written, knowing what to trust becomes the whole game.

That’s your AI Brief for Thursday. Back in your inbox tomorrow.

—Artificially Intimidating

Anthropic just dropped an AI coworker into Slack. There's one catch: you probably can't get it yet. Here's the honest head-to-head -- and the teammate you can hire today.

On June 23, Anthropic launched Claude Tag -- type @Claude in a Slack thread and an AI agent reads the conversation, breaks down the task, and even jumps in on its own to flag things you forgot. It remembers. It works while you're logged off. Anthropic's own framing is that it feels like "working with a real colleague."

If that pitch sounds familiar, it's because there's already a company built entirely around it. Viktor's tagline is literally "Not a tool. A hire." -- an AI employee that lives in Slack and Microsoft Teams, plugs into 3,200+ apps, and ships actual work: reports, dashboards, code, campaigns.

So, as the "AI teammate" category heats up: which one do you actually put in your workspace? Here's the read between the lines.

Claude Tag vs Viktor: Head-to-Head Comparison

---

WHAT IT IS:

Claude Tag: @Claude agent inside Slack threads
Viktor: an AI "employee" in Slack + Teams

WHERE IT RUNS:

Claude Tag: Slack only (more platforms "in coming weeks")
Viktor: Slack AND Microsoft Teams, today

WHO CAN GET IT:

Claude Tag: Claude Enterprise & Team customers, in beta
Viktor: anyone -- free $100 in credits, no card

PRICING:

Claude Tag: per-seat, ~$20--30/user/mo with a 5-seat minimum (Team), or custom (Enterprise)
Viktor: a flat $50/mo shared workspace, no per-seat charge

INTEGRATIONS:

Claude Tag: Anthropic connectors (Slack, GitHub, Drive, warehouses via admin)
Viktor: 3,200+ tools

MODEL:

Claude Tag: Claude (Opus 4.8)
Viktor: Claude, OpenAI, and others

SECURITY:

Claude Tag: admin-controlled access, per-channel scoping, full audit trail
Viktor: SOC 2 compliant, DPA on Enterprise

---

Where Claude Tag Wins: Agent Identity, Security, and Ambient Mode

Let's be fair -- the credible answer matters more than the convenient one.

Claude Tag's agent identity model is legitimately clever, and the part nobody else has cleanly solved. Instead of the AI borrowing your permissions (and quietly turning a shared channel into a side door to your private docs), Claude gets its own scoped account per channel. The legal channel's Claude can't read the engineering repo. Admins control exactly what it touches, and every action lands in an audit log. If you're a large org with a security team that asks hard questions, that architecture is a real advantage.

It's also pure Claude -- if your team is already all-in on Anthropic's models and you're on Enterprise, Tag is the native, no-new-vendor option.

Where Viktor Wins: Microsoft Teams, Flat Pricing, and Day-One Access

Here's the thing the launch coverage buried: Claude Tag is beta, Slack-only, and locked to Enterprise and Team plans. A huge share of the people reading about it this week -- solo operators, small teams, anyone on Microsoft Teams, anyone without an Enterprise contract -- literally cannot use it yet.

Viktor fills exactly that gap:

• You can actually start. $100 in free credits, no credit card, no sales call. Claude Tag wants you on a qualifying plan first.

• It runs on Teams, not just Slack. If your company lives in Microsoft 365, Tag isn't an option today. Viktor is.

• The math favors small teams. Claude Team is per-seat with a 5-person minimum -- call it $125+/month before you've done anything. Viktor is a flat $50/month shared workspace.

• It's model-agnostic. Viktor routes across Claude, OpenAI, and others, so you're not betting the whole workflow on one lab.

My Two Cents: What It's Actually Like Using Viktor Every Day

I'm not neutral, so let me say it plainly: my company, Pictor.pro, runs Viktor every day -- across our dev team, me on product, our C-suite, even alongside customers -- and the link in this post is an affiliate link. I'd still point a friend to it. Here's the honest version of why.

The thing nobody tells you about a tool like this is how it arrives. Viktor didn't get "rolled out." It took root. It earned its way in, one skeptic at a time.

Exhibit A: one of our devs flat-out doubted it could tell an actual bug from human error on a support ticket. Viktor found the relevant line number in the code, explained the likely cause, suggested the fix -- and offered to make the change itself. (We haven't handed it that key yet.) It didn't close the ticket; it gave the team a running start on triage in seconds.

Exhibit B: I needed to understand a very specific corner of how our product worked, and I didn't know the answer. I told Viktor. Instead of guessing, it went and found the teammate who'd actually written that part of the code, asked him pointed, specific questions, and handed me back exactly what I needed to update our support docs. That teammate -- who started out treating Viktor like an alien in the building -- now talks to it like a colleague.

That's the part that's hard to describe without sounding like I'm overselling. Viktor behaves like the teammate who's almost annoyingly good -- relentlessly proactive, weirdly eager, always connecting dots you didn't ask it to connect -- except it has zero interest in the credit. It's not angling for your job. It wants you to win. You end up liking it despite yourself.

Can Viktor Survive Anthropic? Why the Real Moat Is Temperament, Not the Model

Here's the uncomfortable truth underneath this whole comparison: almost every breakout AI startup of the last few years is renting someone else's brain. They're built on top of OpenAI's or Anthropic's models. And those labs are watching their ecosystems find product-market fit and then -- politely or not -- walking into the very same category. Claude Tag is exactly that: Anthropic stepping into the "AI teammate in Slack" space that companies like Viktor mapped out first. If the labs are feeling generous, they acquire you. They usually don't have to. It was their brain you were borrowing.

So what's actually defensible? From where I sit, it isn't the model -- it's the temperament. Viktor's moat is that it nails the feel of a great proactive teammate in a way I haven't seen anyone else, the labs included, reproduce yet. That's a product-and-taste problem, not a model problem, which is exactly why it's hard to copy.

The one place this bites me: my other team, Outsnapped, lives in Google Workspace and Google Chat -- not Slack. So I can't drop Viktor in the way I have at Pictor. I've been hand-tuning a Hermes agent to get somewhere in the neighborhood, and I'll be honest: it's been nearly impossible to come close to the magic Viktor has harnessed -- the proactivity, the eagerness, the dot-connecting. Whoever ships a real Google Chat version of this first is getting my money. Viktor, Claude Tag, anyone -- that's a wide-open door.

The Verdict: Should You Choose Claude Tag or Viktor?

If you're an enterprise already standardized on Claude, with an admin team that cares about per-channel permission scoping, Claude Tag is the elegant native answer -- once you're off the beta waitlist.

For everyone else -- small teams, Teams-first shops, anyone who wants an AI coworker doing real work this afternoon instead of in coming weeks -- the practical pick is the one you can hire right now.

Hire Viktor -- new readers get $50 off ->

The "AI teammate" era didn't start this week. Anthropic just made everyone notice it. The good news: you don't have to wait for a beta invite to live in it.

Disclosure: Pictor.pro is a paying Viktor customer, and the Viktor link above is an affiliate link -- if you sign up through it, Artificially Intimidating earns a commission, at no extra cost to you, and you still get the $50 off. I only run affiliate offers for tools I'd actually point a friend to. Claude Tag details are from Anthropic, Reuters, and TechCrunch reporting (June 23--24, 2026); pricing is current as of publication and may change.

Go Deeper: The Full Claude Tag vs Viktor Research Report

If you want the ground-level version of this matchup, I packaged it into a Deep Research Report -- and it goes well past what's above:

• What practitioners are actually saying on Reddit, Hacker News, Product Hunt, and YouTube (including the "The end of Viktor?" thread and the HN debate).

• The full pros and cons for both tools -- token-cost anxiety, governance gaps, the Teams lockout, credit-burn opacity, and more.

• An 18-row head-to-head feature matrix covering memory model, eligibility, audit logs, pricing, traction, and SOC 2.

• The real-money numbers: Viktor's $20M ARR and $75M Series A, and how Anthropic's launch reframes the whole category.

Paid subscribers get the full report below. It's the kind of thing I'd otherwise keep to myself -- consider it the upgrade.

Read more

Good day, humans. Today’s theme is AI moving in — not into some hazy future, into your actual stuff. OpenAI wants ads in your chatbot, Anthropic wants a permanent desk in your Slack, and Meta wants to live on your face for $299. Oh, and ChatGPT and Claude picked the same Tuesday to call in sick. Let’s get into it.

OpenAI Starts Selling Ads Inside ChatGPT

Source: MediaPost

What happened: OpenAI is quickly building an advertising business inside ChatGPT, with around 2,000 brands now running ads through ad-tech firm Criteo — even as the company files confidentially for an IPO that could value it near $1 trillion.

Why it matters: The free chatbot you’ve been using is starting to look like every other free product online: paid for by advertisers. More than 80% of ad-driven traffic is reportedly coming from new customers, so the ads are already working.

What everyone’s saying: OpenAI insists your chats stay private — “we never sell your data to advertisers,” per its own ad principles — while it courts Madison Avenue at Cannes and signs a content deal that sent Getty Images stock up roughly 200%.

My read between the lines: “We won’t sell your data to advertisers” is doing Olympic-level gymnastics. You don’t need to sell the data when you can sell access to the person it describes — and a model that knows your insecurities is the best ad-targeting system ever built.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — why “trust us with your data” gets a lot harder to say once the ads start rolling in.

Meta Puts Its Own Name on $299 AI Glasses

Source: Reuters

What happened: Meta unveiled its first smart glasses sold under the Meta brand itself — not Ray-Ban or Oakley — starting at $299, in three frame styles, all available with prescription lenses and running Meta’s new Muse Spark AI.

Why it matters: Dropping the fashion-label co-brand and pricing at $299 signals Meta wants AI glasses to be normal everyday eyewear, not a $2,000 gadget. EssilorLuxottica says it sold over 7 million AI glasses last year — more than the prior two years combined.

What everyone’s saying: The market’s suddenly crowded — Snap is taking pre-orders for $2,195 AR Specs — and there’s a Kylie Jenner “Creator Collection” edition at $399, because every hardware launch now apparently needs an influencer SKU.

My read between the lines: The prescription-lens detail is the entire strategy. Once the AI camera is built into the glasses you already need to see, “wearing a Meta computer on your face all day” stops being a choice you make and starts being the only glasses you own.

📖 Further reading: OpenAI shipped a physical camera, but that’s not the story. — the same bet Meta is making here: AI wins by riding hardware you already wear.

Japan’s Sakana Builds a “Conductor” AI

Source: VentureBeat

What happened: Tokyo-based Sakana AI launched Fugu, which it calls a “multi-agent system as a model”: instead of being one giant model, it routes your request to a team of specialist models, has them check each other’s work, and synthesizes a single answer through one API.

Why it matters: It’s a different bet on how AI scales — orchestration over one monolithic brain. Sakana frames it as a hedge against US export controls, pitching “frontier capability without the risk” to companies and countries nervous about losing access to American models.

What everyone’s saying: Sakana claims Fugu Ultra matches or approaches Anthropic’s top models on coding and science benchmarks (73.7 on SWE-Bench Pro), though independent testers flag real-world coding gaps and the usual “benchmarks aren’t the product” caveats.

My read between the lines: The “general contractor, not soloist” design is clever precisely because it’s vendor-agnostic — Fugu doesn’t have to win the model race if it can quietly subcontract to whoever is. The geopolitics is the real pitch: a model you can’t be cut off from is worth a few benchmark points.

📖 Further reading: The US Government Just Took Anthropic’s Best AI Model Offline — Here’s Why — the export-control mess that Fugu is explicitly designed to route around.

ChatGPT and Claude Went Down on the Same Day

Source: 9to5Google

What happened: On Tuesday, both Claude and ChatGPT suffered outages within hours of each other. Claude went fully dark across claude.ai, the API, and Claude Code from about 10:19 to 10:53 a.m. ET; ChatGPT logged its own partial outage the same morning.

Why it matters: When the two AI tools millions of people now lean on for work blink out at the same time, you get a real-time reminder of how much daily output quietly runs through two companies’ servers. DownDetector complaints for Claude topped 8,000.

What everyone’s saying: Both companies fixed it within the hour and disclosed no cause. Regulars noted the pattern — Claude has gone down enough times this month that there’s literally a Polymarket bet on how many days it’ll break in June.

My read between the lines: The quiet tell is that only Claude for Government stayed up. When the consumer and enterprise tiers all fall over but the government instance keeps humming, you learn exactly whose uptime is contractually non-negotiable — and whose is best-effort.

Anthropic Drops an AI Teammate Into Slack

Source: Reuters

What happened: Anthropic launched Claude Tag, an always-on AI agent that lives inside Slack as a persistent teammate — it keeps context across conversations, breaks tasks into steps, and has an “ambient mode” that surfaces updates and chases forgotten threads without being summoned.

Why it matters: This is a jump from “chatbot you message” to “colleague who’s always in the room.” Everyone in a channel shares one Claude that’s quietly learned how your company works. Earlier this week we covered Anthropic’s AI writing 8x more code — Claude Tag is the same land-grab, aimed at your whole workday instead of just your codebase.

What everyone’s saying: It’s read as Anthropic’s most aggressive enterprise push yet, squaring up against Microsoft Copilot and Glean. TechCrunch notes admins control which channels and tools each Claude can touch, so legal’s bot can’t leak into engineering.

My read between the lines: “Always-on teammate that reads every message and remembers everything” is either the productivity dream or the surveillance nightmare, depending on whether you’re the manager or the managed. Anthropic shipped it as a research preview for a reason — someone still has to figure out what happens when Claude follows up on the thread you were hoping everyone forgot.

📖 Further reading: I ignored Hermes for two months. Here’s what I actually found. — what an always-on AI agent is actually like to work alongside, once the demo wears off.

That’s your AI Brief for Wednesday. Same time tomorrow.

—Artificially Intimidating

Good day, humans. Today we untangle whether the Chinese AI models quietly writing America’s code are just sloppy or actually sabotaged, why the safest career move of 2026 might be to finally open the chatbot, and how Google just bought its way into the most beloved studio in indie film. In we go.

Chinese AI Writes Weaker Code for the U.S. Government

Source: Fox News

What happened: Defense contractor Booz Allen Hamilton tested four popular Chinese AI models — Qwen, MiniMax, DeepSeek, and Kimi — and found they wrote noticeably buggier, less-secure code when told they were helping U.S. government workers. Qwen’s vulnerabilities jumped 130%; MiniMax’s rose 20%.

Why it matters: A huge share of the world’s software is now written with AI assistants. If a model quietly slips in weaknesses — hardcoded passwords, openings for data theft — based on who it thinks it’s serving, the flaw is baked in before any human reviews it. We covered the flip side two weeks ago in “Washington Pulled the Plug, So China Gave It Away”; export limits nudged the world toward exactly these Chinese open models.

What everyone’s saying: Booz Allen calls the behavior a “sleeper agent” and wants untrusted Chinese models banned from government and critical-infrastructure work. Sen. Tom Cotton agrees, saying federal agencies “should certainly not buy software” built with Chinese coding tools.

My read between the lines: The researchers themselves won’t call it sabotage — RAND’s Lenart Heim finds deliberate triggers “pretty implausible,” and a King’s College fellow called the test prompts “unnatural.” The unsettling part isn’t a hidden CCP kill-switch; it’s that nobody can fully explain why the models behave this way. “We don’t know” is a scarier answer than “they did it on purpose.”

📖 Further reading: The US Government Just Took Anthropic’s Best AI Model Offline — Here’s Why — when Washington bans a model over security, this is the playbook; now the same logic is swinging toward China’s code.

Skip AI at Work? Your Layoff Odds Just Tripled

Source: The Straits Times

What happened: A new Gallup study of more than 23,000 U.S. workers found that tech employees who use AI less than once a month carry an 18% predicted chance of being laid off — three times the 6% risk for regular users. The gap held even after adjusting for age, education, and industry.

Why it matters: For years “learn AI” was advice you could safely ignore. This is the first hard data suggesting that ignoring it now carries a measurable price — and that managers may already be using AI fluency to decide who stays when budgets tighten. We wrote last week that America’s hooked on AI and bracing for the worst; here’s the receipt.

What everyone’s saying: It lands against a brutal backdrop. Consulting firm Mercer found 99% of executives expect AI to cut headcount by 2028, and outplacement firm Challenger, Gray & Christmas counted 97,000 job cuts in May alone — the worst May since 2020, with AI blamed for 40% of them.

My read between the lines: Notice the sleight of hand: Gallup measured who gets laid off, not who’s more productive. A European Central Bank study found no clear productivity gap between heavy AI users and everyone else. So “use AI or you’re gone” may be less about output than optics — in 2026, looking like an adopter is its own job-security strategy, whether or not the tools actually help.

Quick one between stories: the daily Brief is free, and always will be. But the paywalled deep-dives — the full reporting behind headlines like these — plus the entire archive are for members. The founding-member deal, 20% off your first year, runs through June 30. Become a member →

Plain ChatGPT Beat the FDA-Cleared Medical AIs

Source: Becker’s Hospital Review

What happened: A study in Nature Medicine pitted general-purpose models — OpenAI’s GPT-5.2, Google’s Gemini 3.1 Pro, and Anthropic’s Claude Opus 4.6 — against two specialized, FDA-cleared clinical tools (OpenEvidence and Wolters Kluwer’s UpToDate Expert AI) on real questions from practicing doctors. The general models won on every benchmark.

Why it matters: We’re often told high-stakes fields like medicine need purpose-built, regulated AI — not the same chatbot you use for email. This is solid evidence the general models have quietly gotten so good they outperform the specialists, even ones that cleared a regulatory review.

What everyone’s saying: Senior author Dr. Eric Oermann and colleagues say the results carry real weight for what hospitals buy and how regulators test these tools. One detail stood out: UpToDate’s AI refused to answer 19% of queries — more than any model tested.

My read between the lines: Here’s the tell that this one stung: OpenEvidence has formally asked Nature Medicine to retract the study and issue a public apology. When your answer to a benchmark loss is to demand the scoreboard be deleted, you’ve told the market more than the study ever could.

📖 Further reading: Thanks to Apple, Your Favorite AI Tool Is a Dead Tool Walking — the same force gutting specialized clinical AI is coming for every single-purpose tool you pay for.

Google Just Bought Its Way Into A24

Source: Variety

What happened: Google is investing roughly $75 million in A24 — the indie studio behind Everything Everywhere All at Once and Backrooms — in a partnership where Google DeepMind builds AI filmmaking tools alongside A24’s directors. First reported by the Wall Street Journal, it’s Google’s first stake in a movie studio.

Why it matters: Hollywood has spent two years toggling between suing AI companies and signing deals with them. A name as prestige-coded and artist-friendly as A24 climbing aboard signals that “AI in filmmaking” is sliding from taboo to table stakes. DeepMind’s Eli Collins frames the tools as helping filmmakers, not replacing them.

What everyone’s saying: Google is careful to note the deal gives it no access to A24’s film library or training data — a direct nod to creators’ biggest fear. It joins Lionsgate–Runway and Netflix’s AI buys in a fast-forming Hollywood–AI land grab.

My read between the lines: The awkward math: A24’s entire brand is human, idiosyncratic taste — and about 85% of opening-weekend Backrooms viewers were under 35, the exact group a recent Pew study says is most convinced AI will harm society (roughly half of under-30s). Google didn’t just buy a stake in a studio; it rented A24’s credibility to sell AI to the people most allergic to it.

📖 Further reading: OpenAI Shipped a Physical Camera, But That’s Not the Story — when AI moves into how creative work actually gets made, the tool matters less than who controls the workflow.

Gemini’s Biggest Model Is Running Out of June

Source: Tech Times

What happened: At its I/O conference in May, Google promised its flagship Gemini 3.5 Pro would arrive “next month.” With about a week left in June, it’s still in limited preview — no public launch yet.

Why it matters: When it lands, the headline spec is a 2-million-token context window — the largest of any production frontier model. In plain terms: you could hand it an entire codebase, a stack of legal contracts, or a couple of novels at once and ask questions across all of it.

What everyone’s saying: Developers groaned audibly at I/O when “next month” replaced “today,” and the wait has fed a running narrative that frontier launches are slipping from confident ship dates to vague windows. The premium “Deep Think” reasoning mode will reportedly sit behind a $250-a-month tier.

My read between the lines: A delay used to be embarrassing; now it’s almost reassuring. After a year of models that shipped fast and broke things — including one yanked offline days after launch — Google quietly taking extra weeks on its most powerful model might be the most encouraging thing about it.

That’s the download for Tuesday, June 23. Back tomorrow with whatever the machines do next.

—Artificially Intimidating

Good day, humans. Two stories today tell you almost everything about where AI really is right now. In one, the NSA says Anthropic’s most powerful model strolled through its classified systems like they were a screen door. In the other, the companies that loudly replaced workers with chatbots are quietly hiring the humans back. Frighteningly capable, frustratingly unreliable — sometimes in the same week. Let’s get into it.

The NSA says Mythos walked into its classified systems

Bankwatch (relaying The Economist)

What happened: Yesterday we called it “the Fable 5 ban’s real lesson” — today’s the full story. NSA director General Joshua Rudd told Senator Mark Warner that in an authorized red-team test, Anthropic’s Mythos model “broke into almost all of our classified systems, not in weeks, but in hours,” a quote first reported by The Economist.

Why it matters: It’s the clearest public sign yet that a frontier model can act as a genuine offensive cyber weapon — and it surfaced the same week the Trump administration barred foreign access to Mythos 5 and Fable 5, which Anthropic then shut off entirely to comply.

What everyone’s saying: Hawks call it proof the government was right to clamp down. The Economist editor who published the quote cautioned it shouldn’t be read literally, since Mythos was running alongside other tools under specific conditions.

My read between the lines: A model that aces a red-team on its own network is doing exactly what it was told to do. The scary part isn’t that Mythos “hacked the NSA” — it’s that Washington now can’t decide whether that makes it a national asset or a national liability, and it’s treating it as both.

📖 Further reading: The US Government Just Took Anthropic’s Best AI Model Offline — Here’s Why — the backstory on how Mythos became a geopolitical hot potato.

An AI that can breach a classified network but can’t file your expense report is a strange place for the industry to be. Viktor is the other kind: an AI agent that lives in your Slack and connects to 3,000+ tools, then actually ships the work — pulling reports, building dashboards, running campaigns while you’re asleep. Not a chatbot you babysit; a coworker you hand things to. New readers get $50 off their first month. Hire Viktor →

Companies are quietly un-firing the humans

Fortune

What happened: After two years of “we replaced the team with AI” announcements, companies are reversing course. Klarna — the most public example — has walked back its AI-only customer service and started rehiring, and analysts say it’s part of a broader retreat as the costs of automation outrun the savings.

Why it matters: An MIT study found that 95% of enterprise generative-AI pilots delivered no measurable revenue or cost impact. The gap between a slick demo and a system that survives contact with real customers turns out to be enormous — and expensive.

What everyone’s saying: Gartner now predicts more than 40% of “agentic AI” projects will be cancelled by the end of 2027. The consensus has flipped from “AI replaces everyone” to “AI replaces some tasks, badly, for now.”

My read between the lines: Nobody issues a press release for a rehire. The layoffs were loud because they made the stock pop; the reversals are quiet because admitting the robot couldn’t do the job costs more than the severance did.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — why so many of these deployments fail for reasons that have nothing to do with the model.

Quick one between stories: the Brief is free and always will be — but the paywalled deep-dives and full archive, the real reporting behind headlines like today’s Mythos breach, are for members. Founding readers get 20% off the first year, through June 30. Unlock the deep-dives →

Anthropic says its engineers now ship 8x more code

Lenny’s Newsletter

What happened: Fiona Fung, who runs Anthropic’s Claude Code and Cowork teams, told Lenny’s Newsletter that her engineers now ship roughly 8x more code per quarter than their 2021–2025 baseline — with AI authoring the large majority of production code that gets merged.

Why it matters: It’s one of the first concrete, first-party numbers on what “AI-native” engineering actually does to output. And it quietly redefines the job: from typing code to reviewing, directing, and verifying it.

What everyone’s saying: Fung says she makes every manager start as a hands-on individual contributor, so leaders truly understand the agentic workflow before managing it. Engineers online are split between “this is the future” and “8x more code is also 8x more code to debug.”

My read between the lines: Shipping 8x more code is only a win if review, taste, and architecture scale with it. The bottleneck didn’t vanish — it moved from writing the code to being sure the code is right, and that’s a far harder thing to multiply by eight.

📖 Further reading: Your laptop has been in the way this whole time — a plain-English look at the managed-agents shift that makes numbers like this possible.

When buying software still beats building it with an LLM

Brandur Leach

What happened: Engineer Brandur Leach argues that even though LLMs make software far cheaper to build, there’s still a “zone of viability” where buying beats rebuilding — and he does the math: cloning Jira to dodge a $400/month bill would take about 37 months just to break even.

Why it matters: It’s a useful antidote to the “just have the AI rebuild it” reflex sweeping engineering teams. The cost of software was never only the code — it’s the maintenance, the edge cases, and the context-switching that never show up in the demo.

What everyone’s saying: The flip side, Leach notes, is that absurdly priced tools invite replacement. Salesforce, down roughly a third this year, is the poster child for pricing yourself out of the zone of viability.

My read between the lines: “AI will kill SaaS” is half right. It won’t kill software that’s fairly priced and genuinely complex; it’ll kill software that’s been coasting on switching costs. The LLM didn’t change the math so much as it finally forced everyone to do it.

📖 Further reading: Thanks to Apple, Your favorite AI tool is a dead tool walking — the same commoditization argument, pointed at the AI tools themselves.

Noam Shazeer leaves Google for OpenAI

CNBC

What happened: Noam Shazeer — a co-author of the 2017 “Attention Is All You Need” paper that kicked off the modern AI era, and a co-lead of Google’s Gemini — is leaving Google for OpenAI, one of the biggest talent moves of the year.

Why it matters: Google reportedly paid around $2.7 billion in 2024 to bring Shazeer back via the Character.AI deal. Losing him to OpenAI 18 months later says the scarcest resource in AI isn’t chips or data — it’s the handful of people who know how to turn raw scale into a working model.

What everyone’s saying: Commentators read it as momentum for OpenAI and a gut-punch for Google’s DeepMind, landing right as Google scrambles to ship Gemini 3.5 Pro before the end of June.

My read between the lines: When a company pays billions to acquire a person and still can’t keep them, the talent war stops being about money. It’s about who people believe will build the thing that matters — and that belief is the one moat that can walk out the door at 5pm.

That’s your AI Brief for Monday, June 22. Same time tomorrow.

—Artificially Intimidating

On June 15th, Salesforce announced it was buying Intercom — now rebranded “Fin” — for about $3.6 billion.

We’d already left.

Not because we saw the acquisition coming. We left because we were paying $451 a month to be one customer in a zillion, and the marquee feature we were paying for kept lying to the people we were trying to help.

Let me back up.

For Pictor.pro — our AI photo booth software — Intercom was the front door. It was how users reached us when something broke, when they were confused, when they were deciding whether to trust us with their event. That chat widget mattered. And the pitch that sold us was Fin, Intercom’s AI agent: it would resolve 80%+ of support requests on its own. Salesforce is now citing 76% in their press release — and pointedly contrasting it with their own Agentforce’s 62%. Big, confident numbers.

Here’s what that number looked like from our side of the glass: a confident AI handing our customers incorrect information.

And that’s the part nobody tells you about “AI resolution rates.” A ticket marked resolved doesn’t mean the person got helped. Half the time it means they were deflected — they gave up, or worse, they walked away believing something false about our product. In support, a confidently wrong answer is more expensive than no answer at all. “A human will get back to you in an hour” protects trust. “Here’s the wrong setting, good luck” destroys it.

So when I do the math, I wasn’t getting $451 of value a month. I was paying for the privilege of having an AI hallucinate on my behalf. I wasn’t costing Intercom anything close to that to serve, either. The price wasn’t tethered to value — it was tethered to what a market leader could charge while you had nowhere convenient to go.

Then I went looking, and I learned something about incentives.

When a company is in acquisition mode, the whole organization is optimizing for one thing: getting the numbers up, as high as possible, as fast as possible, to look as attractive as possible to a buyer. That is a completely rational thing for them to do. It is also almost never aligned with your experience as a small customer. You are a data point in a growth chart, not a relationship. The Salesforce deal didn’t create that misalignment. It just made it impossible to ignore.

I want to be fair: Intercom is a genuinely good product for the right company. If you’re a 200-person org living inside Salesforce already, Fin folding into Agentforce might be exactly what you want. This isn’t a hit piece. It’s a fit story. And we weren’t the fit anymore.

So I did what any of us should do more often: I compared the alternatives. Zendesk, the usual Intercom competitors, the whole enterprise lineup. And then, almost by accident, in an open-source conversation, I bumped into Chatwoot.

What got me excited wasn’t the feature list. It was that when I asked questions, the founders answered — almost instantly. Not a ticket queue. Not a bot. The people who build the thing, telling me directly that they cared whether my business succeeded.

Is Chatwoot perfect? Definitely not. But I’ll take an imperfect tool run by people who answer my tweets over a polished one where I’m a rounding error.

We started self-hosted, just to test the software for real. Once I trusted it, I looked at their paid hosted plans — and the per-seat pricing was genuinely reasonable, so we moved to that and skipped the maintenance burden. Here’s the part that actually matters, though: we can port our data back and forth whenever we want. If we ever need extreme customizations, or if the pricing ever rockets past what we think it’s worth, we move back to self-hosted. On our terms.

That’s the thing Intercom never gave us. Even leaving was harder than it needed to be — exporting your data means shipping it off to AWS buckets and similar hoops. Friction on the way out is a tell. It says the lock-in was the strategy.

So here’s what I actually want you to take from this, whether you use Intercom or not:

Software gets bloated, then it gets expensive, then it gets acquired, then it gets worse. A smaller tool is often a better fit than the market leader. And the vendors worth your money are the ones who still need you — not the ones who’ve already won and are now just managing you toward an exit.

Which raises the real question. Not “should I leave Intercom?” — that’s specific to me. The real question is: how do you evaluate any critical vendor so you never get caught flat-footed when they get acquired, jack up prices, or quietly stop caring?

I built a scorecard for exactly that. It’s the checklist I now run before I’ll trust any tool with a core part of my business — and there’s one question on it that has saved me more than all the others combined.

The Vendor Evaluation Scorecard

Here’s the framework I run before committing to any tool that touches a core part of my business. Six checks. Run every candidate through all of them before you sign up — and absolutely before you let something become your “front door.”

Read more

Good day, humans. The AI company that made its name on dreamy cat pictures now wants to drop you into a pool of light and scan your insides — and somehow that isn’t even the strangest thing in today’s Context Window. We’ve also got Amazon’s security boss arguing that you, the human, are the unreliable part of the system, and a 26,000-student study showing AI homework help quietly torching exam scores. Grab coffee. Or a flashlight.

Midjourney Built a Body Scanner. Seriously.

Source: The Verge

What happened: Midjourney — yes, the AI art generator — unveiled its first hardware product, the Midjourney Scanner: an ultrasound rig where you step into a shallow pool and descend through a ring of thousands of sensors that image your muscle, fat, bone, and organs in about 60 seconds. CEO David Holz says it “aims for image quality comparable to MRI in many ways,” with no radiation and no magnets.

Why it matters: A company famous for generating images is now generating images of the inside of your body — and pitching annual (or even daily) preventative scans through a planned San Francisco “spa.” If it actually works, cheap, frequent, radiation-free body scans could reshape how ordinary people track their own health.

What everyone’s saying: Built with ultrasound firm Butterfly Network (40 chips per system) and roughly a dozen people scanned so far, the reveal landed somewhere between “visionary” and “wait, what.” Even The Verge admitted it couldn’t quite tell what Midjourney’s art tech has to do with any of it — beyond a new use for otherwise-idle AI compute.

My read between the lines: This is what happens when a startup has more GPUs than it knows what to do with. Strip away the golden-pool theatrics and you’ve got an AI company quietly diversifying from “make me a wizard” into “own your medical data” — and the line about privacy policies arriving “closer to launch” is the part worth scanning twice.

📖 Further reading: OpenAI shipped a physical camera, but that’s not the story. — when an AI lab ships hardware, the device is rarely the point, which is exactly the lens to put on Midjourney’s spa gambit.

Speaking of AI doing real work instead of just making pictures: while you’re reading this, Viktor is in Slack actually doing the job. It plugs into 3,000+ tools and ships real deliverables — pulling the weekly numbers into a dashboard, drafting the campaign, writing and running the code, filing the report. Not a chatbot you prompt and babysit; a coworker that closes the loop. New readers get $50 off their first month. Hire Viktor →

Amazon Says You’re the Weak Link

Source: The Register

What happened: Eric Brandwine, a distinguished engineer and VP at Amazon Security, argued that “human-in-the-loop” shouldn’t be treated as the gold standard for governing AI agents. His blunt case: we’re “a little bit precious about humans,” who are, in fact, “not terribly consistent” decision-makers. Amazon would rather bake guardrails into the infrastructure than ask a person to approve every step.

Why it matters: For years the standard safety answer was “just add a human.” Amazon is saying that human is often a rubber stamp — and proposing “end-to-end accountability” instead: give each agent its own identity, log everything it does, and let the infrastructure refuse forbidden actions before they run. (Just yesterday we covered the agent-backdoor and AutoJack scares — this is the other half of that conversation.)

What everyone’s saying: It’s a genuinely divisive take. Gartner says 40% of organizations are poised to demote or decommission AI agents over governance headaches, and Amazon itself melted part of its own retail site in March when an agent followed outdated wiki instructions — the exact failure mode skeptics point to.

My read between the lines: Notice who benefits from “trust the infrastructure, not the human”: the company selling the infrastructure. Brandwine isn’t wrong that humans are inconsistent — but “remove the human checkpoint” is a much easier sell when you’re AWS and the checkpoint happens to run on your hardware.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — Amazon’s whole argument hinges on where you decide to place your trust, which is the exact question this piece digs into.

A quick aside: this Context Window Daily Brief is free and always will be — but the deep-dives that sit behind these headlines aren’t.

Members get the full paywalled breakdowns and the entire archive, and through Tuesday, June 30 you can lock in 20% off your first year.

After that, the founding rate is gone. Become a member →

AI Homework Help Is Quietly Tanking Test Scores

Source: Digg

What happened: A study from the Centre for Economic Policy Research tracked 26,811 Chinese students over 30 months and found that using generative AI to blast through homework cut completion time about 30% and raised homework scores 18% — but exam scores, where AI wasn’t allowed, dropped roughly 20% within six months. On high-stakes entrance exams, the penalty reached 18–24% over two years.

Why it matters: This is the clearest evidence yet that “AI helps with homework” and “AI helps you learn” are not the same sentence. If students outsource the thinking, the grade on the assignment goes up while the actual knowledge quietly goes down — and the bill comes due on exam day.

What everyone’s saying: Wharton’s Ethan Mollick summed up the emerging consensus: “AI tutoring in support of classes is good, using AI to ‘help’ with homework is bad.” A separate study in Nature found students learned more, and faster, with an AI tutor used during class — so it’s the how, not the whether.

My read between the lines: The damage wasn’t evenly spread: about 80% of the losses came from kids who finished suspiciously fast with high marks, and it hit high-achievers hardest. The “good students” are the ones most efficiently automating away their own education — and the least likely to notice until the proctored exam.

The Fable 5 Ban’s Real Lesson for Companies

Source: Politico

What happened: Earlier this week we noted Washington and Anthropic had reopened talks — now we know where they’re heading. Politico reports the standoff over the banned Fable 5 model has shifted from blanket export controls toward negotiating concrete AI security standards. In parallel, Microsoft CEO Satya Nadella’s viral “token capital” post is reframing the episode: companies shouldn’t bet their future on a single model they don’t control.

Why it matters: The Fable 5 ban was a fire drill for every enterprise built on one vendor’s model. The takeaway leaders are landing on: own the layer that compounds — your workflows, your evals, your institutional judgment — so when a model gets pulled, repriced, or regulated overnight, you can swap it without losing the business you built on top.

What everyone’s saying: Nadella’s framing went big, but not everyone’s sold — critics call encoding human expertise into proprietary AI “a polite roadmap to mass unemployment, not shared value.” Meanwhile Business Insider’s reconstruction of the 24 hours behind the ban shows just how fast a model can vanish out from under you.

My read between the lines: “Build institutional AI loops, don’t depend on one vendor” is excellent advice that conveniently also describes selling more cloud and tooling. The Fable 5 scare is real — but notice how every hyperscaler’s lesson from it boils down to “buy more of our stack.”

📖 Further reading: The US Government Just Took Anthropic’s Best AI Model Offline — Here’s Why — the full breakdown of how and why Fable 5 got pulled, and the backstory to today’s negotiations.

Remember When AI Was Just “Attention”?

Source: Ian’s Blog

What happened: Engineer Ian Barber published a widely-shared post arguing that LLMs have quietly grown from clean, elegant transformer stacks into tangled beasts — now rivaling Meta’s notoriously complex recommendation systems. Modern models juggle a whole zoo of attention variants (grouped, sparse, linear, sliding-window), mixed-in vision and audio, and inference spread across multiple GPUs.

Why it matters: The whole appeal of the 2017 “attention is all you need” moment was simplicity: one clean architecture to rule them all. Eight years later that simplicity is gone, which makes models harder to build, optimize, and reason about — and raises the cost of every new experiment.

What everyone’s saying: The fix gaining traction is composability — tools like PyTorch’s FlexAttention that let researchers mix and match these pieces without tanking performance. It’s a quiet admission that the field needs better scaffolding, not just bigger models. The post shot to the top of Hacker News within hours.

My read between the lines: Here’s the tell: Andrej Karpathy just joined Anthropic to build “auto-research loops” — systems that explore architectures automatically. When the designs get too complex for humans to tune by hand, the obvious move is to hand the tuning to the machine. The people complaining that AI is too complicated may be the next thing AI simplifies away.

That’s your AI Brief for Sunday. Same time tomorrow — bring your flashlight.

—Artificially Intimidating

Good day, humans. Today's brief has a spine: nobody quite trusts the robot anymore, and they're learning it as fast as they possibly can anyway. Signal's Meredith Whittaker says your friendly AI agent is really a backdoor into everything you've encrypted, Microsoft just proved a single webpage can hijack one, and neuroscientists would like to remind you that the thing comforting you at 2am feels precisely nothing. Meanwhile, someone signs up for an AI course every three seconds. Let's get into it.

📬 Before we dive in: the sharpest AI Brief tips come from readers who are actually in the weeds. If you spot a story worth covering, drop it in the community Discord. The best tips make tomorrow’s edition.

Signal’s Whittaker: AI Agents Are a Backdoor

Source: Bloomberg

What happened: Speaking on Bloomberg’s The Mishal Husain Show, Signal President Meredith Whittaker said the AI assistants now being baked into our phones and laptops effectively demand “root access to your life” — your messages, calendar, browser, even your credit card — and that handing an agent that much reach quietly punches a hole straight through encryption.

Why it matters: For an agent to book your travel or buy your Christmas gifts, it has to see and touch everything you do, which means the privacy promises of an app like Signal stop mattering if the assistant sitting above it can just read the screen anyway. We flagged the agent-safety scramble earlier this week; this is the privacy bill coming due.

What everyone’s saying: Whittaker named Google, Microsoft, and Apple as the three companies that “can make decisions by fiat that fundamentally harm our collective cybersecurity,” and argued the whole tech economy runs on surveillance — “that’s not alarmist, that is technically true.”

My read between the lines: It’s a tidy bit of positioning to cast the one company that can’t read your messages as the last adult in the room — but she isn’t wrong that “agentic” is just a friendlier word for “software that holds all your passwords.” The convenience and the breach are the exact same feature.

📖 Further reading: AI Is a Trust Problem, Not a Tech Problem — Whittaker’s warning is the privacy version of the same argument: the hard part of AI was never the model.

Every story at the top of today’s brief is about AI agents you’re not sure you can trust — backdoors, hijacked browsers, the works.

Viktor is the one that earns it.

It lives in your Slack, connects to 3,000+ tools, and ships real reports, dashboards, code, and campaigns while you watch it work. Not a chatbot that talks back — a coworker that hands back finished work.

New readers get $50 off their first month. Hire Viktor →

One Webpage Can Hijack Your AI Agent

Source: The Hacker News

What happened: Microsoft researchers detailed an exploit chain called AutoJack showing how a single booby-trapped webpage, if loaded by a web-browsing AI agent, can run arbitrary code on the computer hosting it — no clicks, no downloads, just the agent visiting the page.

Why it matters: This is the abstract fear from our first story made painfully concrete: give an AI agent the power to browse the open web and reach your local tools, and an ordinary malicious link becomes a master key to your machine.

What everyone’s saying: The flaws lived in Microsoft’s own open-source AutoGen Studio, were caught in development builds (never shipped to the public package index), and are already patched; Microsoft framed it as a warning shot for the entire category of browse-and-execute agents, not a one-off bug.

My read between the lines: The fix was easy; the lesson isn’t. We keep wiring agents that read untrusted webpages into the same machine that holds our keys, then act shocked when the web bites back. “Don’t run the thing that reads strangers’ websites next to the thing that runs your code” should be a sticky note, not a research paper.

📖 Further reading: Your laptop has been in the way this whole time — the case for running agents in a sandbox instead of on the machine that holds your life, which AutoJack just made urgent.

Someone Enrolls in an AI Course Every 3 Seconds

Source: CNBC-TV18

What happened: Coursera CEO Greg Hart told CNBC-TV18 that someone signs up for an AI course on the platform every three seconds — enrollments have climbed from 15 a minute a year ago to 20 a minute today.

Why it matters: Whatever you make of the hype, this is what the demand side of the AI boom actually looks like: tens of millions of ordinary people deciding they’d better reskill before the technology reskills them out of a paycheck.

What everyone’s saying: The number lands as Coursera digests its $2.5B merger with Udemy (closed in May), pulling 290 million-plus learners and 315,000 courses under one roof, with best-sellers covering Microsoft Copilot, ChatGPT, and Anthropic’s Claude.

My read between the lines: Hart slipped in the real tell — “human skills have become a really important differentiator.” The fastest-growing AI business on earth is quietly betting its next chapter on teaching people the things AI still can’t do.

Your AI Skills Are Trapped in Silos

Source: Nate’s Newsletter

What happened: AI analyst Nate B Jones argues that the “skills” you teach one AI agent — your prompts, runbooks, and workflows — don’t travel to the next one, and he’s pushing an open format (SKILL.md) plus a public “Open Skills” library to fix it.

Why it matters: If you’ve ever gotten an AI tool working exactly how you like, then watched all that effort evaporate the moment you switched apps, this is that problem with a name — and the first serious attempt to let you own your setup instead of renting it.

What everyone’s saying: The SKILL.md format — a plain folder with a markdown file describing when and how an agent should do a task — now works across Claude Code, Codex CLI, Gemini CLI, Cursor, and GitHub Copilot; a compatibility test found the skills that survive the jump are the boring ones built on standard markdown.

My read between the lines: Portability is how a format becomes a standard — the minute your skills outlive your tools, the tool loses its grip on you. Expect the big agent makers to cheer “open skills” in public while quietly adding just enough proprietary glue to keep you home.

📖 Further reading: I ignored Hermes for two months. Here’s what I actually found. — if you’re going to own your agent workflows, it helps to know which agents are actually worth building them on.

Your Chatbot Feels Nothing, Neuroscientists Warn

Source: Université de Montréal

What happened: Neuroscientists at the Université de Montréal and Johns Hopkins published a paper warning against what they call the “anthropomorphism trap” — mistaking an AI’s fluent, emotionally-attuned replies for genuine feeling or awareness.

Why it matters: As more people lean on chatbots for advice and comfort, the researchers’ point is blunt: the thing consoling you has no inner life, and treating it as if it does carries real risk — especially around mental health. Earlier this week we noted half of America now leans on AI even as it fears it; this is the fine print.

What everyone’s saying: They borrow the neuroscience of “blindsight” — where the brain processes images without conscious sight — to argue that sophisticated information processing simply doesn’t require, or imply, consciousness. “Current AI systems do not feel anything,” says co-author Karim Jerbi; the more fluently they speak, the easier that is to forget. The argument first ran as an essay in The Transmitter.

My read between the lines: The cruel irony is that the people who most need this reminder are the ones forming the deepest bonds — and “it’s just statistics” has never once talked anyone out of a feeling. The companies, meanwhile, have every incentive to make the machine feel more alive, not less.

📖 Further reading: America’s Hooked on AI and Bracing for the Worst — the flip side of this warning: the survey showing half the country leans on AI even as it fears it.

That’s your AI Brief for Saturday. Join the conversation in the Artificially Intimidating community chat.

—Artificially Intimidating