Matt Wolfe reviews Anthropic's proposed IPO, model releases, a hands-on Genie 4 demo, and an AI-generated complexity-theory claim.

Cursor expands the list of malicious extension versions Cursor adds an earlier Claude Code version to its warning — Review installation history for both affected versions, because updating the extension can leave the attacker’s separate …

Killian Carlsen-Phelan shows Sonar Vortex supplying project context before an agent writes code, then rejecting a temp-file permission fix that still fails the rule.

A timestamped deep dive through a three-hour course: Gmail intake, typed model decisions, Python policy, evals, Docker deployment, and the failure cases still to test.

Automating routine incident response can remove the practice engineers need for unfamiliar failures. HN adds training ideas and a challenge to the premise.

Tracing 1,285 AI citation trails shows how numbers survive after their evidence disappears or changes meaning. The automated fact-checker needed checking too.

Hard Fork examines Anthropic's revenue, fixed computing commitments, and slowing growth, then asks what AI spending and human oversight actually measure.

Human-directed attackers run intrusions in parallel CrowdStrike says hackers used AI to run parallel intrusions — Rotate old exposed credentials and restrict cloud permissions, because automation can reuse ordinary weaknesses across many …

IBM's Mixture of Experts connects AI-assisted security research, Block's speech-only Dessa preview, culturally specific evaluation and the data infrastructure agents need.

Genliang Zhu and colleagues study what a tool-using agent should do after a timeout leaves a remote action’s outcome uncertain. A retry can duplicate an effect that already happened or is still in flight. Their controller considers …

Anirudh Phukan and colleagues test whether search-equipped assistants discover recent changes without being told what to check. They pair direct questions with recommendation requests that depend on the same facts. Eight models were tested …

Jack Woodruff argues that faster research raises the baseline for investment work, while auditability and deciding what deserves attention remain human bottlenecks.

Rayan Krishnan shows how task-specific tests can reverse model rankings, expose hidden token costs, and turn a firm's past work into a buying guide.

Sonar’s Gitar workshop checks three ticketing-app changes: a refund bug outside the diff, an all-in pricing rule, and a failing check-in test.

Armin Ronacher combines speaker embeddings with a different Qwen speech model to add emotional instructions to custom voices.

Fowler argues that outsourcing prose can outsource the thinking behind it. HN adds a critic-only workflow and pushback on who gets excluded.

Mistral’s promised downloads arrive with new costs and restrictions Mistral releases improved Large 4 weights for self-hosted coding — Downloadable weights now make private deployment possible, but hardware requirements and commercial …

Sonar CEO Tariq Shaukat argues for explicit intent, guidance, independent verification, and evidence as coding agents outpace human review.

Midwest AI Summit speakers connect durable workflows, frontline workers' evaluation cases, and coding-agent autonomy that fits a team's constraints.

Background-task displays can consume substantial model usage Claude Code uses model requests to update background-task status — Check which requests produce useful work before attributing your usage limits entirely to difficult coding …

IBM’s Grace Ableidinger explains lower-precision model storage, the memory arithmetic, and the tradeoffs between post-training quantization and quantization-aware training.

David Abitbol reports Revolut’s experience serving 2,000 engineers with GLM models: lower token bills, faster delivery, and substantial GPU-serving work.

Temporal’s Shy Ruparel separates agent adoption from production reliability, then shows how recorded workflow history can preserve work across worker crashes.

Qodo’s Cole Gannaway explains cross-repository review, independent review agents, and turning recurring review comments into shared rules.

A paper tests how different descriptions of the same scene help text and image models learn similar representations.

Mark Hay explains incremental data analysis, shared metric definitions, and customer-led testing. A contested live dashboard shows why review still matters.

Loading pages can invalidate a correct browser plan; pixel checks and outcome checks solve different parts of the problem.

Cole Medin audits context, connections, capabilities, and cadence: small core files, restricted tools, reusable skills, regression tasks, and trusted schedules.

Addy Osmani and Manish Kapur discuss first-pass agent review, browser evidence, layered checks, and the human ownership behind larger code-change volumes.

A browser script appears to turn model safety filters against legitimate code inspection, with different results across models.

Google’s next model is tested, but access remains restricted Google previews Gemini Carbon with stronger coding and security results — Outside testing makes the improvement worth tracking, while restricted access and temporary pricing still …

Vik Paruchuri explains how document benchmarks reward formatting, how to test the scorer, and how to build verifiable checks around your own documents.

Peter Yang's early-access demo generates five scenes with sound and live edits. Failed actions, disappearing objects, and weak gameplay keep the limits visible.

Nate Herk turns reference videos into editing skills, stages a simulated advisory debate, and automates Instagram production while retaining human feedback.

Sonar's Hunter Agent maps a repository and challenges logic-bug findings. A prepared Python demo shows 46 issues, without a detection-accuracy benchmark.

Human approval can conceal borrowed judgment Anthropic finds analysts adopt randomly assigned AI preferences — A reviewer signing off on an analysis may have accepted the assistant’s assumptions without forming an independent view. Fifty …

IBM's Security Intelligence panel connects AI-assisted vulnerability discovery with patch readiness and debates outside access to frontier-model evaluations.

Chris Vela demonstrates BenchPod, a vLLM benchmarking dashboard, and compares serving configurations against concurrency and response-speed needs.

Kamil Potrec explains agent identities, delegated permissions and credential gateways, including the network controls and operational costs they require.

Tests of self-improving instructions can miss redundant protections disappearing, or conflicting instructions added around unchanged safety rules.

Patrick Smyth separates malicious packages, known vulnerabilities, zero days and compromised build tools, then maps a different defense to each.

Written priorities redirect coding assistants more reliably than another conflicting code example in controlled repository experiments.

GAAC reconstructs compressed conversation state inside attention, trading a little computation for less memory traffic and room for another request.

Coding agents can outpace your code reading. Quiroga argues for a system map and targeted investigation; HN adds review boundaries and an unresolved training problem.

Fuad Ali explains Alex's production design: harness-owned plans, explicit completion, file-backed results, small auditable memory and regression tests drawn from real sessions.

Small downloadable models for local assistants Liquid releases small models for text, images, speech and decisions — The new family offers local components for narrower assistant tasks, with published deployment instructions and explicit …

Mikyo King explains Phoenix's code-mode design: discover tools, compose them in code, and return smaller results, while handling secrets, permissions and failed executions.

Cheaper implementation expanded one engineering leader's workload. The HN discussion adds boundaries, counterexamples and a question about who gets the time savings.

Poisoned training text can leave a hidden command trigger after clean safety training; the headline rate counts 32 attempts.

A Python library gates actions by conversation state; its airline tests also expose how outcome scores miss skipped consent.