Back to archive
Issue #143··46 min read·23 stories

Apple sues OpenAI for IP theft ⚖️, Satya: you pay for AI twice 💰, Claude Code's 33k-token tax 🧑‍💻

Tencent grabs Manus back from Meta. Apple's chips go all-in on AI. geohot vs the 2040 crowd.

Apple sued OpenAI for trade-secret theft, alleging OpenAI pushed Apple job candidates to hand over details of secret projects. Zhipu's co-founder answered a 19% stock drop by pledging a full return to foundation models and shipping GLM-5.2 under an MIT licence. Washington's long push to revive Intel is starting to pay off, with Trump nudging Apple toward Intel fabs. Braintrust benchmarked the GPT-5.6 family against Anthropic on 225 code-graded tasks and reports correct answers per dollar, so you can route each job to the cheapest model that clears your bar.

NEWS

The UK AI Security Institute found universal jailbreaks in OpenAI's GPT-5.6 Sol, the model OpenAI markets as its most secure to date. Testers broke its guardrails to enable long-form agentic work in vulnerability discovery and exploit development, and said the jailbreaks were built within hours, though researchers had privileged access. OpenAI said it moved to reproduce and mitigate the specific jailbreaks, but AISI expects further red teaming to surface more.

Apple has sued OpenAI, accusing the ChatGPT maker of stealing company secrets after a partnership between the two firms soured. The complaint alleges OpenAI pressed job candidates from Apple to hand over details of secret projects, part of a deal struck in 2024 to put OpenAI's AI services on Apple devices. For builders, the fight signals rising legal risk around talent moves and confidential roadmaps between AI rivals.

Tencent is leading a deal to unwind Meta's $2 billion acquisition of Manus, reversing a purchase the two sides had already agreed. The transaction moves Manus out of Meta's ownership and into a group fronted by Tencent, undoing one of the larger AI deals of the past year. Builders on Manus now face a change of corporate backer, with roadmap and access terms tied to whoever ends up in control.

Apple's road map for its next Mac processors, the M6, M7 and M8, is the company's latest move to rebuild its operations for the AI era, Bloomberg's Mark Gurman reports. The same rework touches the wider product line, with new Apple Pencil styluses in the pipeline and tap-to-pay set to spread across Apple's retail stores. For builders, it points to Apple reorganising its silicon and hardware roadmap around AI demands.

Washington's push to revive Intel is starting to pay off, the Wall Street Journal reports. The White House made fixing the chipmaker a pet project, and last summer President Trump pitched Tim Cook on having Apple manufacture some of its chips at Intel after Cook came to Washington hoping to avoid steep semiconductor tariffs. For builders, it hints at more US-made silicon and supply chains shaped by federal industrial policy.

After a lockup expiry drove Zhipu's stock down more than 19%, co-founder Tang Jie sent staff a letter committing the company to a full return to foundation-model research under a two-year 'Touch High' plan. He ruled out chasing short-term application revenue, concentrating resources on the capabilities behind AGI and on safety built in as a foundational axiom. Its GLM-5.2 ships MIT-licensed with a million-token context, free for builders to deploy.

TECHNICAL

Braintrust ran the three GPT-5.6 models plus Anthropic's Fable, Opus 4.8, and Sonnet 5 across 225 procedurally generated, code-graded tasks. Sol and Terra land near 83% overall while Luna trails at 68%, and Anthropic's lower scores turn out to be refusals rather than wrong answers. The write-up reports correct answers per dollar, so you can route each task to the cheapest model that clears your bar.

Researchers spliced a logging proxy between two agent harnesses and the same model to measure what each sends. Before a one-line reply, Claude Code emitted about 33,000 tokens of system prompt, tool schemas, and scaffolding versus OpenCode's 7,000, and on one task it rewrote up to 54 times more prompt-cache tokens. The twist: on multi-step work Claude Code's total ran lower because it batches tool calls into fewer requests.

This essay makes the case that a coding agent is the model plus a harness: the prompts, tools, context policies, hooks, sandboxes, subagents, and feedback loops wrapped around it. It draws on Viv Trivedy, who coined the term, plus Anthropic and HumanLayer to argue a decent model with a great harness beats a great model with a bad one. Read it to see where your own agent's behaviour comes from.

After impulse-buying a 96GB M3 Ultra Mac Studio, the author moved to Qwen3.5-122B for local agentic coding but hit a wall: a follow-up on a 50,000-token conversation took three to five minutes before the first token appeared. The culprit was a KV-cache leak in his own serving stack, not the model, which he traces across three bugs. Worth reading if you run big models locally on Apple silicon.

A developer rebuilt his blog's search to grasp query meaning rather than only match strings, with no server and no API call. The trick is model2vec's "potion" models, distilled from a sentence-transformer into a static lookup table whose entire forward pass is a token lookup, so the model ships as roughly 4 MB instead of the 23 MB a real transformer needs. Handy for semantic search on a static site.

ANALYSIS

Satya Nadella inverts Kenneth Arrow's information paradox: in the AI age it's the buyer, not the seller, who risks giving away knowledge, paying once in money and again in the proprietary data a model needs to perform. Every prompt, correction and eval becomes 'exhaust' the provider learns from, skewing the asymmetry toward whoever owns the learning infrastructure. Nadella argues enterprises must own their evals and memory behind a trust boundary.

Jamin Ball reframes Alex Karp's 'own your weights' pitch: a downloaded open model is a melting ice cube, a frozen snapshot that decays in relative terms as frontier models pull ahead. The durable asset is the engine behind the weights, your data flywheel, RL infrastructure and eval harness that keeps producing better task-specific models. Before claiming model sovereignty, check whether you can RL an open model against your own workflows.

Epoch analysed 41 core contributors to OpenAI's public Codex repo, using LLM judges to estimate how long each merged pull request would take an unassisted engineer. In Q2 2026, 8% of contributor-days reflected work judged at over 24 hours of solo effort, up from 2% a year earlier. Treat the figure as an upper bound on time saved, since the judges are imperfect and longer work isn't always more valuable.

Aparna Dhinakaran and Laurie Voss argue that 'the loop,' AI engineering's word of the month, hides four different architectures. They separate execution loops, an agent acting, observing and deciding, task loops like Geoffrey Huntley's Ralph Loop that restart an agent on a fresh context until tests pass, and product loops, the software factories running triage through shipping. When someone sells you a loop, pin down which layer they mean.

Daniel Miessler argues the single biggest shift right now is moving from prompt engineering to intent engineering: stop specifying the steps and describe the outcome you want. He grounds it in Sutton's Bitter Lesson, where hand-written procedures get relatively dumber as models improve, so detailed HOW instructions increasingly poison a model's own approach. Audit your prompts and scaffolding with your strongest model and convert HOW instructions into WHAT ones.

This essay defends engineers working in codebases too big to hold fully in one head, arguing partial understanding is the only realistic mode, not a failure. It pushes back on Naur's 'Programming as Theory Building,' which claims a broken system should be rebuilt from scratch, since large systems carry thousands of quirks no rewrite can reproduce. When you're unsure, take a position, make your best guess, and own the consequences.

Greg Jarboe warns that free AI citations are a temporary window, not a permanent channel. He draws the parallel to July 2013, when Google reclassified optimised anchor text in press releases as unnatural links and erased that ranking tactic overnight; Resonate Labs' Shane Tepper says what's closing is 'the cheap part,' winning position with work rather than budget. Bank earned visibility now and plan for a paid, fenced-off phase.

Responding to the AI 2040 forecast, George Hotz rejects hard-takeoff thinking: intelligence is just today's bottleneck, not a master key. Reality resists tokens, he argues, because chip fabs still take three months and hardware, supply chains and physical failures set the pace no matter how smart the model gets. He also insists AI should run locally and answer to its owner, since a model you can't overrule isn't truly aligned.

TOOLS

MiniStack is an MIT-licensed local AWS emulator that stands in for 60+ services on a single port, drop-in compatible with boto3, the AWS CLI, Terraform, CDK, and Pulumi. It spins up real Postgres, MySQL, and Redis containers rather than mocks, in a roughly 270MB image using about 30MB of RAM at idle. It targets teams left stranded after LocalStack moved its core community services behind a paid plan.

Memtrace turns a codebase into a live knowledge graph, every function, class, and call edge, that AI coding agents query in milliseconds instead of re-reading files. Built on Rust and Tree-sitter with zero LLM calls, it indexes a 50,000-file repo in under 90 seconds across 20+ languages, fully local. A fleet of agents can share the same call graph and blast-radius view, so refactors stop breaking things nobody saw.

This plugin gives a coding agent the one thing it can't do out of the box: watch a video. Paste a URL or local path with a question and it fetches captions first, extracts scene-aware frames, pulls a timestamped transcript with Whisper as a fallback, then reads every frame as an image. Handy for breaking down a competitor's hook or diagnosing a bug from a screen recording.

Confessor reconstructs an AI coding agent's whole history from the session logs already on your disk: every file it opened, command it ran, and secret that passed through its context. It flags the pattern that matters, a sensitive file read followed by a network call in the same session, data in and a way out. You run one command after the fact, and it makes zero network calls itself.