Back to archive
Issue #124··40 min read·20 stories

Anthropic ‘screwed us’ 💼, Copilot leaks your inbox in 1 click 🔑, cheap model panels beat frontier 🤖

Salesforce buys Fin for $3.6B. Fable 5 vs GPT-5.5 on context. The only scalable Postgres delete.

The Anthropic mess got pettier: Axios reports the White House froze Fable 5 and Mythos 5 less over a jailbreak than over a personality clash, and a class action is now contesting Claude Max’s usage limits. The deals kept coming, with Fox taking Roku for $22B and Salesforce buying Fin for $3.6B. Away from the drama, OpenRouter’s Fusion pushes model panels past frontier scores, and Sean Goedecke picks apart the ‘GPUs die in three years’ claim propping up the AI-bubble case.

NEWS

Axios reports the export ban that scrubbed Fable 5 and Mythos 5 came down to Anthropic failing to speak the Trump administration’s language, not a technical flaw. After Amazon’s Andy Jassy flagged jailbreak concerns to Treasury, an official said Anthropic “came to every fork in the road and took the wrong fork.” A source close to the administration put it plainly: the two sides “just speak in different languages.”

A Claude subscriber filed a federal suit on Monday seeking class-action status, accusing Anthropic of overselling how much its Max plans actually deliver. The complaint, from Washington DC resident Karl Kahn, claims the real caps on the Max 5x and 20x tiers are hard to pin down and run below the limits advertised on Anthropic’s own site. It lands while the company is already fighting Washington over its frozen models.

Fox agreed to acquire Roku for $160 a share, roughly $22 billion, folding Roku’s streaming hardware, operating system, and ad-supported FAST services into its broadcast and Tubi businesses. The deal gives Fox a direct pipe into living-room smart TVs and the advertising that runs on them, instead of renting that reach from a platform it does not control. It is Fox’s largest acquisition to date.

Salesforce will buy Fin, the AI customer-service platform Intercom rebranded around its support agent, for $3.6 billion. Fin resolves queries across live chat, WhatsApp, SMS, phone, and Slack, and Salesforce plans to fold its team and technology into Agentforce. Co-founder Eoghan McCabe says he stays on as CEO and “little will practically change.” The deal is expected to close in early 2027.

OpenRouter shipped Fusion, which runs a panel of models on one task and uses a judge model to fuse a single answer. Across 100 deep-research tasks, Fable 5 fused with GPT-5.5 hit 69%, above Fable 5 solo at 65.3%, and a budget panel came within 1% of Fable 5 at half the cost. It also added Subagent, which delegates grunt work to a cheaper model mid-generation.

Varonis researchers chained three flaws into SearchLeak, a critical bug (CVE-2026-42824) that let an attacker pull a target’s emails, files, and calendar from Microsoft 365 Copilot Enterprise Search through a crafted link. The victim types nothing: clicking it tells Copilot to search their mailbox and smuggle results into an image URL. Microsoft has patched it, but the parameter-to-prompt injection is a pattern any team putting an LLM over private data can reproduce by accident.

TECHNICAL

Calvin frames Fable 5 and GPT-5.5 as two training regimes solving the same problem, managing context across long-running tasks. OpenAI’s “oracle” leans on native server-side compaction, summarising and pruning a thread when it overflows, which keeps a smaller context window coherent and lets OpenAI tune K/V caching behind the API. He reads Anthropic’s “firm” as the opposite bet, and unpacks what each choice means on long agentic work.

ByteByteGo walks through why serving a model splits into two jobs with opposite bottlenecks: prefill, which processes the prompt and is compute-bound, and decode, which emits tokens one at a time and is memory-bandwidth-bound. Most production-serving techniques, from batching to KV-cache tricks, exist to manage that split. The piece maps how inference engineering grew from a frontier-lab concern into a discipline any company running serious AI workloads now staffs.

Dejan ran one query through Gemini 3.5 Flash, GPT-5.5, and Opus 4.8 on the same day and inspected the raw grounding data. The shapes differ sharply: Google received seven pages and cited all seven, OpenAI took a flood and cited a trickle, Anthropic sat between. The framing that explains it is the grounding funnel, received then readable then cited, and the gap between received and cited is where each model’s personality shows.

PlanetScale’s Tom Pang makes the counterintuitive case that large DELETEs quietly add work. Under MVCC, deleted rows become dead tuples that sit on disk until vacuum, the deletes still replicate as writes, and the space rarely returns to the OS. The fix is a schema move, not a query trick: design deletable data into per-tenant or per-period tables you can DROP or TRUNCATE, so cleanup is a metadata operation.

ANALYSIS

Sean Goedecke chases down the stat underpinning half the AI-bubble case, that inference GPUs last “three years at most” under load. He traces it to an anonymous “GenAI principal architect” quoted via Tegus, a firm that pays insiders by the hour. Goedecke argues the incentive there is to sound confident rather than accurate, and points to evidence that datacentre GPUs depreciate over a longer horizon than the doom case assumes.

Charity Majors pushes back on readers who took her last piece as a licence to skip code review and push slop to prod. Her point is the opposite: now that models write median-quality code faster and more cheaply, the cost shifts to everything around the code. Tests, review, and validation become more load-bearing, not less, the same way immutable infrastructure made discipline mandatory after the era of hand-tended server pets.

Drawing on a year at Imprint, Will Larson lays out how AI tooling rewires engineering management. Complex migrations can now be 95% owned by one person in a tenth of the time, which raises the stakes on individual judgement and makes a single sharp edge costly to colleagues. First-pass code is nearly free, he notes, but working code still depends on your harness: tests, CI, validation, and preview environments.

Rohit Krishnan tested Karpathy’s “LLM Council” idea, where several models critique each other and a chairperson synthesises, against simpler setups. Breaking each answer into atomic idea-cards and scoring them blind, he found the council keeps only a minority of the genuinely good single-model ideas while giving consensus points an extra push. Like a human committee, it smooths out the spiky, idiosyncratic answers that are often the most valuable.

Murphy Trueman starts from Uber’s uSpec, an agent that auto-documents components by reading their structure through a Figma MCP, and draws out the condition that makes it work: the design system is explicit enough to read programmatically. When the structure is a real contract, agents produce accurate output; when it is a loose guideline, they fail or invent. Treating each component as a promise, not a suggestion, is now a build requirement.

A regional court in Munich held Google strictly liable after its AI Overview invented defamatory statements, placing two publishers beside scams atop search results. The hinge: a normal search result points to a third-party page you can sue, but here the AI was the author, so there was no one else to blame. Google’s “everyone knows not to trust AI” defence failed. It is one appealable ruling, not settled law, though the logic travels.

TOOLS

Adam Argyle’s prop-for-that exposes the runtime state CSS cannot normally see, slider values, pointer position, viewport size, visibility, battery, sensors, as --live-* custom properties you read with plain calc() and var(). Bind an element with a data attribute and your stylesheet reacts with no event handlers or render loop. It batches writes to one setProperty per frame, freezes while the tab is hidden, has zero dependencies, and is SSR-safe.

Guardians implements Erik Meijer’s “Guardians of the Agents” thesis: prompt injection shares its root cause with SQL injection, since code and data are not separated. The fix is the same. Rather than let the model call tools one at a time, the LLM emits a full plan of symbolic placeholders, and a static verifier checks it against a policy with taint analysis, security automata, and a Z3 solver before anything runs.

Han Xiao’s Knowledge Graph Extractor takes text, a URL, or a zip of mixed files and emits atomic subject-predicate-object triples, each carrying an evidence span, confidence, and source file, streamed into a force-directed graph. It runs a self-hosted Qwen3.6-35B on a single NVIDIA L4, chunks oversized docs instead of truncating, and dedupes facts on CPU. A single-slot queue preempts and resumes jobs, with JSONL export.

machine0 gives you long-running KVM VMs, NixOS with flakes or Ubuntu with Claude Code and Codex preinstalled, that stay up until you suspend them, billed by the minute from $0.013 an hour. Every operation is a CLI command with --json, and a remote MCP server lets agents drive the whole machine. You get dedicated resources up to 60 vCPU, static IPs, HTTPS endpoints, and snapshot-and-resume for golden images.