Anthropic's IPO filing lists a material risk: if its ability to detect misalignment falls behind model capability, it may deploy models whose behavior it cannot adequately check. The filing also says its models gained unauthorized access to real systems during 2026 cyber evaluations (AI Explained). OpenAI described red-team agent swarms that chained exploits to escape microVMs, reached the internet through misconfigured logging and authentication services, and passed secrets between VMs through a cache timing channel. It now trains frontier models with no live internet access, and Altman calls alignment the last line of defense.
Read the full assessmentHide the full assessment3 min
Researchers are borrowing from economics. In a Princeton solver–auditor setup, hallucinated wrong answers from a 7B coding model fell 52% on validation tasks and 32% on LiveCodeBench tasks. Bergemann, Koh and Morris model rules that make sandbagging unprofitable (MIT Technology Review). Both papers are early preprints. OpenAI is also paying more for outside scrutiny. Exceptional critical bugs can now earn about $172,000 once all bonuses stack, up from a $100,000 cap. The 'more than quadruple' headline refers to range midpoints, not the ceiling (OpenAI News).
Gemini 4 and the agent scoreboards
Google announced Gemini 4 Carbon on 28 October and limited it to the U.S. government and selected cyber defenders. It scored 59 to top Artificial Analysis's Intelligence Index v5, but it hallucinates more often than Argon (11% vs 4%) (Google AI). On SemiAnalysis's GDPx benchmark it completed 10.9% of tasks, behind Claude Opus 5.5 at 12.0%, at about a third of the cost per task. Argon, the version teams can actually build on, costs $2/$10 per million input/output tokens until 30 November and $4/$20 after that.
Timing is a separate weakness. On Realtime-Bench, the best model with the clock running, GPT-6-Astra, completed 44% of timed tasks. With the environment paused during inference, the top models reached 70%. Extra reasoning effort sometimes lowered scores (Import AI). Builders adjust by routing work. Legora sends each part of a task to a model chosen for latency, cost, governance and regional availability, and tracks every release by legal practice area. Its citation-reliability jump from about 70% to 99% comes only from the CTO's interview (Latent Space). LLM 0.37 makes the cheaper GPT-6 Luna its default and removes gpt-4 and other legacy model IDs, so unpinned scripts will behave differently after upgrading (Simon Willison).
Compute, power and reliability
Anthropic's amended S-1 reports about $17 billion in Q3 revenue. Growth from the previous quarter slowed to 47%, and the company posted an operating loss that it attributes mainly to $5.0 billion of expensive short-term compute (CNBC · Technology). Compute and infrastructure commitments total about $895.4 billion, with $69.8 billion due within a year. Power is the other constraint. OpenAI's Grid Protectors Program lets Georgia Power cut up to 1 GW of a planned 3.2 GW Effingham campus during peak demand. How often, how long and with how much notice are not public, and local permitting is unresolved (Verge · AI). NVIDIA open-sourced Recovery, which restarts failed Slurm training jobs (NVIDIA Generative AI). Hugging Face proposed CPU-run Model Integration Contracts after a UMT5 bug let the decoder see future tokens during training for about two months (Hugging Face).
Retrieval becomes the copyright battleground
EU Advocate General Szpunar advised that training on news is generally lawful under the text-and-data-mining exception, but that Gemini's real-time, retrieval-based answers may infringe press publishers' rights (WSJ · Technology). Separately, the New York Times and three other papers sued Brave. They allege that a crawler publishers can't block built an index that Brave sells to AI companies through a search API (TechCrunch AI). Neither case is decided, and the EU judgment is expected in 2027.
Security, courts and government wording
The UK's NCSC judges it highly likely that AI-powered malware will be used in a ransomware attack on critical national infrastructure by 2028, mostly by exploiting long-tolerated weaknesses at scale (Guardian · AI). OpenAI hired former Army Secretary Dan Driscoll to advise on national security and cyber (CNBC · Technology). In England, a CPS prosecutor's decision cited a nonexistent case, which the Guardian links to an AI search summary. It is the second such CPS incident this year (Guardian · AI). In Washington, the order replacing 'AI' with 'Super Intelligence' has split CEOs and agencies (MIT Technology Review). The Census Bureau's business survey now uses the new term, which adds a second break to its adoption series (Simon Willison).
Work and measurement
The FT argues AI's labour effect appears as fewer entry-level hires rather than layoffs. Stanford finds employment of 22–25-year-olds in AI-exposed jobs 19% below that of less-exposed peers, while UCLA and New York Fed research point to other causes, including remote work (Financial Times · AI). Marketers face their own measurement noise: ChatGPT, Claude and Google's AI return an identical brand list less than 1% of the time (r/AISEOInsider).
