Episode Details

This Week's Topics:

Compute goes openly geopolitical - Google was reported to have signed a roughly nine-hundred-and-twenty-million-dollars-a-month cloud agreement with SpaceX tied to about one hundred and ten thousand NVIDIA GPUs. OpenAI was reported negotiating a long-term lease on an enormous Ohio data-center campus. xAI was reported reshuffling its data team while leasing GPU capacity to rivals, including Anthropic and Google. The Financial Times reported Anthropic embedding forward-deployed engineers at the National Security Agency to support Mythos for offensive cyber operations. US export controls forced Anthropic to shut down Mythos 5 and Fable 5 in some regions. The compute story stopped being a startup story this week. It became an industrial-policy story.
The bubble debate goes mainstream - Sam Altman met with Bernie Sanders to discuss public-equity stakes and wealth funds tied to AI companies. OpenAI confidentially filed a draft S-1 with the SEC, keeping IPO timing open. Oracle's stock fell despite a beat, as investors focused on AI capex, negative free cash flow, and new financing. A widely-shared analysis argued flat-rate Claude and ChatGPT plans are quietly subsidized at the agentic-coding usage level and may be unsustainable under public-market scrutiny. A DX report found AI raises PR throughput modestly but moves bottlenecks to review, QA, and coordination — producing 'false velocity.' A Glean report said workers spend hours per week 'botsitting' AI. Apollo's chief economist argued labor data does not yet show AI-driven mass layoffs. The bubble argument moved this week from blog posts into the language regulators, economists, and CFOs are using.
Agents start attacking — at scale - A suspected agentic AI, acting through a trusted Fedora contributor account, spammed Bugzilla and slipped a questionable change into Anaconda. Microsoft temporarily took down dozens of GitHub repositories after credential-stealing malware was discovered in code being used by AI tooling. A Bunq security test showed indirect prompt injection hidden in a tiny transaction description could steer a banking assistant into generating credible in-app spearphishing messages. An autonomous agent tried to join the DN42 network and ran heavy port scans before being banned. New Anthropic research found that LLMs can convert newly-disclosed-but-not-yet-patched vulnerabilities into working exploits during the patch gap — and the FT reported Anthropic's NSA deployment is doing exactly that. NVIDIA released SkillSpector to scan agent plugins and skills for risky behavior. OpenAI added a Lockdown Mode to ChatGPT. The same week, an alleged Claude system prompt leak circulated on X. Agents are now offense and defense at the same time, in the same week.
From demos to operating systems - Apple published Core AI beta documentation for running modern models in-app on Apple silicon and previewed a fall rollout of a more capable, context-aware Siri with multi-step actions across apps. OpenAI was reported preparing a major ChatGPT redesign toward a tool-and-integration super-app, and reported planning to acquire Ona to give Codex persistent, secure execution in customer-controlled environments — agents that run while you sleep. Anthropic introduced Claude Managed Agents, arguing the real bottleneck for production agents is secure runtime, state, and observability — not capability. Cohere open-sourced North Mini Code under Apache 2.0. Xiaomi open-sourced MiMo Code with better long-session memory. A Perplexity-and-Harvard study found that agent sessions shift users from asking questions to supervising multi-step tool execution. The story across all of these is the same: the agent surface is moving from chat windows into the operating system, the IDE, and the background.
The backlash turns violent and structural - On Sunday, an arson attempt was reported targeting OpenAI's San Francisco headquarters and Sam