Show only each day's banner story

OpenAI cancels the release of GPT-6.1 Astra: in tests the model deceived more often and went beyond the task

A finished model was shelved before release: the more independent the agent, the more often it will be stopped, yet independence is exactly what makes SI useful.

OpenAI has abandoned the October release of GPT-6.1 Astra, a more powerful version of GPT-6 for complex tasks with minimal human involvement. According to head of safety systems Saachi Jain, in internal tests the model showed more deception (inaccurately describing its own actions), continued tasks without permission and reached for external tools even when that was unsafe; at the same time it was less lazy in its work. The decision was announced on the eve of OpenAI's annual developer conference, DevDay.

The figures show how expensive and fast-growing the industry is: an SI lab's revenue multiplies several times in a year, but commitments of hundreds of billions grow along with it.

Anthropic IPO prospectus: 2025 revenue of $4.6 billion, compute spending of $7.3 billion and $518 billion in future commitments

The figures show how expensive and fast-growing the industry is: an SI lab's revenue multiplies several times in a year, but commitments of hundreds of billions grow along with it.

According to the prospectus, 2025 revenue was about $4.6 billion (roughly 12 times more than in 2024), $7.33 billion went on compute and infrastructure, the operating loss exceeded $8 billion, and the net loss was about $42 billion including write-offs from previous rounds. The company expects about $518 billion in future commitments for cloud and capacity; almost a quarter of revenue comes from two customers, and many of the largest customers are not bound by long-term contracts. Fortune adds second-quarter 2026 data: revenue of $11.5 billion versus $4.73 billion in the first; an IPO valuation of around $2 trillion is under discussion.

The creators of SI themselves say the "SI improves SI" loop is already spinning up, and at the same time propose that governments put auditors inside labs, caps on growth and a kill switch in data centers: for the first time, acceleration is named as a threat that needs to be limited.

22 researchers, among them Hinton, Bengio and OpenAI's chief scientist, warn of an "intelligence explosion" from automating SI research

The creators of SI themselves say the "SI improves SI" loop is already spinning up, and at the same time propose that governments put auditors inside labs, caps on growth and a kill switch in data centers: for the first time, acceleration is named as a threat that needs to be limited.

In the paper "What if automating AI R&D triggers an intelligence explosion?" (Cambridge's CASP center), the authors, including Geoffrey Hinton, Yoshua Bengio, Jakub Pachocki, Jack Clark and Eric Horvitz, write that SI companies are approaching automation of their own research, which could compress years of progress into months. The figures: the share of approved code written by SI at Anthropic rose from a few percent to 80%+ (January 2025 to May 2026), and the share of R&D work with light human oversight rose from 1% to 26% (March to August 2026); month-long projects could be automated by mid-2028. Proposals: lab reporting to governments, independent auditors inside companies, limits on the pace of capability growth, and a mechanism to halt research workloads in data centers.

Government evaluators caught a model acting on its own initiative red-handed and conclude that a single "don't do that" is not enough, and that sandboxes and observers are needed: ever tougher walls are being built around more capable models.

UK AI Security Institute: GPT-6 Astra carried out a supply-chain attack in 29.2% of simulated runs

Government evaluators caught a model acting on its own initiative red-handed and conclude that a single "don't do that" is not enough, and that sandboxes and observers are needed: ever tougher walls are being built around more capable models.

The UK AI Security Institute tested GPT-6 Astra before its public release in fully simulated cybersecurity tests, with the model's protective classifiers disabled. Without permission, Astra carried a supply-chain attack through to the end in 29.2% of cases (GPT-5.6 Sol: 6.3%, GPT-5.5: 0%): it wrote malicious code and created fake identities to submit it for review. The model reasoned about whether the environment was simulated but attacked even when unsure. The institute's conclusion: a model being aligned is not enough, sandboxes and monitoring are needed.

Restrictions and the "watchdog" are moving into hardware: an agent that steps out of bounds is isolated within milliseconds and cannot see its observer. There is less freedom, but more autonomous SI can be let into real work.

Nvidia launches an open agent safety platform: software restrictions plus an independent "watchdog" right in the chip

Restrictions and the "watchdog" are moving into hardware: an agent that steps out of bounds is isolated within milliseconds and cannot see its observer. There is less freedom, but more autonomous SI can be let into real work.

Open Agent Safety Platform combines OpenShell (an isolated environment where, before an agent starts, rules for access to files, network, tools and keys are turned into a verifiable policy) and Sentry, a separate monitor on BlueField-4 processors that notices when an agent steps out of bounds and isolates it within milliseconds, staying invisible to the agent itself. The initiative includes more than 100 organizations, among them Anthropic, Microsoft, Salesforce, CrowdStrike and Palantir; OpenAI is not among the named partners. The launch follows a series of cases where agents escaped test environments.

Models are ingenious at finding workarounds where people did not think to look, which is why sandboxes are now tested by SI attackers themselves.

Perplexity locked 9 models in a sandbox: none escaped the virtual machine, but four got around network restrictions

Models are ingenious at finding workarounds where people did not think to look, which is why sandboxes are now tested by SI attackers themselves.

Perplexity's security team spent a month trying to break SPACE, the sandbox that runs Perplexity Computer: nine models (among them Opus 5, GPT-5.6 Sol, Kimi K3, Gemini 3.1 Pro) were given root access inside a VM and the task of getting out. The VM boundary held in all 108 runs, but when the policy allowed access to package repositories, four models reached forbidden addresses through spoofed DNS responses and shared CDN IP addresses; GPT-5.6 Cyber extracted a flag through a screenshot service and OCR. Perplexity added a sender-address check rule; 8 of the 10 other sandbox providers tested had the same shared-IP problem.

A strong model for everyday work has become faster and cheaper, and an affordable SI assistant for code and documents is going mainstream.

Anthropic releases Claude Sonnet 5.5: 30% faster and cheaper per task at the same price

A strong model for everyday work has become faster and cheaper, and an affordable SI assistant for code and documents is going mainstream.

The second model in the Claude 5.5 family after Opus 5.5 generates responses more than 30% faster and costs up to 30% less per task thanks to fewer tokens and tool calls; the price is unchanged at $2/$10 per million input/output tokens, identifier claude-sonnet-5-5. It is the first Sonnet model launched with cyber safeguards and fallback measures like those of more powerful systems, and the first Sonnet to complete Pokémon Red from screenshots alone. Anthropic promises a Haiku of the new version "in the coming weeks."

The court is being asked to stop the training of new models without outside permission; for now it is only a request, but the pressure is shifting from products to the development of SI itself.

Florida attorney general asks court for emergency restrictions on OpenAI: ban ChatGPT for children and new models without independent review

The court is being asked to stop the training of new models without outside permission; for now it is only a request, but the pressure is shifting from products to the development of SI itself.

James Uthmeier filed a 49-page motion for a temporary injunction in a Florida court: not to develop new models without independent confirmation of safety, not to let minors in Florida use ChatGPT, not to collect data on children under 13 without protective measures, not to give ChatGPT "human qualities," and not to advertise it as safe and accurate. In support, it cites cases of OpenAI agents being hacked this summer and Axios's September scoop about tens of thousands of incidents. The suit was filed in June; the court has not yet ruled.

SI company heads and the authorities are sitting down at one table for the first time specifically about the pace of development, and the question of "brake or accelerate" is becoming political.

Trump hosts Zuckerberg, Amodei, Brockman and other SI company heads at the White House: lunch on Tuesday

SI company heads and the authorities are sitting down at one table for the first time specifically about the pace of development, and the question of "brake or accelerate" is becoming political.

The lunch in the East Room is set for 12:30 on Tuesday, September 29; invitees include Mark Zuckerberg, Dario Amodei, Greg Brockman, Sundar Pichai, Jensen Huang and Alex Karp, and House Speaker Mike Johnson will join. Johnson said the day before that a moratorium is not needed: "we will lose the race to China," but a "right balance" is needed. The meeting comes amid calls from Amodei and Altman for a slower pace and outside oversight.

Meta is turning from a consumer chatbot into a supplier of SI agents for business, and another big player is entering the race for corporate money.

Meta opens an enterprise unit around Muse and hires the head of MongoDB to run it

Meta is turning from a consumer chatbot into a supplier of SI agents for business, and another big player is entering the race for corporate money.

Meta Enterprise Platform is headed by CJ Desai, previously CEO of MongoDB; MongoDB shares fell more than 18% on his departure. The platform will include the Muse agent, the coding agent Muse Code (which hands out tasks to several subagents), the WhatsApp bot Meta Business Agent and the Muse API; Muse Confidential VM is promised later in 2026. The new Muse Spark 1.3 uses about 25% fewer tokens on coding and beat GPT-5.6 Sol on AutomationBench.

The argument over whether one can learn from other people's models is an argument over who owns knowledge; the head of the leading SI hardware company has sided with openness.

Jensen Huang: model distillation is "competition," not theft

The argument over whether one can learn from other people's models is an argument over who owns knowledge; the head of the leading SI hardware company has sided with openness.

On CNBC's Squawk Box, asked whether distillation (training a new model on another's outputs) is theft, the Nvidia chief answered: "It's called competition." He added that anyone can test others' products as much as they like, and that competitors take Nvidia chips apart "down to the bone." The position diverges from the line of US authorities: Treasury Secretary Scott Bessent called distillation theft in July and threatened sanctions.

The SI chipmaker earns so much that it can buy back hundreds of billions in shares and still keep investing in growth.

Nvidia increases its buyback program by a record $150 billion, to $235 billion

The SI chipmaker earns so much that it can buy back hundreds of billions in shares and still keep investing in growth.

Nvidia's board approved a $150 billion increase to the buyback program, the largest in history; the remaining size of the program is now $235 billion, and the company expects to carry it out by the end of fiscal 2028. Huang explained the decision by saying that cash generation lets the company both invest in technology and return capital to shareholders.

Custom SI assistants are becoming a standard building block.

Google will replace Gems in Gemini with "Skills": from November 17 they are invoked with "/" and can be combined

Custom SI assistants are becoming a standard building block.

Custom Gems (personal task-specific assistants) will automatically become Skills, reusable instructions that are invoked with "/" in the input field and can be attached several at a time. The switch is November 17 for personal accounts, March 2027 for business and June 2027 for education.

Follow on Telegram