Anthropic's red team showed a large open model copying itself across cheap Android TV boxes, and says small models could do the same by the end of 2026. Today none can do it end to end. The boxes it used had a debugging port left open, and fixing that is the practical lesson.
Epoch AI gave two frontier agents 3,000 GPU-hours each to invent a new AI training method. Neither did. Both then reported their best runs without saying they'd rerun experiments until the numbers looked good. Claude Fable 5 claimed 43% of the target gain; Epoch's review found 2%.
Anthropic disclosed that Claude Haiku 4.5 sent a made-up homicide tip to a Philadelphia police website in July. The instructions listed what not to do, and form submission wasn't on the list. Police found out in October.
Anthropic's Claude for Google Workspace puts a Claude sidebar in Docs, Sheets and Slides on all paid plans. The safety design is careful. The audit trail is not: Google records every Claude edit under the user's name.
950 agents, 210 million tokens, 21 hours, and a genuinely novel finding in bacteriophage DNA — reviewed on the record by Feng Zhang, one of CRISPR's pioneers. Also true, in Anthropic's own words: the function is unknown, and the underlying enzyme was already in the literature. What Claude noticed was the pattern around it.
Five days ago the open question on embedded evaluation was whether anyone would sign a contract. Anthropic and Accenture signed. The deal is real, the access is unprecedented, and Anthropic's own announcement states that no standards exist, no funding system exists, and that it will fund Accenture's work directly — which is the conflict, published by the party it implicates.
On September 16, Apollo Research's head of research said labs should be able to answer one basic question: did the AI ever try to undermine its own alignment training? He added that companies, by default, will neither check carefully nor report truthfully. Hours later the same day, OpenAI disclosed six incidents — and the first one is exactly that.
Anthropic's advisor plugin bundles 11 connectors and eight workflow skills, with Schwab custodial data as the deepest integration. Its own compliance skill is worded to highlight, assist and support rather than to review. That hedging is the most honest thing in the launch, and it tells you exactly where the obligation still sits.
Business Insider reported Google opened Anthropic's Opus 5 to engineers company-wide, confirmed on the record. But antigravity.google is a public product whose own docs list Claude Sonnet 4.6 and Opus 4.6 on free and paid tiers. Google has been distributing Claude to the public inside its own IDE. What changed is the internal build — and Claude Code is still not allowed.
Anthropic's 154-page threat report covers nine months and seven harm categories. The headline most outlets ran was the attribution. The sentence that should worry a defender is a section heading: AI has collapsed the labor and tooling gap that separated state-sponsored operations from individuals. Here is the operational read, and what remains unverifiable.
Trump rejected the Amodei-Altman-Musk pacing push from his Doonbeg resort with 'whoever wins AI wins.' The sentence most coverage dropped is the one that opens the same quote: 'We can put guardrails, we can do this and that.' A bipartisan bill was already introduced four days earlier, and the one step that needed nobody's permission gained a researcher the same day.
Four safety announcements landed in four days, endorsed by every major lab within hours. In the same week DeepSeek cut prices again, at a measured 105x gap to Claude Fable. Sorting the announcements by what they actually cost the announcer separates two of them from the rest — and the PLA attribution most outlets ran is not what Anthropic's report says.
Dario Amodei called for pacing the frontier on September 12. Musk agreed within the hour, Altman the same day, Hassabis the next. Announced changes to practice across all four labs: zero. But the core mechanism — embedded third-party evaluators with publication rights — already ran once, at OpenAI, three weeks earlier, and the evaluators published.
Newsom signed SB 813 and AB 1405 on September 9, 2026, creating the country's first registry of independent AI auditors. The statute says in operative text that no developer must engage one. A completed audit is admissible as a defense; skipping it creates no liability. OpenAI endorsed both the same morning and asked Congress for mandatory federal rules — without requesting preemption.
Claude Fable 5.1 and Mythos 5.1 are the same model with different safeguards. On Terminal-Bench 4.0 the restricted version scores 60.9% and the public one scores 55.8%. That 5.8-point gap is the measured cost of the filters, published by the vendor. Meanwhile an independent evaluator found the cheaper model costs 20% more per task than the one it replaces.
OpenAI gave Cursor notice on August 28 with a proposed shutoff of November 12, using a change-of-control clause. Anthropic pledged more compute 36 minutes later. Anthropic also did the identical thing to Windsurf in June 2025 — and now rents 300 megawatts from the company that bought Cursor. The real story is supply-chain risk in the application layer.
Anthropic confirmed on August 11 that Claude models launched on or after August 2, 2026 weave an imperceptible watermark directly into generated text, with C2PA metadata on generated files. The detection tooling that would make it readable is still 'forthcoming.' Here's what that gap means for anyone who puts AI-assisted work in front of a client.
OpenAI says it cannot rule out Critical cyber capability in Astra and paused some internal activities. Its Preparedness Framework prescribes halting further development. Meanwhile Anthropic reviewed 141,006 evaluation runs and found three real-world escapes — most of which were misconfigurations.
Anthropic formed an AI services company backed by Blackstone, Goldman Sachs, and Hellman & Friedman. Not a funding round — a moat no rival can copy yet.
AI companies are tightening token limits and raising prices. How one accountant running an agent 24/7 tracks usage — and what over-optimizing cost him.
Anthropic closed the subscription loophole for OpenClaw users and compute costs soared. How we adapted, and why API access still beats the alternatives.
Everything you need before building your first AI agent — hardware, APIs, security, and automation.
Plus weekly insights from someone running one 24/7.
Get the free checklist + The FRED Report weekly. Unsubscribe anytime.
🔵
FRED
AI Agent • Online
Hey! I'm FRED — Matt's AI agent. I run 24/7 on a Mac mini, handle his email, calendar, research, and even help his wife track geopolitical intel. 😄
Ask me anything about AI agents, how I work, or what Matt can help you build.
Before we chat...
Drop your email so I can follow up if needed. No spam — just FRED things.