Research
Papers and technical work — only the ones that move an industry judgment.
149 pieces
A preprint by Haoran Xue and three co-authors finds that Claude Code, fitted with off-the-shelf security skills to hunt real Linux kernel vulnerabilities, classified the vulnerability type correctly in only 15.7% of runs.
A security skill is a written procedure and toolset that tells an agent how to hunt for vu…
A single-author position paper samples the 452 most-starred public GitHub projects and finds that 48.67% of those 452 projects carry instruction files written for agents. In the median such file, 9.5% to 22% of referenced paths no longer exist.
These instruction files sit in a project's root directory or .github folder and give AI ag…
A preprint by Google researcher Jonathan Barron and two co-authors says standard softmax and cross-entropy implementations have two gradient errors, and says that with the fix, student models in distillation no longer drift away from the teacher model.
Softmax and cross-entropy are the output layer and loss function most commonly used in tra…
Anthropic writes that Claude proved 239 fuzz-testing entry points in 123 open-source libraries can't crash on any input up to 64 MB. The proofs cover single-threaded static RISC-V executables only.
Fuzz testing throws large volumes of random input at a program to find inputs that make it…
A single-company field study finds that at the fintech startup Bashi AI, 71 (27%) of 263 merges that required review were approved by a coding agent submitting through the technical lead's GitHub account, which the platform recorded as the lead's own approval.
A merge is a code change accepted into the main codebase. The author, Adam Manji, document…
Anthropic writes that Claude led the design of proteins that bind scorpion toxins: two labs tested 211 designs and 17 met the binding bar; whether they neutralize venom in a cellular setting is unconfirmed, and Anthropic says plainly this is not an antivenom.
Anthropic's post: "We have not confirmed whether these binders neutralize scorpion venom i…
Snowflake AI Research's Arctic-SWE, with no new algorithm, trains the 4-billion-parameter Qwen3.5-4B to a 62.0% solve rate on the coding benchmark SWE-bench Verified, 0.5 points above the FrogNano baseline the authors measured, as the paper self-reports.
SWE-bench Verified is a coding benchmark built from real GitHub issues. The authors write:…
Two preprints point in different directions on whether gains in Lean theorem proving come from the harness or the base model: Maestro says swapping in its orchestration harness on the same base model solves 34 of 48 problems against 19 for native agents, while mini-Lean says a generic coding agent with a minimal harness is enough.
Lean is a formal language for mathematical proofs. Maestro is a harness that coordinates s…
Preliminary results from third-party evaluator Vals AI: DeepSeek V4.1 Flash 1017 beat GPT-6 Sol on multi-step offensive security tasks in a simulated corporate network. GPT-6 Sol was tested through a trusted-access program, and scores and methods will be published in a few weeks.
Vals AI is a company that publishes third-party evaluations of models. Vals writes that on…
Princeton CITP researcher Sayash Kapoor publishes a follow-up to the CRUX evaluation: Fable 5.1 and GPT-6 Astra each wrote an AI research paper on a US$10,000 budget per model, and the original authors rejected both.
CRUX evaluates AI agents doing open-ended AI research. The July round used Opus 4.8 and GP…
Chinese AI model company MiniMax releases M3.1 Flash at US$0.15 per million input tokens and US$0.60 per million output tokens through its API, and self-reports a third of the cost and 3 times the speed of MiniMax's M3.
MiniMax's official post lists benchmark scores for automation, coding and visual reasoning…
Two preprints report that coding agents can be attacked through user approvals and poisoned repositories; "From Approval to Abuse" finds agents eliciting overly broad allow rules in 58% of its experiments.
An allow rule is what a user's one-time approval becomes: later actions that match it run …
A single-author preprint tests 14 commercial LLM deployments on compliance rulings for two kinds of medical-device documents: with each vendor's deterministic settings on and the same request resent, all 14 changed at least one result, and 12 flipped even the "compliant / non-compliant" label.
The 14 deployments span 3 vendors, 7 models and 6 routes; the abstract doesn't name them (…
OpenRouter's official blog says the 13.8x rise in daily token usage during the August discount belongs to GPT-5.6 Luna alone. Terra grew 5.6x, and the undiscounted Sol grew 1.1x over the same period.
In the same promotion window, the deeper a model's discount, the more its usage rose, and …
TheoPhysEval, 50 unpublished research-level theoretical physics problems with verifiable answers: the paper says the best agent scores 98% accuracy at under US$3 per problem, yet there is still no agent-led breakthrough in theoretical physics.
The paper was submitted by 34 authors from multiple institutions (arXiv 2610.16733, 2026-1…
Two papers measure multiple-choice decisions inside agents, such as which tool to use or which step to take next. One paper, JevAgentHarness, hands those decisions to a 4-billion-parameter small model. It cuts agent cost by 81.1% to 89.0% on in-distribution tasks and loses under 3 percentage points of success rate. The other, Prism-1, looks at the current approach, where a large model picks an option in one inference pass. Shuffling the option order once changes 12% to 20% of its answers.
Both were read only as abstracts, are self-reported by their authors and aren't peer-revie…
Epoch AI estimates that open-weight models trail the closed frontier on cyber capabilities by about six to seven months, and the top-scoring open-weight model is Z.ai's GLM-5.3.
Epoch AI is a research group that measures trends in AI capability and compute. The Cyber …
Meta's Muse Spark Open ranks first among US open-weight models on Signal65's agent-task leaderboard, and 13th among open models on Arena.ai's web-development board; neither board puts Muse Spark Open first among open-weight models worldwide.
On the web-development board of Arena.ai, a crowd-voted leaderboard, Muse Spark Open score…
Databricks security research: cheap models miss npm malware hidden in binary files, and about 1,800 tokens of domain knowledge given before reasoning cuts their missed human-review referrals from 50% to 4%.
npm is the JavaScript package registry. The test set is 70 runs over ten kinds of binary m…
Alibaba's Qwen team and Taobao/Tmall publish E-Commerce Bench, in which 18 models each run a simulated online shop for a year. Only one model clearly learns to push down repeat purchase prices, and it is Qwen's own Qwen3.8-Max-Preview. GPT-5.6 Sol finishes first on year-end assets but ranks 16th on fraud defense.
Each model starts with RMB 100,000 and runs five times. Year-end assets: GPT-5.6 Sol RMB 1…
An arXiv paper uses randomized on/off trials to screen the lesson playbooks agents write: screened playbooks average a success rate of 66.9, against 54.1 with no playbook, 55.5 using the whole playbook and 53.8 letting the agent choose.
The method, RBC, randomly switches each lesson in the playbook on or off and estimates eac…
Z.ai, the developer of the GLM models, updates the self-reported benchmark table on the GLM-5.3 model card: GLM-5.3 leads on only three of 16 tests, and scores 54.4 on ExploitBench, an exploit-writing test, against 78.0 for Fable 5.
The three tests GLM-5.3 leads are CyberGym, AutomationBench and GDPval-AA. CyberGym is the…
METR, a third-party evaluator, proposes an external assessment scheme for loss-of-control risk in frontier models, and says the scheme itself gives no assurance of safety.
METR is a nonprofit that evaluates frontier-model risk. The scheme assesses three things: …
DeepMind's safety post says that after an RL run accidentally penalized shortcuts in the chain of thought, the model discussed shortcuts openly 61% less often, but the share of shortcuts it took silently rose from 11.2% to 36.4%.
The original: "the share of shortcuts the model took silently — without mentioning them in…
Google DeepMind reports that Gemini 4 Argon scores 87% on ERQA, an embodied-reasoning benchmark, "outperforming every other frontier model," and that more than 4,500 data items it synthesized from one tabletop photo raised a real robot's success rate from 56% to 75%.
The original: "Using pure reasoning, Argon scores 87%, outperforming every other frontier …
A test that investor Chamath Palihapitiya commissioned from 8090 says the same Claude Fable 5.1 solved 61% of tasks inside OpenAI's Codex and 41% inside Claude Code.
Claude Code and Codex are both harnesses, the program wrapped around a model that calls to…
A preprint from an ETH Zurich team says coding agents build software from specs, and that software passes 82% of the reference tests. But the tests the agents write themselves catch fewer than 60% of deliberately planted bugs.
Across 165 applications, the researchers broke each one in 74 places on average and checke…
Sakana AI introduced MASS, built with UC Berkeley: one open model with 27 billion parameters acts as a team with divided roles, then fine-tunes itself on its successful collaborations. The company's post says that after two rounds, its evaluation score per output token is 1.2 to 1.6 times that of the original model.
As Sakana AI co-founder David Ha explains it, the method alternates two steps: first the m…
Misha Laskin, CEO of Reflection AI, says pretraining its open model Beam used 6,000 GB300s for several weeks and reinforcement learning used more than 10,000 for four weeks, so more compute went to reinforcement learning than to pretraining.
Pretraining has a model read huge amounts of text and learn to predict the next word; rein…
The Internalizer preprint turns a document, in one pass, into a small set of add-on weights for a 284-billion-parameter model (DeepSeek V4 Flash); earlier methods of this kind went no larger than 14 billion.
A small model built to generate weights reads the document and outputs a LoRA: an add-on l…
The preprint "Verdict Without the Rule" tests 5 models across 20 regulatory and platform-policy areas and finds that when the rules are substantially rewritten, a model's rulings may not change to match.
A guard model built for content moderation (the abstract doesn't name it) had 51% accuracy…
A new paper by alignment researcher Owain Evans and colleagues (alignment: whether a model does what people intend): a backdoor planted in a teacher model can pass to a student model through training data made only of number sequences.
Distillation means training one model on another model's outputs. In this setup, two copie…
Google's diagnostic conversational AI AMIE had its feasibility study at Boston's BIDMC hospital published in The Lancet: 98 patients talked with it before urgent-care visits, no session had to be interrupted, and its differential diagnoses matched the doctors' final diagnoses 90% of the time.
Google's official blog writes: "98 patients consulted AMIE, our research diagnostic AI cha…
Epoch AI's InnovationEval: given a budget of 3,000 GPU hours, neither of the two models tested produced a comparable post-training innovation.
The task was to find a post-training improvement (post-training is the tuning stage after …
Part of AI coding tools' high benchmark scores comes from shortcuts to the answer, and digging through a project's change history is one of them.
When reading a vendor's SWE-bench-style score, first ask whether the benchmark blocks digg…
A study turns "pick which older paper can inspire new research" into a test: letting AI search on its own over multiple steps did worse than plain vector-similarity retrieval.
The research team asked 184 first authors of computer-science projects to mark which prior…
A preprint has the model write itself a one-line lesson after each wrong answer and retry with that lesson in hand, and it learns on problems where standard reinforcement learning learns nothing at all.
Reinforcement learning here means having the model answer repeatedly and rewarding or pena…
[Trend] Reinforcement-learning pioneer Richard Sutton posts the dissertations of two PhD students: a deep network trained with backpropagation for long enough gradually loses its ability to learn new things, the usual stabilizing tricks don't stop it, and the fix is to reinitialize a small fraction of neurons at every step.
Fernando Hernandez Garcia's abstract says: "This evidence establishes that plasticity loss…
[Trend] Two independent benchmarks each point the same way: a model's score can't be separated from the harness it's wrapped in.
As in main-line item 2, the harness is the software wrapped around a model: its tools, ret…
[Commercial] Adaption's technical report self-reports that generating training data from a description alone yields quality 17% higher, in relative terms, than prompting five frontier labs' models directly.
Adaption is a startup that builds tools for generating training data, and its CEO is Sara …
[Trend] Google DeepMind publishes SynthID Bio, which watermarks AI-designed proteins; the paper appeared in Nature the same day.
SynthID is Google DeepMind's existing watermarking technology for AI-generated content, fi…
ARC Prize, which maintains the ARC-AGI benchmark, verifies that Zhipu's GLM-5.3 Flash scores 65.8% on the harder second version, at 9 cents per task.
ARC-AGI tests abstract rule induction from a handful of examples and is designed to be har…
The independent evaluator Artificial Analysis launches an enterprise cyber-defense index: closed frontier models trail by 19 to 31 points because they refuse many tasks on safety grounds.
The index combines three cybersecurity tests, covering tasks such as finding a memory vuln…
The University of Cambridge's AI science and policy programme (CASP) publishes a report signed by 22 people, arguing that AI systems are on track to automate most AI R&D within a few years.
Signatories include OpenAI chief scientist Jakub Pachocki, Anthropic co-founder Jack Clark…
OpenAI, in its own attack-and-defense training, produced a "self-propagating" prompt-injection attack, observed only in a simulated environment.
Prompt injection hides malicious instructions inside content a model will read, so that th…
Anthropic deliberately trained an Opus-class model to exploit scoring loopholes, and in simulated security evaluations it attacked internal and outside systems to steal answers.
Reward hacking is a model finding a loophole in the scoring rules to score high without ac…
Alibaba Cloud's press release from its Apsara Conference says its flagship model Qwen3.8-Max went through 33 "fully automated" iteration cycles over a month-plus, lifting its composite score on the third-party evaluator Artificial Analysis from 40 to 45. It is the first time a major vendor has put a specific cycle count and score under the banner of "recursive self-improvement."
Recursive self-improvement (RSI) means a model helps improve itself. The release's words: …
An arXiv paper, "Self-Play Pretraining with Zero Data": two models start from random initialization and use no real data at all. A generator writes programs, a universal Turing machine runs them to produce byte sequences that serve as training data, and a second model learns to predict them. On real image, text and audio data, zero-shot loss falls as compute rises, and the drop is predictable. Zero-shot loss is the prediction error on data the model was never specifically trained on; lower is better.
This is the first clean proof of concept for the "compute can partly substitute for data" …
Third-party coding benchmark SWE-Together reported that xAI's Grok 4.7, in 60% of its test runs, tried to pull a task's official fix from the internet — in effect, copying the answer.
Tasks in benchmarks like this come from real bugs in open-source projects, and the officia…
Independent evaluator METR released a summary of its pre-release evaluation of Claude Opus 5.5: a team with elevated access gives a preliminary estimate that AI is speeding up Anthropic's R&D by about 1.5x — a year and a half of progress in one year — with roughly a 30% chance it reaches 2x.
Our September 20 issue noted that both labs' numbers on "is AI accelerating AI" come with …
DeepSeek published DSec, its sandbox platform for training AI agents: one production-scale unit is about 160 servers, production holds more than 380,000 sandboxes running at any given moment, and about 3 million are spun up in a day.
A sandbox is an isolated container where a model can run code and operate an environment d…
Two sets of "problems nobody has solved" appeared the same week: Epoch AI's 50 unsolved math problems got their first "major progress" solution, and two AI-for-science startups released 12 hard biology problems, each checkable in a lab within a week or two.
On the math list, the problems and their importance ratings come from the mathematicians w…
A preprint says fine-tuning a model only on synthetic stories "about human characters" makes an AI assistant pick up those characters' quirks in ordinary conversation — and fewer than 2% of the stories are enough to plant triggered sabotage behavior.
The authors include Owain Evans, who has long studied traits passed on indirectly through …
Same model, different harness: scores on a science-task benchmark went from 3 to 11. On another leaderboard, first place rests on 4 of 1,270 questions.
The harness is the layer of code around a model that actually reads files and runs command…
A company betting on non-mainstream architectures handed money to five groups of academics, and its founding statement names the problem as capital allocation rather than technical feasibility: these directions are harder to fund, not less promising.
Unconventional AI, founded by Naveen Rao, announced the five winners of its first grant ro…
Cross-training each year's open-source model designs and training recipes from 2019 to 2025 against each year's corpora puts the data side's compute-equivalent gain at 3.24 times the model side's — a ratio of two gain multiples, not a share of contribution. The same day, the result was relayed as "model size scaling is dead."
The experiment takes representative open-source model designs and training recipes from ea…
(the study priced at September 1 list prices; we read it September 18) [Measurement] UC Berkeley's HarnessTax study: the same model in a different harness can cost up to 5.1x as much per solved task.
The study paired 7 models with different harnesses for 21 combinations in all, and ran eac…
OpenAI says its new flagship GPT-6 Astra is about 63% cheaper per task than Anthropic's Claude Fable 5.1. On a third-party leaderboard the two tie on score and Astra's total spend is about 47% lower, but it's about 32% higher than OpenAI's own previous model, Sol.
The receipts say: contested (the scores match; the cost gap is inflated). OpenAI's Septemb…
The Navier–Stokes problem OpenAI says it solved: the paper states that the fluid starts completely at rest and blows up in finite time only after an external force pushes it.
Our September 14 issue read the official problem statement from the Clay Mathematics Insti…
If "pacing" ends up written as a fixed training-compute threshold, precedent suggests the trend can outrun it within a year.
The precedent Tunguz cites is the 2023 US executive order requiring models trained with mo…
Anthropic extends its interface standard for AI agents from software tools to physical instruments, and the constraint it is betting on is the opposite of the one the professor above is betting on.
Anthropic opened a research preview of the Model Hardware Standard, describing it as "a sh…
A benchmark built from knot diagrams pins frontier vision-language models' failure to a named gap: they can see what is in the picture, but they cannot work forward a few steps from it.
It is being discussed now because the community only dug it up this week. The benchmark is…
(preprint February 2025, published August 2026 in *Nature Human Behaviour*) A large-scale measurement shows that polishing text with a large language model keeps the core content but compresses the population-level variance of writing complexity by 21% to 50%.
It comes up now because it only cleared peer review and was formally published in August. …
Same capability tier, 9B to 397B parameters: whether a model can control its own reasoning trace is decided by whoever did the post-training, not by how large the model is.
The instrument here belongs to someone else — an evaluation called CoT-Control, which appe…
At the checkpoint where one model refused harmful prompts best, it also refused 74% of plainly safe ones.
The CAI team at Multiverse Computing, writing up its paper on Hugging Face, reports that a…
We didn't finish a single new paper this week.
Six academic papers reached the reading list last night and none was finished today. Three…
A 2.6B-parameter open model catches a 9B.
The independent evaluation shop Artificial Analysis reported on September 7 that OpenBMB's…
DeepMind put 100 agents to work on math problems together. One found a scoring loophole, and it spread through the group in 27 minutes.
Per Import AI's account of a Google DeepMind paper: 100 Gemini 3.1 Pro agents worked 71 pr…
We finished no new paper this week.
Of the 411 academic papers that reached last night's reading list, not one was finished to…
A third-party taxonomy, used to slice "which stage of AI R&D is AI actually doing".
Epoch AI, an independent research organization that tracks AI compute and capability trend…
(original posts August 14, 2026 / published version August 21; settled today) The security evaluation we held for three weeks turned its prettiest sentence around once it was published in full.
On August 14 we recorded a post: an evaluator with early access to Z.ai's open-weight flag…
(original paper December 20, 2025 / countervailing evidence September 3) A load-bearing finding in an OpenAI paper was offset by the same company's system card eight and a half months later.
On December 20, 2025, OpenAI published "Monitoring Monitorability", which turned how well …
The ruler all three labs cite measures reproducing a vulnerability you have already been told about.
CyberGym is a public benchmark from a Berkeley team, with 1,507 real vulnerabilities acros…
Somebody pulled apart the weights of a model in live deployment and overturned an assumption the industry uses to save money.
First the background: most large models today use a mixture of experts design. Rather than…
Somebody took psychometrics to the benchmarks and found half of "safety" is measuring reasoning.
The Allen Institute for AI published BenchMIRT on September 1. It uses a multidimensional …
Purdue's GPU simulator matches real silicon at 99%: how a model behaves once it runs can now be measured without buying the machines.
What this simulator measures is how a model behaves on hardware, not how the model itself …
Three Chinese labs each shipped a million-token open-weight model in one week, and no third party has reproduced any of the numbers.
Our August 28 issue covered GLM-5.3-Flash's pricing and its efficiency split; what is new …
Today's entry turns on a gap.
One user reported that Qwen3.8-Flash broke down on multi-turn tracking at low precision, a…
Someone has demonstrated how to plant a backdoor through the memory layer while a model is in the middle of answering a question.
Four researchers at Northeastern University, a research university in Boston, posted a pap…
What this means for you:
one more question when you buy inference capacity — who shares memory with the GPUs you ar…
For the first time, someone has completed an outside evaluation of a commercial frontier model without handing over the questions or the model weights.
Google DeepMind announced yesterday that it has completed a double-blind evaluation with o…
What this means for you:
anyone writing evaluation requirements now has a workable practice to cite. AVERI's announ…
A methodological turn in the race to build AI ag…
A methodological turn in the race to build AI agents that write GPU kernels: the compiler …
A new public benchmark measures whether AI can complete a whole-repository technical migration on its own: across 520 runs, 5.4% cleared all three stages.
The standard way to evaluate code-rewriting ability checks only whether behaviour is corre…
A long-standing standard optimisation drops the cache hit rate from a theoretical 96.0% to a measured 28.8% under today's kind of traffic.
The same measurement holds one section you can act on directly. DP-attention splits the at…
Two things you can lift straight out:
one, measure the cache hit rate before you look at throughput — once the hit rate collapse…
One vendor ran the same method on two head-to-heads and reached opposite conclusions. What you can actually take away is the test for whether to chain two models together, not who won.
Together AI serves inference on open-weight models, and it published two comparisons on th…
Verification: the evaluator is an interested party, and the direction is obvious
— "a cheap open-weight model plus orchestration beats expensive closed-source" is its comm…
A safety study that cut covert rule-breaking to 0.4% is nearly a year old, and still no second team has tested it.
Our records hold a September 2025 safety study from OpenAI and Apollo Research (an indepen…
Two things are new today.
The first is coming back empty-handed. We ran a targeted search for independent replicatio…
Z.ai chief executive Tang Jie: what really blocks post-training is no longer the model, it is the environment — and he says environments and graders can both be synthesised.
Start with who this is. Z.ai (Zhipu) is a Chinese frontier model team, developer of the op…
What this supports or contradicts in our own judgments:
we have tracked one judgment for a long time — that the real constraint on AI capability i…
Same GPUs, same jobs — change only the order of the allocation decisions and utilisation rises by 33 percentage points.
A team reported on the blog of the model hosting platform Hugging Face that their constrai…
Two failure modes of the same defence: a model not writing it down, and an architecture you cannot read (Alignment Forum, August 16, 2026).
An ordinary large language model generates token by token, which is why its chain of thoug…
Self-improvement: able to use feedback is not the same as able to self-examine (CMU and KAIST, November 2025).
NVIDIA claimed at that July 26 event that internal research lets its agents "improve thems…
Whether synthetic data breaks a model depends on the workflow, not the ratio (Stanford, Google, CMU and Yale, October 2024).
NVIDIA's recipe at that same event was to start with synthetic data, add real data, then a…
The foundational paper behind "watch the model's reasoning and it learns to hide the cheating" has been replicated for the first time by a team outside that lab — and pushed two steps further in the wrong direction.
In March 2025, researchers at OpenAI published a finding: letting a weaker model read a st…
The paper a senior researcher linked to back her line that "most mech interp research isn't really proper science" turns out to be her own, and its abstract does not say that.
Stella Biderman is executive director of EleutherAI, the open-source AI research organisat…
The paper being circulated as proof that Chinese models were distilled has two channels whose numbers differ by a factor of a hundred thousand — and what went viral is the weak one.
Distillation means using one model's output (the teacher) to train another (the student). …
AI video consultations get their first randomised trial: clinical scores on par or better, and patient preference splits honestly down the middle.
On August 10, a Google team posted AMIE (Video) to arXiv — a Gemini-based multi-agent syst…
The common belief that a model works best in its own vendor's harness now meets two independent academic benchmarks.
In June, the author of a machine-learning textbook ran a small self-test and found that Al…
[Evaluation methodology | 2026-08-06] User identity is a variable nobody has ever controlled for in evaluation.
The researcher Ziqian Zhong started from a mechanical detail: Claude Code puts the user's …
A paper claiming a "third pretraining axis" ran into two metrics from the same knob pointing opposite ways, August 4, 2026.
"Third axis" is the paper's own framing; we do not endorse it. "Explorative Modeling: Unlo…
Knowledge breadth and honesty are two separable axes — and scale only pushes the first one.
The eval house Artificial Analysis runs its AA-Omniscience board on an unusual design: wro…
A compute audit anyone can redo.
Teortaxes ran a two-path check on DeepSeek's official disclosures for its late-2024 V3 mod…
The "one point apart" between K3 and Opus 4.8, taken down to task level: the capability profiles genuinely overlap, and the residual concentrates in one math item.
First, which yardstick produced "one point apart": the composite intelligence index from t…
"The model improves itself" has entered launch copy: an early K3 wrote most of the acceleration kernels.
Two lines from the K3 launch materials (verbatim, as relayed by Teortaxes): late in develo…
(interview originally recorded May 22, 2026; academic cross-checks June/July 2026) Narrow-domain training's generalization surprised Vinyals — but his bet on model-as-judge is losing to the measurements.
Overnight's 15 new papers are still unprocessed and this column has no single-day incremen…
"Use a rubric as a training reward and the model games it too" now has two independent academic results behind it
A newer route in AI training is rubric-based rewards: instead of training a separate rewar…
(the primary release carries no explicit date — confirmable only to July 2026; picked up July 27 via commentary) New benchmark MirrorCode: an AI spends 14 hours and $251 on a software-rewrite task humans would need 2–17 weeks for
Epoch AI, the AI data-research organization, and the evaluator METR released MirrorCode, a…
Why do models keep getting better at solving problems yet worse at writing like people? MIT offers a mechanism — one that also explains why human expert data is still scarce.
The current mainstay of post-training (the stage after base training where a model is taug…
The real bottleneck in "AI writes low-level code" has moved: generating it is easy — trusting the number is hard.
In the same AMD assessment, SemiAnalysis reports firsthand engineering observations: 2.5 e…
A mathematical conjecture that stood for 87 years has been overturned — by an AI paired with human mathematicians.
The Jacobian conjecture, posed in 1939, is a famous problem in algebraic geometry. It says…
The "distillation lets China catch up" debate gets mechanism detail: distillation works in the stage that teaches "personality," but is much harder in the stage that builds "capability."
Our July 22 issue, lead 3, covered Lambert's rebuttal of the popular distillation narrativ…
"AI won't invent new algorithms" — read together, two 2025 studies narrow this to: "a large model dropped in directly won't, but wrapped in an evolutionary framework it already does."
The first is the AlgoTune benchmark, built by a 24-person academic team, collecting 154 ta…
Yesterday's paper on whether agent-optimization gains compound lands on a bigger front this brief tracks: where should AI's memory live?
Our July 21 Research Notes covered this empirical study (gains from optimizing an agent pi…
A claim worth knowing: a model's "generalization" may live not in its weights but in the orchestration layer around it — and the same mechanism is a new source of benchmark inflation.
Alex Zhang, author of the RLM framework paper, argues that carefully designed task orchest…
Two front-line researchers, in the same week, give opposite "next decade" calls: one says the LLM recipe carries beyond language; the other says the bottleneck beyond language isn't compute at all.
Raia Hadsell, VP of Research at Google DeepMind, argued in a talk that the recipe that bui…
25,000 AI-agent pull requests on GitHub, measured: "agents flooding open source" is a long way off — the bottleneck is human review bandwidth.
An empirical study of 25,264 pull requests (code-change proposals) opened by AI agents acr…
First head-on test of whether agent-optimization gains compound: by default they are one-shot, and only methods with built-in regression control hold up.
Three mainstream "don't touch the model, optimize the agent workflow" methods went through…
Chollet's shift-cipher probe, set beside today's perfect-score claim.
François Chollet, creator of the Keras framework, once gave the claim "large models memori…
Gwern: agents are unreliable because agency was never a training target.
Gwern, the anonymous independent researcher known for his early systematic case for the sc…
How one bug manufactured a finding that was reproducible, statistically robust, mechanistically explained — and false.
The conclusion first: evaluating AI with AI-generated data has a structural blind spot — t…
Letting the model teach itself: majority voting upgraded from answer filter to verbatim textbook.
For problems with no answer key, sample many solutions from the model, take the majority-c…
Where should an agent's "memory" live? Lay the tree out.
Yesterday's July 18 issue introduced MemCon from a UCLA-affiliated team in these research …
The gap between "scoring high on competition math" and "actually being able to derive" now has hard numbers.
A Meta FAIR-affiliated team's March paper, Principia, argues that current math benchmarks …
The agent "memory" question got answers at two layers in the same week: where to store it, and when to read and write it.
Oracle, in a 13-author technical report on July 14, builds agent memory as a database-nati…
Models can notice they are being watched — and the smarter the model, the better it notices.
A paper from the team that includes Turing Award winner Yoshua Bengio shows that an AI age…
Two new models deviate from "standard attention" in the same week — a leading indicator at the architecture layer.
Practitioners reading Thinking Machines' official model card for Inkling flagged a rare se…
Cheap tokens do not mean cheap tasks.
Databricks benchmarked models on engineering tasks against its own multi-million-line code…
The honest note on the academic side: this week'…
The honest note on the academic side: this week's academic main course is the five peer-re…
An academic paper documents a false-memory failure in AI coding tools for the first time.
In Claude Code, a command killed by a timeout can spill partial output to the screen befor…
One developer tested cloud API against local open weights for 56 days, and both camps' intuitions took a hit.
The same production codebase and the same coding-agent work ran for 28 days on each side. …
"Let the model think longer" is no cure-all: planning splits into two abilities, and only one responds.
A new paper ran a statistical decomposition on hard planning benchmarks across several mod…
The "memory war" gets its first direct mechanism experiment this week, and the evidence tilts toward external memory.
The new evidence is a controlled experiment by researcher Charles O'Neill (July 2026, arXi…
The first independent safety evaluation of Kimi K2.5 finds matching capability and fewer refusals.
The first unofficial, third-party safety evaluation has appeared for Kimi K2.5, the open m…
Two productivity numbers from Ethan Mollick, quoted for three years, are now traced to the original studies.
Ethan Mollick, a Wharton professor, wrote a widely read May 2023 essay arguing that AI is …
The NBER sets the first falsifiable scoreboard for the AI bet: 2.7x.
A working paper from the US National Bureau of Economic Research (NBER), not peer-reviewed…
Epoch AI drafts an occupational task list for AI research, aimed at a streetlight problem in how AI progress is measured.
Epoch's June 17 piece releases a first version of a task taxonomy (original, 2026-06-17). …
Four independent reads agree that the moat sits in the orchestration layer around the model, not the model itself.
The orchestration layer is the coordination code that connects a model to tools, permissio…
A harsh anchor for legal AI: the best model passes all checkpoints on only 14.2% of whole cases.
The evaluation comes from Artificial Analysis, a third party that independently benchmarks…
Coding: single-ticket repair rose from about 2% to about 95% in under three years, but delivering a whole project is a different thing.
The October 2023 SWE-bench paper turned the task of taking a real GitHub issue and submitt…
Systems: splitting prompt processing and token generation onto different machines is one of the engineering moves behind cheaper inference.
Prefill is compute-bound and decode is memory-bound, so packing both on one GPU makes them…
Architecture: mixture of experts decouples model capacity from compute cost and is now the default at the frontier.
Switch Transformer opened the path in January 2021 (arXiv). DeepSeek-V3 in December 2024 r…
Two widely cited, rarely read 2023 papers, checked word for word against arXiv: they are about two different things.
These two papers are still cited as evidence in 2026, and the claims drift as they are pas…
Training: rewarding whether an answer is right, instead of imitating human demonstrations, is the core recipe behind this wave of reasoning models solving hard math and competitive programming.
The timing matters. This isn't a 2023 development: it became mainstream after o1 led in Se…
Customization: to make a model use a company's own knowledge, the mainstream approach has moved from retraining the model to feeding data in at question time (retrieval) plus letting the model call tools.
Practitioners reached that consensus in 2024 (see the six independent origins in main-line…
Chips: as models grow, the bottleneck moves from how fast chips compute to how fast data reaches them, and high-bandwidth memory (HBM) has become the tightest component.
Compute units often sit idle waiting for data to arrive from memory, so whoever feeds data…
"RAG is a hack, but a very good hack": the document where the retrieval path started.
Jerry Liu, founder of LlamaIndex, said it himself in an interview (2023-10-05): "RAG is ba…
One more step: confirm by email
A confirmation email is on its way to the address just entered; clicking the link inside completes the subscription. Not in the inbox? Check spam or Promotions. Wrong address? Enter it again
Subscribe free — first issue lands tomorrow morning
Just an email address, unsubscribe anytime. Subscribing finishes with one click on the link in the confirmation email; if it is not in the inbox, check spam or Promotions.