Monday's lineup: Modal publishes the full architecture behind a 40x reduction in serverless-GPU cold-start latency, Andon Labs releases the five-month results from letting four frontier models run real radio stations, and a researcher locates and turns off the political-censorship circuit inside Qwen 3.5 9B. Plus: Pope Leo XIV puts an Anthropic interpretability researcher on the encyclical stage, Qwen 3.7 surfaces on Qwen Chat, Musk loses to OpenAI on a calendar technicality, LangSmith Engine takes a swing at agent triage, and Odyssey ships a four-player generative GoldenEye.

A Sunday show about doing your own arithmetic. Mustafa Suleyman gives the white-collar tier eighteen months, in a piece whose own counter-data sits two paragraphs down. The State of Brand argues every AI subscription is a subsidized loss-leader two weeks away from a forcing function. William Angel runs the tokens-per-hour math on an M5 MacBook Pro and finds OpenRouter cheaper. Frederick Vanbrabant uses The Goal to explain why agents move the bottleneck rather than break it. Marlene Mhangami's Playwright talk shows the cleanest pattern for tests AI should write. Calif's public M5 / MIE exploit write-up lands. Artem Loenko explains why every chat UI keeps ending up on a browser engine. And Luke Lanchester's MCP hello page is the small fix I most enjoyed this week.

• Suleyman's eighteen-month claim, and the article that knocks it down
• The subsidy that ends on June 1
• Apple Silicon costs more than OpenRouter
• Frederick Vanbrabant on why AI doesn't speed up your process
• Marlene Mhangami: tests AI writes vs tests AI verifies
• Calif on the five-day M5 / MIE exploit, in their own words
• Artem Loenko: native all the way, until you need text
• Luke Lanchester's MCP hello page

An Australian CTF top-tenner writes the obituary for the open competitive scene. Intercom and PFF both report doubling-and-then-some engineering throughput from agent-first workflows — using opposite playbooks. Supabase ships a skill after watching an agent silently bypass row-level security. A suitcase runs a 4B model fully offline at conversational latency. Julia Evans leaves Tailwind. And Claude keeps telling people to go to sleep.

Five days for a small security team paired with Mythos Preview to land the first public macOS kernel exploit on Apple's M5 with Memory Integrity Enforcement turned on. Four months for Replit to claw back into the iOS App Store. In between: arXiv starts banning authors of LLM-error papers, Metabase explains why open-source security is being strip-mined this summer, NVIDIA squeezes the 5090, Uncle Bob switches from Claude to Codex, and a pure-OCaml protocol stack boots in low Earth orbit.

• Codex everywhere, Claude in the rearview — OpenAI ships Codex inside the ChatGPT mobile app, Uncle Bob cancels his Claude account, and Arvind Narayanan names the irony underneath both.
• Five days to a kernel exploit on M5 — Calif and Mythos Preview crack Apple's Memory Integrity Enforcement and hand-deliver the 55-page report to Cupertino.
• The strip-mining era of open source security — Metabase's security inbox went from ten reports a month to ten a week. Cal.com is going closed source.
• arXiv bans authors of LLM-error papers — Tom Dietterich announces a one-year submission ban on papers with hallucinated references or results.
• Replit out of the App Store wilderness — Four months after being pulled, Replit's iOS app is published again. Replies note what that says about platform power.
• GDDR7 squeezes the 5090 — A 300-dollar price hike to add-in-card partners as GDDR7 lead times stretch into weeks.
• The web's secret quirks file — Den Odell walks through Safari's Quirks.cpp and Firefox's about:compat. Chrome doesn't need a quirks file.
• OCaml in orbit — Thomas Gazagnaire's pure-OCaml protocol stack booted in low Earth orbit on April 23, with post-quantum rekeying and OxCaml-tuned dispatch.

Anthropic drew two lines around Claude this week — a guided lane for small-business owners and a metered one for the developers running agents hardest. From there: Bun's near-million-line port from Zig to Rust, mostly typed by an AI agent in a week; Wasp's clear-eyed post-mortem on spending five years and five million dollars building a language it didn't need; a chess coach that works by refusing to let the model think; the UK's evaluators capping their own cyber tests so the math still works; the open web pricing out crawlers; multi-token prediction landing in llama.cpp; and what happens when you post a real Monet and call it AI.

• Anthropic draws two lines — Claude for Small Business and the new Agent SDK credit metering
• Bun, ported to Rust by a bot in a week — and a maintainer who won't commit to it
• Wasp: the language was never the moat — $5M and five years of lessons
• The chess coach that isn't allowed to think — Play Magnus on LLM-as-translator
• Autonomous cyber, measured against itself — AISI on a capability curve outrunning its own ruler
• The web pulls up its drawbridge — Google's search index and Cloudflare's defaults
• Multi-token prediction on your laptop — a real gain bundled with a contested one
• The Monet test — when the AI-tell detector fires a false positive

An overnight hackbot run lands a real CVE in Adobe Magento. Codex starts driving local Mac apps in parallel, with per-app permissions and a separate cursor. Cloudflare publishes one of the prettiest debugging writeups of the year — a nine-year-old kernel patch, a 14ms oscillation, three lines of fix. Plus Nous Research's removable attention wrapper, GPT-5.5's first ProgramBench solve, Vercel's argument that giving an agent a file system changes how it behaves, a 26-million-parameter tool-calling model, Isomorphic's two-billion-dollar Series B, and a Purdue senior who put Rust on his graduation cap.

• Joseph Thacker on FUZZ-E's overnight Magento CVE
• OpenAI's Codex computer use walkthrough
• Cloudflare on the CUBIC death-spiral fix
• Lighthouse Attention from Nous Research
• ProgramBench: GPT-5.5's first full solve
• Nico Albanese on giving your agent a computer
• Needle: a 26M-parameter tool-calling model
• Isomorphic Labs Series B announcement
• Eric Park's Rust-powered graduation cap
• Nick Cammarata on capability and self-worth

A coordinated npm and PyPI campaign turned Claude Code and VS Code config files into a self-spreading vector, Mira Murati's lab put out its first model and it is an argument with the hands-off-keyboard doctrine, and matklad explains why rust-analyzer's build system is really an org chart. Plus a small rant about cursors, and two builds from the LocalLLaMA subreddit that keep pushing the local-frontier line by hand.

• The mini-shai-hulud campaign — 170 packages, 404 versions, and a self-spreading IDE payload
• Thinking Machines ships TML-Interaction-Small and picks a fight with the autonomous-agent doctrine
• matklad on architecture, incentives, and the build system as a social filter
• Don't hijack the mouse pointer — and what it tells us about cheap effects
• A 1-trillion-parameter Kimi K2.5 running on Intel Optane DIMMs at 4 tokens a second
• Unsloth releases Qwen3.6 with the multi-token prediction layer preserved

Today’s Braid starts with OpenAI launching a majority-owned Deployment Company, backed by a Tomoro acquisition, about 150 forward deployed engineers, nineteen partners, and more than $4 billion of initial investment. The practical thread is the work of changing real systems: integration, controls, measurement, and the code you still have to maintain after the demo.

• OpenAI turns deployment into a company, with Tomoro, TPG, consultancies, integrators, and OpenAI’s launch post pointing at a bigger bet on embedded engineering.
• Mythos finds one curl vulnerability, while Rival Security complicates Anthropic’s FreeBSD story with a training-data provenance question.
• James Shore’s maintenance-cost math meets the k10s devlog about archiving a seven-month AI-built Kubernetes TUI.
• Trigger.dev’s durable-agent talk and Arize’s context-management talk give the backend version of the same lesson.
• Granola’s production loop, a tiny boolean-argument essay, and MLX on-device demos close the day on builder craft.

METR publishes a fresh time-horizon number for Claude Mythos Preview, and yesterday's follow-up gets paid off in a single chart. NVIDIA ships a checkpoint that contains three reasoning models at once. antirez gets DeepSeek 4 running on a DGX Spark and tells you exactly where the bandwidth wall lives. François Chollet argues that agentic coding is a form of machine learning, and a few replies actually push the idea further. Plus the diffusion gap, the German tokenizer tax, and a Gemma 4 drafter that buys you a third of your decode time back.

• METR's 17-hour 50% time horizon
• NVIDIA Star Elastic and the one-checkpoint, three-models trick
• DeepSeek 4 on DGX Spark — 12 t/s, 270 GB/sec wall
• Chollet: agentic coding is machine learning
• Elad Gil's diffusion-gap map
• Gemma 4 multi-token prediction on M5 Max

A Saturday show that leans into the long reads. Tim Gowers — yes, the Fields Medalist — sat down with ChatGPT 5.5 Pro and an open paper from Mel Nathanson and walked away with a result the original author called "original and clever." We follow that thread, then turn to Mozilla's deeper write-up on the Firefox 271-bug release, Jeff Kaufman on what AI is doing to disclosure embargoes, Anthropic on why constitution training beats demonstration training, and a beautiful pentest story about a critical RCE in React itself. Plus a quieter set of items: Codex in real Chrome, DHH's Copilot review hit-rate jump, a SysMoBench paper on LLM-generated TLA+ specs, AI2's document-routed mixture-of-experts model, and Qwen 35B-A3B running on a 3060.

• Tim Gowers — A recent experience with ChatGPT 5.5 Pro
• Mozilla — Behind the Scenes Hardening Firefox
• Jeff Kaufman — AI is Breaking Two Vulnerability Cultures
• Anthropic — Teaching Claude why
• Lachlan — The React2Shell Story (CVE-2025-55182)
• Specula team — Can LLMs model real-world systems in TLA+?
• OpenAI — Codex in Chrome on macOS and Windows
• DHH — Copilot review hit ratio 1/10 to 7/10
• r/LocalLLaMA — Qwen 35B-A3B on 12GB VRAM
• r/LocalLLaMA — AI2 EMO MoE with document-level routing
• METR — Claude Mythos Preview time-horizon evaluation