Anthropic drew two lines around Claude this week — a guided lane for small-business owners and a metered one for the developers running agents hardest. From there: Bun's near-million-line port from Zig to Rust, mostly typed by an AI agent in a week; Wasp's clear-eyed post-mortem on spending five years and five million dollars building a language it didn't need; a chess coach that works by refusing to let the model think; the UK's evaluators capping their own cyber tests so the math still works; the open web pricing out crawlers; multi-token prediction landing in llama.cpp; and what happens when you post a real Monet and call it AI.

• Anthropic draws two lines — Claude for Small Business and the new Agent SDK credit metering
• Bun, ported to Rust by a bot in a week — and a maintainer who won't commit to it
• Wasp: the language was never the moat — $5M and five years of lessons
• The chess coach that isn't allowed to think — Play Magnus on LLM-as-translator
• Autonomous cyber, measured against itself — AISI on a capability curve outrunning its own ruler
• The web pulls up its drawbridge — Google's search index and Cloudflare's defaults
• Multi-token prediction on your laptop — a real gain bundled with a contested one
• The Monet test — when the AI-tell detector fires a false positive

An overnight hackbot run lands a real CVE in Adobe Magento. Codex starts driving local Mac apps in parallel, with per-app permissions and a separate cursor. Cloudflare publishes one of the prettiest debugging writeups of the year — a nine-year-old kernel patch, a 14ms oscillation, three lines of fix. Plus Nous Research's removable attention wrapper, GPT-5.5's first ProgramBench solve, Vercel's argument that giving an agent a file system changes how it behaves, a 26-million-parameter tool-calling model, Isomorphic's two-billion-dollar Series B, and a Purdue senior who put Rust on his graduation cap.

• Joseph Thacker on FUZZ-E's overnight Magento CVE
• OpenAI's Codex computer use walkthrough
• Cloudflare on the CUBIC death-spiral fix
• Lighthouse Attention from Nous Research
• ProgramBench: GPT-5.5's first full solve
• Nico Albanese on giving your agent a computer
• Needle: a 26M-parameter tool-calling model
• Isomorphic Labs Series B announcement
• Eric Park's Rust-powered graduation cap
• Nick Cammarata on capability and self-worth

A coordinated npm and PyPI campaign turned Claude Code and VS Code config files into a self-spreading vector, Mira Murati's lab put out its first model and it is an argument with the hands-off-keyboard doctrine, and matklad explains why rust-analyzer's build system is really an org chart. Plus a small rant about cursors, and two builds from the LocalLLaMA subreddit that keep pushing the local-frontier line by hand.

• The mini-shai-hulud campaign — 170 packages, 404 versions, and a self-spreading IDE payload
• Thinking Machines ships TML-Interaction-Small and picks a fight with the autonomous-agent doctrine
• matklad on architecture, incentives, and the build system as a social filter
• Don't hijack the mouse pointer — and what it tells us about cheap effects
• A 1-trillion-parameter Kimi K2.5 running on Intel Optane DIMMs at 4 tokens a second
• Unsloth releases Qwen3.6 with the multi-token prediction layer preserved

Today’s Braid starts with OpenAI launching a majority-owned Deployment Company, backed by a Tomoro acquisition, about 150 forward deployed engineers, nineteen partners, and more than $4 billion of initial investment. The practical thread is the work of changing real systems: integration, controls, measurement, and the code you still have to maintain after the demo.

• OpenAI turns deployment into a company, with Tomoro, TPG, consultancies, integrators, and OpenAI’s launch post pointing at a bigger bet on embedded engineering.
• Mythos finds one curl vulnerability, while Rival Security complicates Anthropic’s FreeBSD story with a training-data provenance question.
• James Shore’s maintenance-cost math meets the k10s devlog about archiving a seven-month AI-built Kubernetes TUI.
• Trigger.dev’s durable-agent talk and Arize’s context-management talk give the backend version of the same lesson.
• Granola’s production loop, a tiny boolean-argument essay, and MLX on-device demos close the day on builder craft.

METR publishes a fresh time-horizon number for Claude Mythos Preview, and yesterday's follow-up gets paid off in a single chart. NVIDIA ships a checkpoint that contains three reasoning models at once. antirez gets DeepSeek 4 running on a DGX Spark and tells you exactly where the bandwidth wall lives. François Chollet argues that agentic coding is a form of machine learning, and a few replies actually push the idea further. Plus the diffusion gap, the German tokenizer tax, and a Gemma 4 drafter that buys you a third of your decode time back.

• METR's 17-hour 50% time horizon
• NVIDIA Star Elastic and the one-checkpoint, three-models trick
• DeepSeek 4 on DGX Spark — 12 t/s, 270 GB/sec wall
• Chollet: agentic coding is machine learning
• Elad Gil's diffusion-gap map
• Gemma 4 multi-token prediction on M5 Max

A Saturday show that leans into the long reads. Tim Gowers — yes, the Fields Medalist — sat down with ChatGPT 5.5 Pro and an open paper from Mel Nathanson and walked away with a result the original author called "original and clever." We follow that thread, then turn to Mozilla's deeper write-up on the Firefox 271-bug release, Jeff Kaufman on what AI is doing to disclosure embargoes, Anthropic on why constitution training beats demonstration training, and a beautiful pentest story about a critical RCE in React itself. Plus a quieter set of items: Codex in real Chrome, DHH's Copilot review hit-rate jump, a SysMoBench paper on LLM-generated TLA+ specs, AI2's document-routed mixture-of-experts model, and Qwen 35B-A3B running on a 3060.

• Tim Gowers — A recent experience with ChatGPT 5.5 Pro
• Mozilla — Behind the Scenes Hardening Firefox
• Jeff Kaufman — AI is Breaking Two Vulnerability Cultures
• Anthropic — Teaching Claude why
• Lachlan — The React2Shell Story (CVE-2025-55182)
• Specula team — Can LLMs model real-world systems in TLA+?
• OpenAI — Codex in Chrome on macOS and Windows
• DHH — Copilot review hit ratio 1/10 to 7/10
• r/LocalLLaMA — Qwen 35B-A3B on 12GB VRAM
• r/LocalLLaMA — AI2 EMO MoE with document-level routing
• METR — Claude Mythos Preview time-horizon evaluation

Mozilla publishes the long-form on how a Claude Mythos Preview harness found 271 security bugs in Firefox, including sandbox escapes that fuzzers missed for twenty years. A European privacy lawyer goes byte-precise on Chrome's silent four-gigabyte Gemini Nano push, using kernel filesystem events on a profile that received zero human input. A WebRTC veteran tells OpenAI, on the day it ships GPT-Realtime-2, that the protocol assumptions are wrong for voice agents. Plus AlphaEvolve's twelve concrete production deployments, Anthropic's natural-language autoencoders putting a number on Claude's evaluation awareness, AMD's first new Instinct PCIe card in five years, and OpenAI quietly winding down the fine-tuning API.

• Mozilla on hardening Firefox with Claude Mythos Preview
• Alexander Hanff on Chrome's silent 4 GB Gemini Nano install
• Luke Curley: OpenAI's WebRTC Problem
• OpenAI's three new audio models in the API
• DeepMind on AlphaEvolve's first year of impact
• Anthropic's Natural Language Autoencoders
• AMD Instinct MI350P PCIe card
• Skymizer HTX301 on-prem inference card
• OpenAI winding down the fine-tuning API
• EU AI Act Article 50 transparency consultation
• Xe Iaso: maybe you shouldn't install new software for a bit
• Multi-Token Prediction lands in LLaMA.cpp for Gemma 4
• Open-OSS/privacy-filter infostealer on Hugging Face

Thursday, May 7. The GPT-5.5 default swap is two days old and the cracks are showing — Mario Zechner caught it refusing to read full files. Subquadratic announced a 12-million-token context window with sub-quadratic attention; the benchmarks are real, the deployment story isn't yet. Zyphra trained ZAYA1-8B end-to-end on AMD MI300x and the loss curves are clean. Three new agent papers landed: Terminus-4B for subagent terminal execution, MOSAIC-Bench on compositional vulnerabilities, and the Workspace-Bench / ProgramBench double-release on what happens when you give an agent twenty thousand files. Google Cloud shipped Fraud Defense with QR-code human verification. Anthropic posted their three priorities.

— Lenar

Agents can now sign up for Cloudflare and buy a domain through a tokenized payment protocol Cloudflare and Stripe co-designed. Google ships first-party multi-token prediction drafters for the entire Gemma 4 family the same week the LocalLLaMA community gets a 2.5x speedup on Qwen 3.6 27B from a hand-built llama.cpp branch. OpenAI swaps the ChatGPT default to GPT-5.5 Instant. NVIDIA, Microsoft, and OpenAI publish MRC, the multipath transport protocol behind Blackwell-era frontier training. And on the labor side, Dario Amodei trades his white-collar bloodbath line for the Jevons Paradox onstage with Jamie Dimon.

• Cloudflare and Stripe ship the agent-as-customer protocol
• NVIDIA, Microsoft, and OpenAI publish MRC as an open OCP spec
• Google releases MTP drafters for the Gemma 4 family
• Community reports 2.5x and 100 tok/s on Qwen 3.6 27B with MTP
• GPT-5.5 Instant becomes the ChatGPT default
• Dario Amodei pivots from bloodbath to Jevons
• A clean indirect prompt-injection screenshot from r/ClaudeAI
• Trajectory-level fraud detection for LLM agents
• Agentic safety as interaction topology, not model alignment
• Agents as marginal token allocators
• ProgramBench: rebuilding 200 binaries from scratch
• A measured 65/20/15 cloud-vs-local routing rule
• François Fleuret on what LLMs are still missing
• Telus Digital alters call-centre agent accents in real time
• Write some software, give it away for free

Microsoft reverses the Co-Authored-by Copilot default it shipped last week, and that turns out to be one of three pieces of governance news today — alongside CAISI signing pre-deployment testing agreements with Google DeepMind, Microsoft, and xAI, and DeepMind's London staff voting 98% to unionize over military contracts. Then we go where the actual code lives: DeepSeek V4 Pro matching GPT-5.2 ten weeks later at one-seventeenth the price, a Qwen3.6 27B FP8 recipe that fits 200K tokens of unquantized KV cache on a single 48GB card, and a paper called AgentFloor that gives the small-model-routing intuition a benchmark to point at. Plus the tool-use tax, Chrome's silent four-gigabyte install, vibevoice.cpp, the Opus 4.7 complaint thread, and a B2B operator who replaced three vendors with a single Claude skill.