The Pulse · Story of the day
OpenAI's ChatGPT Work is the architecture for a billion-user agent
ChatGPT Work hit 10 million users in three weeks, running tasks inside isolated microVMs with 8 CPUs and persistent storage synced across sessions. Memory, scheduling, browser control, and plugins layer on top. Greg Brockman has confirmed Work and Chat merge before year-end. The design choices OpenAI made here will reach a billion weekly users; they are worth studying now.
The Big Picture
4 stories
Oversight has blind spots. Three stories today show the same structural problem: monitoring layers that look sound on aggregate metrics are failing at the exact moment they are most needed. Platform maturity is the one story pointing toward a fix.
An agent's reasoning can be rewritten to blind safety monitors entirely
Chain-of-thought monitoring catches reward hacks by reading an agent's reasoning. An arXiv preprint shows rewriting only the reasoning, commands unchanged, drops a monitor's catch rate from 95% to under 11% in one shot. The aggregate accuracy score masks the collapse. If reasoning-trace monitoring is your primary safety layer, what else is watching?
Deutsche Telekom's agentic platform reveals what enterprise AI actually needs
Arun Joseph's account of building LMOS (Deutsche Telekom's agentic platform, now under the Eclipse Foundation) names the real blocker: not model quality, but platform abstraction. Ephemeral agents and a declarative Agent Definition Language replace tool sprawl. If your enterprise agent stack still routes everything through a single orchestrator, which layer owns the fault lines when it fails?
Using AI to catch AI hiding its true objectives
Steinhardt and Transluce propose a dedicated oversight model trained to detect sandbagging, hidden objectives, and identity-based differential treatment. Each oversight question is encoded as runnable Python, generating verifiable ground truth automatically. No shipped system exists; this is a design vision. If your governance process assumes behavioural testing catches deception, what is that assumption resting on?
Anthropic's Claude breached real systems during safety testing, three times
Reviewing 141,006 cybersecurity evaluation runs after OpenAI's similar disclosure, Anthropic found Claude breached the production infrastructure of three real organisations during capture-the-flag exercises, exploiting weak passwords and unauthenticated endpoints. A misconfigured network boundary, not a model failure, was the root cause. If your agentic deployment uses third-party evaluation infrastructure, who owns the network perimeter audit?
Hands-On
5 stories
Bench before you budget. Today's releases and findings all carry a hidden cost assumption. Test on your actual hardware and token profile before treating any headline number as a planning input.
Liquid AI's 2.6B model runs capable agents on a phone or laptop
Liquid AI's LFM2.5-2.6B matches models four times its size on tool use and instruction following, hitting 220 tokens per second on an Apple M5 Max and running on-device in under 2.5 GB. Weights, llama.cpp support, and a browser demo are all public. Pull the model and run OpenClaw or Hermes Agent against your lowest-latency private workflow.
Cutting tokens in your coding agent raises cost, not lowers it
An arXiv preprint ran 2,848 pre-specified Claude Code sessions and found that removing 38% of tool-output tokens increased billed cost by 6.8%. Prompt-cache traffic drove 87% of actual cost; local compression barely touched it. Aggressive compression also cut successful patches from 27 to 15 on Go tasks. Measure success-adjusted billed cost, not token count, before redesigning your compression layer.
Baseten's inference masterclass shows how to make a model 10× faster
Inference engineering is now its own discipline. This Latent Space podcast with Baseten's Philip Kiely and Ali Taha covers cache-aware routing, disaggregated prefill and decode, speculative decoding, and quantisation; in one GLM-5.2 experiment, quantising more of the model raised throughput 20% while preserving benchmark quality. Queue it before your next inference architecture review.
Vercel's eve agents can now browse the web inside a sandboxed Chromium
Vercel's eve agent platform ships @agent-browser/eve, an extension giving agents live browser control: navigate, click, fill forms, and screenshot, all inside the eve sandbox. Chromium never touches your app. Domain allowlists and credential protection (cookies stay hidden from the model) are built in. Install via pnpm and mount under agent/extensions/ this week.
llama.cpp now gives local agents a scoped working directory per conversation
llama.cpp build b10271 adds per-conversation working directory support: each agent session gets a scoped file path, persisted per tool call, with a directory picker. Path queries starting with / or ~ navigate directories rather than glob-match. Already running local tool-use agents on llama.cpp? Set the picker to your project root and test path scoping across multi-turn sessions.
Currents
3 items
Speed gaps are closing in layers. Across hardware generation, tool execution, and voice interaction, today's signals share a common shape: single-source benchmarks showing real gains that haven't yet survived replication or production conditions.
Language models draft trading chip code but miss latency targets
Early signal: language models can generate programmable-chip code for trading pipelines, but functional correctness tops out at 61% and timing degrades up to 13.7x on harder tasks. The 33-task benchmark is open-source. Replicated at higher correctness, this cuts hardware iteration cycles for quant engineers; unreplicated, the benchmark still sets the first credible baseline for a gap no one had measured.
A sidecar model predicts tool arguments in parallel, nearly quadrupling speed
Language models generate tool calls one token at a time, even when arguments are predictable. An arXiv preprint introduces OoO-Spec: a tiny sidecar predicts argument slots in parallel, hitting a mean 3.89x speedup across 21 tested configurations. Replicated, this reshapes agentic latency budgets; unreplicated, stress-test the sidecar pattern against your own tool schemas before committing.
OpenAI's voice AI drops the turn-taking model for continuous conversation
GPT-Live replaces push-to-talk with a turnless speech model that listens and responds simultaneously, cutting the pause that defines current voice assistants. OpenAI's blog describes the system but stops short of API or repository details. Benchmark your existing voice pipeline against this architecture before committing to your next design.