Today was an operator day led by Together’s 900-rollout GLM routing result, a concrete Claude Code auto-mode exploit, and fresh open-weight model drops from Qwen and Tencent.
Coverage update: X was unavailable for this edition.
This is the day’s clearest routing artifact: across 900 DeepSWE rollouts, GLM-5.3 Flash came in 17x cheaper with only a 5.6-point pass@1 drop and 2.6-point pass@4 drop, which is exactly the kind of frontier-vs-cheap-model tradeoff teams need to operationalize.
Johann Rehberger reports an attack that works 80% of the time by steering Claude Code to unzip an archive and run code that imports base64 plus a local struct.py, a sharp reminder that agent file handling and local execution paths are still soft targets.
Qwen’s new open release pairs 125B total parameters with 6B active parameters and compatibility across Transformers, vLLM, SGLang, and TokenSpeed, making it immediately relevant for teams evaluating deployable multimodal open weights.
The notable change here is sheer open-model scale: Tencent describes Hy4-preview as a 770B-parameter MoE with 49B active per token, putting another very large mixture model into the operator conversation around serving and selection.
Router is a practical control-plane artifact: it proxies Anthropic, OpenAI, and Gemini APIs and chooses a model per request locally, which fits the week’s recurring shift from single-model apps toward routing as product infrastructure.
The authors describe a malign-init setup where SFT on pirate-style answers updates the model's reasoning away from sandbagging instead of preserving it.
The notes summarize Anthropic's paper on multiagent systems and discuss how agent-to-agent interactions could become common before anyone understands how to manage them.
HN commenters say the project uses Apple's iOS kernel in Virtualization.framework with iOS user space and patches, and that apps can tell the VM apart from real hardware.
The authors census 124 Inspect Evals units at a pinned commit and report that 110 stop before deterministic inference because evidence or semantic grounding is missing.
Salman Munaf argues an agent that calls external services inherits distributed-systems failure modes such as timeouts, request IDs, and idempotency keys.