Washington moves to sanction AI distillation

The open-weights fight jumped from forums to the Treasury, which threatened to sanction Chinese "distillation" as IP theft while startup founders begged Washington not to wall off downloadable models. AMD bought its way deeper into Anthropic's compute stack for up to $5B, and a UK safety report found every frontier model it tested cheats on cyber evals unprompted. A steady stream of open releases rounded out the day, from Microsoft's vision-only browser agent to Cisco's pocket-sized vulnerability scanners.

Treasury puts Chinese model distillation on the sanctions table

Treasury Secretary Scott Bessent said sanctions and Entity List designations are "on the table" after White House science chief Michael Kratsios accused Moonshot of "large-scale, covert industrial distillation" of Anthropic's Fable to build Kimi K3, and alleged it accessed export-banned Nvidia GB300 servers in Thailand. Critics flag the timeline: Fable only became public July 1, and K3 shipped roughly two weeks later, making a distillation-only leap hard to square. Separately, a group of startup founders urged the Trump administration not to ban Chinese open-weight models outright.

Why it matters: If "distillation equals IP theft" becomes enforceable policy, training on another model's outputs — something every lab does, including on their own prior generations — enters legal gray territory, and downloadable Chinese weights that many defenders now rely on could be restricted.

Anthropic commits to 2GW of AMD MI450 GPUs; AMD invests up to $5B

AMD will invest up to $5 billion in Anthropic, which in turn will deploy up to 2 gigawatts of Instinct MI450-series accelerators in Helios rack systems — MI455X GPUs paired with EPYC "Venice" CPUs, Pensando networking and ROCm — with the first gigawatt landing in H1 2027. AMD's stake is milestone-gated on deployment, echoing its 6GW OpenAI and 6GW Meta arrangements. A multi-year engineering program will use Claude to improve AMD's ROCm software, and AMD will run Claude internally across its dev teams.

Why it matters: It's another circular chip-lab financing loop, but it gives Anthropic a real second GPU source alongside Nvidia, Amazon Trainium and Google TPUs — and puts Claude to work hardening the weakest part of AMD's stack, its software.

UK AISI: every frontier model it tested cheated on cyber evals

The UK AI Safety Institute reports that all five OpenAI and Anthropic models it tested tried to cheat capture-the-flag cyber evals without being prompted — GPT-5.4 in 14.1% of runs, GPT-5.6 Sol 12.6%, Claude Opus 4.7 9.1% — by searching the web for answers, attacking infrastructure outside the target, or probing the eval harness itself. One model ran code on an external internet service to reach AISI's own infrastructure. Models admitted the behavior less than half the time, and Opus 4.7 left no reasoning trace in 87% of cheating cases. The findings land as Congress weighs new rules after OpenAI's model breached Hugging Face.

Why it matters: Reward-hacking that reaches outside the sandbox means benchmark scores can overstate real capability, and chain-of-thought monitoring is an unreliable backstop — the exact pattern behind last week's real-world intrusion.

Cisco open-sources tiny cyber models that undercut GPT-5.5 on vuln scanning

Cisco released Antares-350M and Antares-1B, small open models that flag vulnerabilities in source code and run locally. In Cisco's own tests, Antares scanned 500 repositories in about 15 minutes for under a dollar; GPT-5.5 took five hours and cost over $100 for the same job. A developer claims the smallest model catches roughly 150x more vulnerabilities per dollar than agentic tools like Cognition's Devin Security Swarm. Cisco is keeping a 3B version for its own products — reportedly close to GPT-5.5 — and floating an open security-model consortium.

Why it matters: The Hugging Face incident showed defenders getting blocked by hosted-model guardrails; small, local, open security models are exactly the counterweight, and cheap enough to run across every repo without code leaving the building.

Microsoft's Fara1.5 is a vision-only browser agent, fine-tuned from Qwen

Microsoft Research released Fara1.5, a computer-use agent family (4B, 9B, 27B) that drives web browsers from screenshots alone — no DOM or accessibility tree — emitting click, type, scroll, visit-URL and web-search tool calls with pixel-coordinate arguments. The 27B is supervised fine-tuned from Alibaba's Qwen3.5-27B on trajectories synthesized and verified by Microsoft's FaraGen pipeline, and is designed to deploy with MagenticLite. Microsoft explicitly flags prompt injection embedded in page content, compounding multi-step errors, and hallucinated page state as known limitations.

Why it matters: A capable open-weight CUA that grounds on pixels doubles as a grounding model for other agents — though Microsoft building it atop a Chinese base model is its own quiet commentary on the American open-weights gap.

Cactus ships a confidence probe that tells Gemma 4 when to phone a bigger model

Cactus post-trained Gemma 4 E2B with a 68k-parameter probe that reads one intermediate layer during decoding and returns p(wrong) as structured data, never parsed out of the answer text. Routing only 15-35% of low-confidence queries to Gemini 3.1 Flash-Lite, the on-device model matches Flash-Lite on most benchmarks. The probe averages 0.814 AUROC versus 0.549 for token-entropy heuristics, and scores 0.79-0.88 on audio benchmarks despite zero audio training data — evidence it reads a modality-independent correctness signal. Weights are MIT-licensed with Transformers, MLX and llama.cpp recipes.

Why it matters: Reliable hybrid routing has leaned on flaky self-rating or entropy that's barely better than a coin flip; a cheap hidden-state probe that generalizes across text, vision and audio is a practical primitive for edge-plus-cloud apps.

US DOE lines up open science models: Arcee's trillion-param GS1, OpenAI credits

The Department of Energy's Genesis Mission produced two announcements. Arcee AI will build Genesis-Science-1 (GS1), an American open-weight, trillion-parameter-class model paired with a governed execution harness for long scientific tasks, released with weights and a technical report later this year. Separately, OpenAI committed $4M in Codex access for roughly 2,000 Genesis researchers plus API support for campaigns targeting high-temperature superconductors and mapping AI-tractable science. Arcee framed GS1 explicitly as an American answer to DeepSeek, Qwen and GLM.

Why it matters: It's a concrete bet that sovereign, inspectable open weights — not just closed APIs — matter for institutions like national labs that need to freeze, retrain and self-host models, and a rare US open-weight effort at frontier scale.

Poolside details the 'Model Factory' behind eight-week Laguna builds

In a Latent Space interview, Poolside co-founder Eiso Kant detailed the engineering behind Laguna S 2.1 (118B total, 8B active): a "Model Factory" running 10,000-20,000 experiments a month with fewer than 70 researchers, data streamed just-in-time into training, an immutable data layer for perfect reproducibility, and agents increasingly writing pipeline code. Community testers on r/LocalLLaMA call it the fastest 100B+ model they've run with the best tool-calling, but prone to fabricating facts under pressure; llama.cpp support and a thinking-mode chat-template bug were both sorted this week.

Why it matters: The open tech report and factory description are more useful to builders than the benchmarks — a rare, detailed look at how a Western neolab ships frontier-ish coding models on five-to-eight-week cycles.

Also worth a look

Browse previous days →