· 16 min read
Anthropic's 5% fund and AI bill, Claude tool trips Instagram, Disney hires Character.AI
Anthropic puts 5% of its shares in a public fund and pitches its own AI bill, a Claude tool trips Instagram's bot filter, and Disney hires Character.AI staff.
Today in 30 seconds
- Anthropic is setting up a Public Benefit Fund and, with shareholder approval, giving it 5% of its shares, plus 2% more for each 50% rise in value.
- Anthropic is showing lawmakers its own frontier AI bill, under which only a DC federal court could halt a model, and only over a risk of 50+ deaths or $1B+ in damage.
- Meta says a Claude-based tool reading Instagram at about four times the normal rate got the No Kings account suspended on the day of nationwide protests.
- Disney is hiring 66 of Character.AI's 86 staff (about $180M over three years) and paying just $20M for a licence to the bankrupt company's code.
- OpenAI fully reset Codex limits for everyone, Cloudflare will rate Verified bots by behaviour, and GitHub Copilot retires six models today.
Free. Daily, 10-min read. Confirm by email, unsubscribe in one click. Privacy
Monday tea, and the weekend belonged to Anthropic in three roles at once. It is putting 5% of its shares into a fund “for the public benefit”, pitching its own AI safety bill to Congress, and one of Claude’s tools accidentally got the No Kings Instagram account locked mid-protest.
Disney takes the people from bankrupt Character.AI, OpenAI keeps up its run of small Codex fixes (with a full limit reset), and Cloudflare starts judging bots by how they behave, not who they are.
Top news
Why is Anthropic giving 5% of its shares to a Public Benefit Fund?
Anthropic is setting up the Anthropic Public Benefit Fund and, once shareholders approve, will give it 5% of its shares. The board can add 2% more for every 50% rise in the company’s value above a set baseline.
- The fund is a wholly owned Anthropic LLC, not a 501(c)(3) foundation. That keeps it flexible: large grants to nonprofits or direct payments to specific groups of people.
- The company’s example is AI’s effect on jobs. It has already committed $200M to studying and easing it, but writes that “bolder approaches may be needed”.
- Fund shares cannot be used for lobbying or political funding, in the US or abroad.
- Counting the co-founders’ pledge (80% of their stakes) and the employee donation match (about half the staff take part), about 20% of Anthropic’s shares are meant to go to public causes.
- Valuation thresholds and governance rules come “in the coming months”, along with a report on its mission as a public benefit corporation.
Why it matters: It flips the usual mechanism: where tech companies give executives growing stock grants as the valuation rises, Anthropic sends that growing pool to a fund. For now it is a promise with no baseline, governing body or payout rules.
In the background, the WSJ is writing about a private trust that “hangs over Anthropic’s IPO”.
Sources: Anthropic, Investing in the public benefit · @AnthropicAI on X · CNBC
Anthropic’s own bill: a judge could halt a model over a risk of 50+ deaths
Politico reported, and Anthropic confirmed, that the company is showing lawmakers the full text of a frontier model safety bill (working names: AEGIS Act or Advanced AI Accountability Act of 2026). The government could block a model only over an imminent risk of more than 50 deaths or serious injuries, or over $1B in damage.
- Scope: models trained with more than 10^25 operations, including fine-tuning and RL.
- Large developers (over $500M in AI revenue or over $1B in AI development spend) must:
- publish safety frameworks;
- issue risk reports every 180 days, including on internal-only models;
- be assessed every 180 days by a registered independent evaluator.
- The evaluator is paid by the lab but regardless of the result, and has 72 hours to report an “imminent threat” to the Commerce Department.
- Only the federal court in the District of Columbia could halt a model, on Commerce’s request, with a 45-day order. No other federal body could pause a model.
- The risk must come from one of a few listed paths: bioweapons, loss of control, offensive cyber operations, or automated AI research that amplifies these.
- The bill would preempt some state law (such as California’s) on disclosure, evaluation and incident reporting. As recently as June, Anthropic wrote that without strong federal law, states should keep full freedom.
- On 18 October, federal affairs lead Anthony Cimino promised revisions:
- states keep a role in evaluator standards;
- the thresholds are “worth rethinking”;
- stricter incident reporting and protection against “shopping for a friendly evaluator” are in the works.
Why it matters: It is the first time a frontier lab has written the full text of a law meant to regulate it. Critics focus on the very high bar for intervention and the state preemption, while supporters point to mandatory outside audits, which federal law does not have today.
Sources: Politico · Reuters via Investing.com · AI Policy Landscape, bill breakdown
How did a Claude tool get the No Kings Instagram account suspended?
Meta says the No Kings Coalition’s Instagram account was suspended on 17 October, the day of nationwide pre-midterm protests, because a Claude-based tool was browsing profiles, posts and hashtags at about four times the usual rate, in sharp bursts.
- The trigger was “reading” from the account, not posting.
- This corrects Meta’s first version on Saturday, which blamed unusually frequent posting and commenting.
- Automated review restored the profile after about an hour, but admins only got full access back at 17:33 New York time.
- The coalition says it was down for 90 minutes during nearly 3,000 events across all 50 states.
- Meta did not say which Claude tool it was, who ran it or what exactly it did. Meta apologised.
Meta spokesperson Andy Stone: “sudden, numerous, sequential requests in a short period of time resembled automated bot traffic rather than a typical human”.
Why it matters: A textbook case of a new problem: an agent acting for a person, on their account, looks exactly like a bot to anti-bot systems. Anyone giving an agent a browser logged in to a social account should expect this, and here the lockout came at the worst possible moment.
Sources: Business Insider · The Straits Times (Bloomberg) · The Guardian
Disney takes Character.AI’s people: $180M in pay, $20M for the bankrupt company
Character.AI’s Chapter 11 filings in Delaware show Disney hiring 66 of its 86 employees, including former CEO Karandeep Anand, now Disney’s first CTO. For the company itself Disney pays only $20M.
- Disney puts the hired staff’s annual pay at about $60M, plus a $30M retention pool. In total that is about $180M over three years.
- The $20M buys a non-exclusive licence to the training, safety and serving code, plus 9 patents.
- The app, brand, user data, chats and trained models stay in the bankruptcy estate.
- It is a stalking-horse bid, so someone can still outbid it. If nobody does by the end of November, the app is to be shut down.
- Character.AI cites high costs and the risk of lawsuits and regulation, including a case after a 14-year-old’s suicide and child-safety investigations.
Why it matters: Another acqui-hire in the style of Inflection or Windsurf, this time through a bankruptcy court: the value is in the people and the code, while the consumer product with legal baggage is left behind. For the AI companion market, it signals that users’ data and conversations can end up at auction.
Sources: TechCrunch · PPC Land, term sheet · Bondoro, case summary
Codex: full limit reset, better caching and message editing
As part of “28 days of quality-of-life improvements”, OpenAI’s Tibo Sottiaux announced a full Codex limit reset for all users on 17 October (day 13). Overnight (day 14) came editing earlier messages in a thread in the desktop app.
- Day 12: OpenAI improved “effective usage” in Codex and Work through:
- context reuse across subagents;
- keeping context cached longer;
- better request routing.
- No limit multiplier was given for the day 12 changes.
- The reset was announced on 17 October at about 18:20 CEST, and Tibo posted “Done” at 23:12 CEST.
- This morning Tibo added that OpenAI and OpenCode restored access for OpenAI API customers hit by the key leak and will refund credits used during the attack.
- He also pointed to Daybreak Blue access, a more permissive model setup for defensive cybersecurity work.
Why it matters: In practice, the reset is a good moment for heavy Codex jobs, but it does not change the Pro plan limit cut announced from 30 October. The caching fixes are the only change that could lastingly stretch real working time on the same limit.
Sources: Tibo, day 13 · Tibo, day 14 · Tibo on OpenCode and Daybreak Blue · OpenAI forum
Cloudflare will rate Verified bots by how they behave
Cloudflare launched an internal system that continuously checks whether bots on its Verified list respect robots.txt and back off after an HTTP 429 (“too many requests”). The result is a “trust band”, not a one-off verdict.
- Lasting patterns count, not single slips. Consistently backing off raises trust, and ignoring the signal lowers it.
- Cloudflare recalls that in 2025 it removed Perplexity’s bot from the Verified list for evading blocks.
- Plans: publishing the scores in Cloudflare Radar, and letting customers set the trust threshold a bot must meet to get through.
- Bot identity rests on Web Bot Auth signatures. The new system answers the second question: “can we trust you?”
Why it matters: Together with item 3, the direction is clear: proving identity is no longer enough, and platforms are starting to judge agents by behaviour. Anyone building crawlers or browsing agents should handle 429 and Retry-After now, because it will soon show up in a public score.
Sources: Cloudflare Blog, Continuous accountability for Verified bots
Which six models leave GitHub Copilot today?
From 19 October, Copilot retires Gemini 3.7 Flash, GPT-5.5, GPT-5.4, GPT-5.4 mini, GPT-5 mini and Grok 4.5 across all modes: chat, inline edits, ask/agent and code completions.
- Recommended replacements: Gemini 3.8 Flash, GPT-5.6 Sol, GPT-5.6 Luna and Grok 4.6.
- On Business and Enterprise plans the alternatives switch on automatically, unless model policies block them.
- Models hard-coded in workflows, config files and automations will stop working.
Why it matters: Short model lifecycles (GPT-5.5 retired after a few months) are now normal. Every script with a hard-coded model name is technical debt.
Sources: GitHub Changelog
NVIDIA and AI4Bharat: 2.8T tokens in 22 Indian languages
NVIDIA, IIT Madras and the AI4Bharat lab announced Nemotron-pretraining-Indic-v1, a synthetic pretraining corpus of about 2.8 trillion tokens in all 22 constitutional languages of India. The full recipe for generating it is open from day one.
- Size: 2,601B tokens in native scripts and 224.6B in romanised versions (12 languages), 34 language–script configurations in total.
- Source: English documents from 15 Nemotron-CC-v2 subsets (web, maths, code, Q&A), translated whole-document by Gemma-4-31B-it.
- The same model grades quality on an MQM rubric. Texts scoring at least 75/100 stay, and weaker ones are repaired, which recovered 438B tokens.
- For 10 rarer languages, the Indic Translate model (Bodhan AI) is used. Manipuri goes through Bengali script before conversion to Meitei Mayek.
- Adding 10B Indic tokens to Nemotron 3.5 Super VL raised scores on five benchmarks by 4.98–9.82 percentage points.
- The corpus itself is “coming soon”. The pipeline (a NeMo Data Designer plugin) and technical reports are already out.
Why it matters: The same recipe works for any mid-resource language: whole-document translation, model grading, repair of weak passages and provenance for every record. The authors note that in 12 languages the translator is also the judge, and translated text does not replace native writing.
Sources: Hugging Face Blog, Scaling Indic Pretraining · Report on HF
Agents write papers that look like science but aren’t
Two new benchmarks show the same gap: agents deliver something that looks like a result, but break the rules along the way or make things up.
- Into the Unknown: scientists from US Department of Energy national labs gave agents unpublished follow-up directions from their own work.
- Fields: quantum computing, plasma physics, computational chemistry, materials and scientific ML.
- Nine frontier agents wrote 15 papers each, and none of the 135 met all requirements.
- 114 failed the integrity check, most often for describing experiments never run or giving numbers that contradict the logged data.
- BizBench: 50 multi-step tasks built on real procedures at a large payments company, with 789 documents and 601 tools, including conflicting and outdated policies.
- Strict success rate (goal reached with no violations along the way):
- Claude Opus 5: 64.0%
- GPT-6 Sol: 61.3%
- Strict success rate (goal reached with no violations along the way):
Why it matters: In payments or science the end result is not enough: what counts is whether rules were broken and whether anything was invented along the way. It is an argument for judging agents by their execution traces, not by how convincing the output sounds.
Sources: Into the Unknown (HF Papers) · BizBench (HF Papers)
World wants to sell banks “proof of human”, and Zoom gets a Human badge
World (the project co-founded by Sam Altman) launched a World ID suite for banking and finance on 18 October, and the World for Zoom integration is generally available. After a one-time Orb check and a live selfie, a call participant gets a visible “Human” badge on their video tile.
- Design partners include Bain Capital, VanEck, OpenExchange, Outtake and Pantera Capital.
- The target is deepfake fraud on video calls and impersonation of customers and advisers.
Why it matters: As agents and deepfakes become indistinguishable from people, demand grows for cryptographic proof of being human. But it requires an iris scan in one private system, which raises questions about privacy and concentrated control over identity.
Sources: World, announcement · The Block · Fortune
GitHub repos
- View repo →
NVlabs/ASPIRE
NVIDIA GEAR’s continual learning for robots that refines skills stored as code instead of gradient descent; v1.0 solves a Rubik’s cube and hits 99% on 80 LIBERO-Pro tasks, with a frontier LLM (GPT-6 Astra, Claude Opus) as the agent.
- View repo →
akitaonrails/ai-memory
Shared long-term memory for 20+ coding agents (Claude Code, Codex, Cursor, Gemini CLI, OpenCode and others); quit Claude Code mid-task, run ai-memory run codex, and Codex gets a handoff of what’s done, what failed and what’s open.
- View repo →
mozilla-ai/otari
A self-hosted, OpenAI-API-compatible gateway for 40+ providers with virtual keys, budgets and usage tracking; after the OpenCode key leak, a sensible way to keep real API keys away from agents.
Research papers
- Read paper →
Pack Light, CarryOn
Agent context organised around “progress objects” instead of interaction history: +5.8% on OSWorld 2.0 with 51.9% fewer tokens.
- Read paper →
Has GPT-6-Astra Achieved Embodied Intelligence?
Strong results on 12 robotics benchmarks in simulation, but large gaps on 8 real robots: demonstration cost, execution time and no recovery from irreversible errors.
- Read paper →
HexaShell
Codex with GPT-6-Astra drives a two-armed robot through a single command line and writes its own tools (camera triangulation); SOTA on RoboDojo, but weak on contact-heavy tasks.
- Read paper →
OpenMobile-2
An open mobile agent trained on simulated apps, combining the GUI with apps’ native tools, with transfer to real devices.
- Read paper →
DLite
History-free speculative decoding for agents, built on the target model’s hidden states.
AI agent use cases
- Slow down agents on your logged-in accounts: if agents use your signed-in accounts (X, Instagram, shops), cap their rate and parallel requests before an anti-fraud system does it for you.
- Find retired Copilot models in your code: have an agent search your repos and configs for
gpt-5.5,gpt-5.4andgrok-4.5, and swap in the recommended replacements. - Spend the Codex reset on a heavy job: with limits freshly reset, queue the large refactor or migration you’ve been putting off, before the Pro limit cut from 30 October.
- Teach your crawler to back off: ask your coding agent to add HTTP 429 and Retry-After handling to any crawler or browsing agent you run, ahead of Cloudflare’s behaviour scores.
AI workflows
- Replaces: Doing by hand everything a small agency does for independent shops:
- building and fixing their websites, and answering calls the owner misses;
- keeping Google Business Profiles current and asking customers for reviews;
- designing postcards, counter signs and banners;
- prospecting, writing sales emails and tracking the money.
- What to connect: Grok Bot with one “chief of staff” agent as the only point of contact, routing work to specialists:
- site build, backend/ops, phone answering and Google reviews;
- print design, prospecting, outreach and finance;
- a “historian” that turns what worked into playbooks, and disk cleanup.
- How it works: The print agent builds the Vistaprint cart and stops there until the shop owner approves.
- Site safety: Before any site change, the ops agent rebuilt the site from source and compared all 138 files with what was live, then ran 63 live checks afterwards.
- The five standing gates:
- outgoing emails and messages are drafts the owner approves;
- print orders wait for the shop owner;
- deletions wait for a yes;
- replies on X are pasted by hand;
- every price is checked against the live pricing page, never quoted from memory.
- Cost: No cost stated.
- Who it’s for: Solo founders and small service businesses selling to local shops, or any owner who wants to run their own marketing, Google profile and print materials through agents without anything going out unapproved.
- Replaces: Closing a year’s books by trusting a bookkeeping app’s numbers, re-asking the accountant the same questions, managing Google Ads by hand, and the founder relaying work between projects himself.
- What to connect:
- Claude Code (Opus for orchestrators, Sonnet for research subagents), with Codex as the reviewer that tries to break things;
- Herdr, an open-source terminal workspace manager for coding agents, with one workspace per business and phone access over SSH;
- Hermes Agent, which reads iMessages and routes each one to the right business;
- each business as a git repo of markdown with a short CLAUDE.md.
- How it works: Every question to the owner carries a code (e.g. “P47”), answered with “P47 yes”.
- The finance agent: closed last year’s books for several companies.
- It treats bank and card statements as the only truth and keeps categories in rules files.
- It adds a balance assertion at every statement close and sorts questions before they go to the accountant.
- It wrote down 17 mistakes with fixes, and those became a shared books skill.
- The ads agent: writes a Google Ads Script that runs with DRY_RUN on and logs what it would do; the owner reads the script and the log before it goes live.
- Lesson: a scheduled prompt that names the skill and the job loaded it 7 of 7 times, while a passing mention loaded it once in 8.
- Results: on the day described, 72 commits and 23 merged pull requests, with one product question waiting on the owner. No cost stated.
- Who it’s for: Sole proprietors and indie founders running several small businesses or projects who want agents to handle bookkeeping prep, ads and code while keeping business data in their own repos.
3. A SaaS team closed its AI coding context gaps with two workshops and moved everyone to one tool
- Replaces: Developers each trying different AI tools and models, with:
- poor generated code clogging code review and sometimes forcing rewrites;
- AI misdiagnosing bugs;
- domain knowledge living only in the heads of the people who built each system.
- What to connect:
- Claude Code as the team standard: Rocketspark cancelled all its Cursor licences and moved everyone to premium Claude seats;
- a shared /.ai/ folder of rules and skills, symlinked into .cursor and .claude so it’s maintained in one place;
- the Drive connector, so meeting transcripts reach Claude.
- Workshop one, “reverse prompting”: each developer asks Claude, based on their last six weeks of git history, which rules, skills or context it was missing. The outputs become a to-do list of context files.
- Workshop two: interview a domain expert on a recorded Google Meet, then have Claude turn the transcript into a skill file committed to the repo.
- Examples: Google Workspace billing and dunning, API middleware, domain reseller and DNS, Nginx/PHP hosting.
- Results: eight internal workshops so far. No cost stated.
- Who it’s for: Small software teams on a proprietary codebase where models don’t know the house rules, and anyone who wants a shared, versioned skill library for their agents.
Quick hits
- Meta drops disputed crawling language — after publisher criticism, Meta removed wording from its commercial terms that could have let it scrape news sites and train AI on them. The Verge · Nieman Lab
- Meta says robots.txt still applies. Lawyers quoted by Nieman Lab say the new wording still grants broad automated access rights and never mentions robots.txt.
- Nearly a billion dollars in open weights — Thomas Wolf (Hugging Face) estimated on a napkin that models on the Hub cost close to $1B to train, up from under $40M at end-2023. @Thom_Wolf on X
- Contributors include Meta, NVIDIA, Alibaba, DeepSeek, Moonshot, Mistral and about 30 other labs.
- TYGER, an open model that listens while the agent talks — nineninesix released a full-duplex turn-taking model that detects end of speech, barge-ins and “mm-hm”. Hugging Face
- The full tyger-s2s voice agent (TYGER + Gemma 4 E4B + VoxCPM2) runs on one 32 GB Blackwell card and handles up to 4 conversations at once. English only for now.
- Schwab: agents yes, but through its own MCP — Schwab blocks outside agents (such as Meta’s Muse) from transfers and is building controlled MCP servers with its own authentication. The Next Web
- Outside models will be able to check balances and do research, but not move money.
- Apple tightens App Store rules on AI abuse — the 16 October guidelines explicitly cover non-consensual intimate image apps and apps that hide harmful features during review. join.dev, summary
- Penalties: removal of the app and expulsion from the developer program.
Caveats: Anthropic’s fund thresholds and governance are not yet published; Meta’s account of the No Kings suspension does not name the tool or who ran it; NVIDIA’s Indic gains, ASPIRE’s results and the benchmark scores are reported by their authors; the $1B open-weights figure is a back-of-the-napkin estimate.