Anthropic's red-teamer beats bounties, agents as insiders, OpenAI's COBOL leap

Anthropic updates its Frontier Safety Roadmap: automated red-teaming done early

On 19 October Anthropic marked several roadmap goals as done, including automated red-teaming ahead of its 1 January 2027 target. It also added datacenter and platform security goals and set deadlines for two policy proposals.

• Automated red-teaming: Anthropic compared its automated system with the bug bounties it ran against its bioweapons classifiers (20 April to 11 September 2026).
  • Same 8 questions and 3 generations of production classifiers.
  • It matched or beat the best human submission in all 24 pairs and won 23.
  • It took 24–48 hours instead of weeks or months. A longer write-up is promised.
• “Moonshot R&D” projects: a prototype of key workflows under extreme security practices, plus work on what air-gapped operation would require. It plans to run inference in isolated environments “in the near future.”
• Inference verification (renamed from “provable inference”): a prototype on production inference checks that outputs come from a specific set of weights. Signing now covers all internal token traffic and has already caught one rare, benign integrity glitch.
• New goals: datacenter physical security and platform security, as its own datacenters and bare-metal deployments ramp up.
• New policy deliverables:
  • an embedded third-party evaluator proposal, due 15 December 2026;
  • a framework for “targeting the pace of AI development”, due 15 January 2027.
• The public version is redacted. The full version goes to all full-time staff, the board and the Long-Term Benefit Trust.

Why it matters: This is the first time a frontier lab has said an AI red-teamer measurably beat paid human jailbreakers on its own safeguards. The “pace of AI development” framework is the item to watch: Anthropic’s first commitment to propose how fast the field should go.

Sources: Anthropic Frontier Safety Roadmap (updates section)

Microsoft: treat AI agents like insiders, and keep the controls outside the model

Microsoft extended Project Perception with Guardian Agents, Dynamic Permissions, Dynamic Agent Risk and Dynamic Conditional Access. Its security chief said plainly that “frontier models, regardless of their origin, cannot be trusted.”

• Discovery: 35 more types of local agents are now detected, for 60 in total, including Claude Code, OpenAI Codex and GitHub Copilot.
• Discovered agents can get their own identity in Microsoft Entra Agent ID, separate from the person who runs them.
• Dynamic Permissions: organisation policy sets the outer limit, so an agent never gets authority its user doesn’t have. Inside that, permissions are task-scoped, time-bound, and shrink when the task changes or ends.
• High-impact actions can require cryptographically provable human approval.
• Dynamic Agent Risk and Conditional Access: combine identity, data, endpoint, network and runtime signals and check whether the agent drifts from its intent. The response is graded.
• Microsoft’s example: an expense agent hits a prompt injection. It keeps read access, loses write and approve, and gets isolated if risk keeps rising.
• Guardian Agents and Playbooks carry out containment at machine speed, while people set policy and approval limits.

Satya Nadella: “separate the supply of intelligence from the authority over it.”

• TechCrunch notes the conflict of interest: Microsoft has invested in both OpenAI and Anthropic and wants to sell the monitoring layer.

Why it matters: This is the clearest enterprise blueprint so far for agent least-privilege. It is also the pattern a bot fleet needs: scoped tokens, approval gates for writes, and a kill switch outside the agent.

Sources: Microsoft Security blog · TechCrunch

OpenAI: COBOL migration jumps from 5.4% to 86.6% in one model generation

OpenAI published two new evals for “low-resource” programming languages, and GPT-6.1 Sol reaches 86.6–97.9% on COBOL migration. GPT-6 Astra averages 87.4% on MultiLangBench.

• MultiLangBench: build a SQLite-compatible database engine from scratch in one of 20 languages, graded with tests adapted from SQLite’s own suite.
• MultiLangBench scores, GPT-6 Astra at max reasoning (GPT-5.6 Sol in brackets where given):
  • Average: 87.4% (26.8%)
  • COBOL: 72.1% (10.9%), still the hardest
  • Fortran: 83.5% (21.4%)
  • OCaml: 85.8% (25.6%)
  • Visual Basic: 89.4% (27.5%)
• GPT-6 Luna: 40.3% at about 78% lower estimated API cost, per a secondary write-up of OpenAI’s figures.
  • About $0.77 per sample, against $3.48.
• COBOL migration (to C++, Java, Kotlin, Python or Rust, with output parity required), GPT-6.1 Sol:
  • Low effort: 86.6% (5.4% for GPT-5.6 Sol), at 39% lower cost
  • Higher effort: 97.9%, nearly saturating the eval
• OpenAI cites COBOL behind more than 40% of online banking systems and 95% of ATM transactions. The setup and per-language results are reported to be on GitHub.

Why it matters: Legacy modernisation is a huge, boring and very well-paid market. A near-saturated, behaviour-preserving migration eval is the kind of evidence that gets banks and governments to sign contracts.

Sources: OpenAI, “Advancing coding in low-resource programming languages” · @OpenAI · explainx write-up

TorchNeuron makes Trainium a native PyTorch device, with Hugging Face support on day one

Amazon’s TorchNeuron enters public beta today (20 October), and Transformers, Diffusers, Accelerate, PEFT and TRL run on Trainium directly with device_map="neuron".

• TorchNeuron is a PyTorch backend with eager mode, torch.compile, and native distributed APIs (DTensor, FSDP2, tensor parallelism).
• It replaces the older PyTorch/XLA route, which meant lazy tensors, static shapes and a recompile at every graph break.
• Install with pip install torch-neuronx. Hugging Face now recommends its libraries directly instead of Optimum Neuron.
• Coverage of the top 100 text-generation architectures out of the box:
  • TorchNeuron: 89%
  • Optimum Neuron v0.4.5: 46%
• Amazon says it will push changes into upstream PyTorch to make it less Nvidia-centric. AWS cites Deepgram processing 70% more audio per dollar.

Why it matters: CUDA’s real moat is that everything just runs on it. “Change one line and it runs on Trainium” goes straight at that, and it matters for anyone weighing AWS against GPU neoclouds on price.

Sources: Hugging Face blog · TechCrunch

Anthropic and Nscale reportedly near another $45B compute deal, and Tenstorrent raises $1.5B

Anthropic is reportedly close to a second multibillion-dollar compute deal with Nscale, worth about $45B. Inference-chip startup Tenstorrent raised $1.5B at a $6.2B valuation, even as AI stocks wobble.

• Nscale × Anthropic: Bloomberg and the FT report the talks. Sources say it isn’t final and details could change.
• Bloomberg also reports investor pushback on Nscale’s proposed IPO valuation of about $30B.
• Tenstorrent: the round was led by Trace Capital and Innovation X, with Fidelity, T. Rowe Price, SanDisk and others.
  • Five months ago Intel and Qualcomm reportedly showed acquisition interest at up to about $5B.
  • CEO Jim Keller says it stayed independent after showing its Galaxy servers can run DeepSeek models.
  • The money goes to chips for serving open-weight models and video generation.
• Context: Monday’s coverage (Reuters, The Verge, and CNBC quoting a Gartner analyst) focused on how AI capex is financed, including CoreWeave’s debt and neocloud returns, ahead of Meta’s earnings.

Why it matters: Demand for Anthropic compute is still rising while markets question who pays for the build-out. Tenstorrent’s pitch, chips made for open-weight inference, is a direct bet that DeepSeek-style open models stay competitive.

Sources: TechCrunch on Nscale · TechCrunch on Tenstorrent

Next wave on deck: an Anthropic model that “reads intentions,” Gemini 4 Carbon, OpenAI Terra and “Aurora”

The Information reports all three big labs have new models due within weeks. Separately, three OpenAI “aurora” image models showed up in blind arena tests.

• Anthropic: an unnamed model said to be better at reasoning and intuition, especially at inferring what users actually want. No name, date or price yet.
  • A tester said it doesn’t just fix the bug you describe; it finds the class of bugs behind it and asks whether to fix them all.
• Google: Gemini 4 Carbon, the successor to Gemini 4 Argon.
• OpenAI: a new, cheaper Terra-family model expected to beat GPT-6.1 Sol on price-performance.
  • A gpt-6.1-terra id reportedly appeared in Microsoft’s dotnet/efcore eval configs (merged 16 October). That comes from a secondary report, and an id in a config is not a launch.
• Aurora: aurora-red-alpha, -green-alpha and -blue-alpha briefly appeared in OpenAI’s API and in arena tests, possibly as GPT Image 3. Red was faster but lower quality; green slower but better looking.
• @testingcatalog notes users reporting that Opus 5.5 sometimes seems to route to a stronger model, plus new “Fable 5.5” traces. Both are unconfirmed.

Why it matters: If you’re planning model choices for November, expect prices to move again. According to the coverage, the labs now compete on cost and reliability at each tier, not just top scores.

Sources: The Information (paywalled) · AIReport summary · TLDR AI on Aurora · @testingcatalog

FLUX 3 Max: top-tier image-to-video quality, a 10-second clip in about 11 seconds

fal and Black Forest Labs released FLUX 3 Max, a post-trained FLUX 3 video model. It is tied for first in Artificial Analysis’s preliminary image-to-video arena and claims to be 22× faster than Seedance 2.5 at the same rating.

• Quality: 1,139 Elo across 4,868 votes, up from 1,089 for the original FLUX 3. Confidence intervals overlap with the other top models.
• Speed, time for a 10-second video:
  • FLUX 3 Max: 10.95 s
  • Seedance 2.5: 277.8 s
  • Base FLUX 3: 126.4 s (11.5× slower)
• Modes: text-to-video, image-to-video (with an optional end frame) and keyframes. Output is 720p.
• Price, per second of output, no subscription:
  • List: $0.17
  • Until 7 November: $0.0425 (75% off)

Why it matters: At about 11 seconds per clip you can try ten versions of a shot in the time one used to take. That changes how you iterate on short social videos, like the daily Morning Tokens clips.

Sources: PR Newswire · fal FLUX 3 Max page · fal prompting guide · VentureBeat

Hugging Face’s policy chief: embedded evaluators “won’t be an easy solution”

Irene Solaiman says the evaluation science isn’t ready to carry the weight labs are putting on embedded third-party evaluators instead of active regulation. Anthropic’s evaluator proposal is now due 15 December.

• Reproducibility depends on access to the model:

“this is where open weights come in in a big way.”

• Evals “get ineffective relatively quickly” and can’t be compared well with each other.
• The qualifications for “who is an effective evaluator across what tasks need a lot more standardization.”
• The unit being tested is moving from the model to the whole system: model, harness and agent. A weaker model in a better harness can beat a frontier model.
• “Agentic evals are really hard and really expensive.”

Why it matters: Evaluator-based oversight is becoming the industry’s preferred alternative to regulation, and an open-weights voice says the foundations are shaky. Today’s harness-optimisation papers (below) support the point that harness and model can’t be scored separately.

Sources: TechCrunch

UK: FCA publishes AI good and poor practice, and science advisers call for an AI sovereignty plan

The UK’s financial regulator showed how existing rules already apply to machine learning, generative AI and agentic AI. The government’s science council published its advice on keeping UK “agency” in AI.

• FCA (19 October): examples drawn from supervision, AI Live Testing and the Supercharged Sandbox, covering consumer outcomes, governance and operational resilience.
• They are mapped to existing rules: Principles for Businesses, Consumer Duty, the senior-management and systems rules, outsourcing and critical third parties.
• The FCA says explicitly that this creates no new requirements.
• Council for Science and Technology: a July letter to the AI minister, published 19 October. It recommends:
  • an AI Sovereignty Plan;
  • clearer governance and investment in domestic foundations;
  • trusted access to leading models alongside selected UK capabilities.

Why it matters: The approach is “the rules you already have cover AI,” with examples, rather than an AI Act. It is a useful template for any regulated business, and a contrast with the EU.

Sources: FCA, AI in financial services · GOV.UK, AI sovereignty letter

Stripe survey: 57% of SaaS platforms fear losing customers to AI-built rivals

Stripe surveyed 200 SaaS platform leaders in North America and Europe and found AI adoption almost everywhere and a shift toward usage-based and outcome-based pricing.

• AI adoption in the past year:
  • 81% used AI to speed up R&D
  • 58% are rebuilding workflows around agents
  • 79% added AI features to existing products
• 45% say AI lowered operating costs. 44% plan several pricing changes in the next 12 months.
• Seat-based pricing as the main model:
  • 2026: 16%
  • 2027: 11%
  • Horizontal platforms expecting seats to stay primary: 7%, against 14% of vertical SaaS

Why it matters: Inference costs are pushing software toward usage-based and outcome-based billing. If you sell software or services, per-seat pricing is getting harder to defend.

Sources: Stripe blog