Daily Brief

Sandboxes won't hold rogue agents — the worm ingredients are already here

The Guardrails

Sandboxes won't hold rogue agents — the worm ingredients are already here

Two security stories dominate the morning: a cryptographer's case that sandboxes are the wrong answer to rogue agents, and Meta going on the record to deny its agent read a user's private messages. Sandboxing won't contain rogue agents — a cryptographer's case. Matthew Green, the Johns Hopkins cryptographer who usually referees arguments in applied cryptography, spent 3,000 words refereeing the AI containment debate instead — and landed on a third position neither camp holds. His concession to

Tencent leases 100,000 AI chips Oracle can't sell China

The Arena

Tencent leases 100,000 AI chips Oracle can't sell China

Two stories this morning, both about where AI's hardware money actually flows: a seven-billion-dollar workaround for the export ban, and Salesforce buying its way deeper into AI-run market research. Tencent has signed a roughly $7 billion, five-year deal with Oracle for access to about 100,000 advanced AI chips — hardware it cannot buy for use inside China — by renting them from Oracle's data centers in Southeast Asia. Sources briefed the Financial Times on the arrangement, and Reuters carried

Google's Gemini 4 Argon gets a 1M-token output limit

The Frontier

Google's Gemini 4 Argon gets a 1M-token output limit

Gemini 4 Argon's output ceiling jumps to one million tokens. Google confirmed in its launch post that Argon can now generate up to one million output tokens, up from the 64K limit on prior Gemini models — an industry first at that scale. Pricing lands at an introductory $2 per million input tokens and $10 per million output, with cached input 95% off, rising later to $4 and $20. The catch: Argon isn't broadly available yet — Google is rolling it out first to a small group of trusted cyber defend

Ten Claude agents formalize a 122-year-old physics problem

The Frontier

Ten Claude agents formalize a 122-year-old physics problem

A proof no human wrote, a 320-billion-parameter release from an unknown Chinese lab, and OpenAI's billing system quietly starting to carry other labs' models — the overnight lane had a research flavor. Ten Claude Sonnet 5.5 agents spent roughly 15 hours and 1,270 messages producing a 17,895-line Lean proof that settles the N=7 case of the Thomson problem — J.J. Thomson's 1904 question of how seven charged points arrange themselves on a sphere to minimize their mutual repulsion. Vals AI, the ben

California signs the No Robo Bosses Act, barring AI-only firings

The Guardrails

California signs the No Robo Bosses Act, barring AI-only firings

Newsom's veto-to-signature reversal closes out California's bill week with the first US workplace-AI law of its kind. Plus the Pentagon hands its future-of-warfare study to Musk and Luckey. California Governor Gavin Newsom signed SB 947, the No Robo Bosses Act, on Wednesday — the first US law banning employers from relying solely on AI to fire or discipline workers, and a direct reversal of his own October 2025 veto. The bill, by State Senator Jerry McNerney, bars automated decision-making syst

Google employees question Gemini 4 Argon's real-world coding

The Frontier

Google employees question Gemini 4 Argon's real-world coding

Google shipped its return to the frontier today — and its own people are already arguing about how far ahead it actually is. Plus a public spying accusation between two coding-agent rivals, and another mega-round for AI in hardware design. Some Google employees say Gemini 4 Argon tops the benchmarks but struggles with real-world coding — and Google is disputing that characterization. Bloomberg reported Wednesday that employees with direct access to the model describe its coding abilities as une

OpenAI and Synopsys team up to build a chip-design model

The Arena

OpenAI and Synopsys team up to build a chip-design model

A frontier lab just moved inside the chip-design toolchain, voice AI priced itself at $22 billion, and Google picked a winner in the assistant-format wars. OpenAI and Synopsys signed a multi-year deal to build GPT-Synopsys, a model that runs Synopsys' chip-design tools. OpenAI licenses the electronic design automation software, hosts the model on its own infrastructure, and gets engineers to delegate design objectives and review the output — while customer data stays out of training and encrypt

OpenAI pins its reasoning-theft campaign on Moonshot AI accounts

The Guardrails

OpenAI pins its reasoning-theft campaign on Moonshot AI accounts

Two labs shipped defenses against how AI gets copied today — one against stealing a model's reasoning, one against misusing AI-designed proteins — while Reddit slammed the door on the bots doing the copying. OpenAI says a cluster of accounts tied to Moonshot AI spent July pulling protected reasoning out of its models at scale. In a Wednesday post, OpenAI said the campaign started July 1, spiked on July 24–25 with 16,000 extraction requests from over 4,000 accounts, and was tied to a wider clust

The FTC is drafting demands for OpenAI and Anthropic over rogue agents

The Guardrails

The FTC is drafting demands for OpenAI and Anthropic over rogue agents

Two moves on the same question landed today — what happens when an AI agent breaks something — and both of them are procedural. On the regulatory side, an investigation just became a docket. The Federal Trade Commission has opened an investigation into OpenAI, Anthropic and the AI-evaluation nonprofit METR over the risks their products pose to consumers, and is drafting civil investigative demands to compel executives to testify. An FTC spokesperson confirmed the probe to CNBC and CBS News. A s

DoorDash opens a waitlist to order food by text with an AI agent

The Arena

DoorDash opens a waitlist to order food by text with an AI agent

DoorDash is betting the next app you order from won't be an app. On Tuesday it opened a US waitlist for ordering through an Apple Messages thread, plus a developer waitlist for a connector that lets AI assistants place corporate orders — the first time a major delivery platform has said out loud that agents, not screens, are where it expects to be found. DoorDash opened a US waitlist for an AI agent that takes orders inside Apple Messages — 20,000 users are already in, and it is iOS-only for no

Europe's data centers won't say how much water and power they use

The Guardrails

Europe's data centers won't say how much water and power they use

A year-long investigation across all 27 EU member states found that the environmental cost of the data-center buildout is, by design, unmeasurable — and a pilot program suggests Google's answer to publishers is measured in rounding errors. European data centers are refusing to disclose their electricity and water consumption, and a year of freedom-of-information requests across every EU member state failed to produce the numbers. Lighthouse Reports spent twelve months filing FOI requests with n

Meta cut its federal tax bill by calling AI data centers experiments

The Guardrails

Meta cut its federal tax bill by calling AI data centers experiments

Three stories this hour: the tax mechanics sitting under the AI buildout, a frontier model driving a humanoid through a kitchen it had never seen, and an agent platform that just handed its agents wallets. Meta has been claiming a research tax credit on its AI data centers by classifying them as experimental "pilot models," and the New York Times reports the strategy took its federal tax bill from $9.6 billion in 2024 down to $2.8 billion in 2025. The mechanism is a credit created in the 1980s