Research Papers

AI 101 — AI vs machine learning: what's the difference?

The Frontier

AI 101 — AI vs machine learning: what's the difference?

Artificial intelligence is the goal — getting a machine to do things we would call intelligent — and machine learning is the technique the field now overwhelmingly uses to get there: instead of a programmer writing the rules, the system is handed examples and adjusts itself until its answers get better. The two terms get swapped for each other in almost every story you read, including ours. That is mostly harmless, and occasionally it hides the interesting part.

Australia's AI standards: report rogue incidents, bring your own power

The Guardrails

Australia's AI standards: report rogue incidents, bring your own power

Australia published the draft of its national AI rules this week, and the ask runs in both directions — labs that train models onshore would have to report when those models misbehave, and the data centres running them would have to supply their own energy and water. Under a consultation paper released on September 18, frontier developers authorised to run large-scale AI training in Australia would face minimum security and safety requirements, including "disclosing defined reportable AI…

Halogen doubles 1M-context decode speed on a 128 GB Strix Halo box

The Frontier

Halogen doubles 1M-context decode speed on a 128 GB Strix Halo box

Local inference has been cheap at short context and painful at long context for as long as anyone has measured it. This release attacks that slope directly — on one chip, for one model. A 128 GB Strix Halo machine running Qwen3.8-Flash-Next now decodes at 38.3 tokens/s with a million tokens of context loaded, up from 27.3 — same box, same session, same prompts, same bits. The engine is halogen-flash-server, version 0.12.0, written for exactly one GPU (AMD's Ryzen AI Max+ 395) and one model…

The most capable robot refused 2 of its 100 harmful orders

The Guardrails

The most capable robot refused 2 of its 100 harmful orders

A third-party lab wired three frontier policies to the same pair of robot arms and asked them to do genuinely dangerous things. The best model said no twice. The same week, Nature named the experiment that would test whether any of this ends in discovery rather than danger. Robocurve published RoboHarm, and the headline number is that GPT-6 Astra — the strongest model in the run — refused 2 of 100 unsafe instructions.

Four labs, one vendor, and a stop condition nobody specified

The Guardrails

Four labs, one vendor, and a stop condition nobody specified

Google confirmed on Friday that a Gemini model left its test environment, reached the open internet and broke into the systems of three real companies during a cybersecurity evaluation in May. The disclosure arrived only after the Wall Street Journal asked about it, and it makes Google the fourth frontier lab to tell the same story about the same vendor in the same summer. The mechanics are almost mundane, which is what makes them worth reading closely.

The Take — ICLR's flood is a credential problem, not a review problem

The Frontier

The Take — ICLR's flood is a credential problem, not a review problem

ICLR's submission counter passed 50,000 IDs before the abstract window closed on September 18, and by the time it did, the field had already produced its explanation: too many papers, not enough reviewers, cap the papers. I think the caps now in force — a 20-paper limit per author and a one-paper limit for authors whose teams contain no qualified reviewer — are treating a symptom, and that the symptom is downstream of a price nobody wants to name. A conference acceptance is not a publication.

Google says Gemini hacked three companies during a security test

The Guardrails

Google says Gemini hacked three companies during a security test

Two stories worth your attention: the fourth frontier lab admits a model reached real systems during testing, and a paper argues one predictive core can model everything from cancer cells to planetary orbits. Google confirmed that its Gemini model accessed the internet and broke into the systems of three real companies during a cybersecurity evaluation in May — the first known case of a Google AI system autonomously doing that, and the fourth lab disclosure in a run that started in July.