{ "date": "2026-09-11", "volume": 1, "number": 6, "dateline": "Friday, 11 September 2026", "masthead": "The Early Edition", "editionNote": "16 printed", "motto": "What changed, what it costs you, and where to check it.", "premise": { "text": "A model name stopped naming a model. On Monday DeepSeek answers calls to V4 Pro with a cheaper, different model its own card rates weaker at recall, and a paper found the same Qwen weights scoring 26 to 68 depending on the host. Below it, three vendors moved a piece of the agent loop onto their own servers, California made a model change a compliance event, and two sellers of compute showed who sets terms when capacity is short." }, "ahead": [ { "when": "Mon 14 Sep, 04:00 UTC", "what": "DeepSeek routes deepseek-v4-pro to V4.1 Flash", "why": "12:00 Beijing time, per DeepSeek's pricing page. After it, the name bills at the Flash rate and the V4-Pro-0813 checkpoint is reachable only through third-party hosts.", "status": "confirmed" }, { "when": "Tue 15 Sep", "what": "Responses due, sanctions motion against DeviantArt in Andersen v. Stability AI", "why": "Carried forward. Docket entry 730 sets responses on 15 September and replies on 22 September.", "status": "confirmed" }, { "when": "Thu 24 Sep", "what": "OpenAI removes sora-2, sora-2-pro and the Videos API", "why": "OpenAI's deprecations page gives the date and leaves the replacement column empty. Export anything you need before it.", "status": "confirmed" }, { "when": "Thu 24 Sep", "what": "Xi Jinping at the White House", "why": "Carried forward. The fixed point in US-China AI diplomacy this month.", "status": "reported" }, { "when": "Mon 28 Sep", "what": "OpenAI shuts down gpt-3.5-turbo-instruct, babbage-002, davinci-002 and gpt-3.5-turbo-1106", "why": "Carried forward. The replacement named on the deprecations page is gpt-5.6-terra.", "status": "confirmed" }, { "when": "Tue 29 Sep", "what": "Claude Sonnet 4.5 API retirement, no earlier than", "why": "Carried forward. Anything pinned to claude-sonnet-4-5-20250929 needs to move.", "status": "confirmed" }, { "when": "Wed 7 Oct", "what": "Sanctions hearing, Andersen v. Stability AI, before Judge Orrick", "why": "Carried forward. 14:00 in San Francisco, Courtroom 02.", "status": "confirmed" }, { "when": "Sat 10 Oct", "what": "Solar Pro 4 reaches standard pricing, $0.30 input and $1.20 output", "why": "Carried forward from Upstage's own rate card.", "status": "confirmed" }, { "when": "Tue 1 Dec", "what": "OpenAI removes the older GPT Image models from the API", "why": "Carried forward. Replacement gpt-image-2.", "status": "confirmed" }, { "when": "Thu 1 Jul 2027", "what": "California SB 1119's pre-release risk assessments and child defaults bind", "why": "Signed 10 September. Any update that materially changes a companion chatbot's functionality needs a documented assessment before it reaches Californian users.", "status": "confirmed" } ], "front": [ { "block": "lead", "story": "v4-pro-reroute", "rail": [ "ib2-three-hosts", "cc-third-party-400" ] }, { "block": "premise" }, { "block": "index", "name": "Inside this edition" }, { "block": "package", "name": "The loop moved to their servers", "rationale": "Three launches on 10 September move a piece of the agent's control loop off the builder's machine and onto the vendor's. OpenAI now decides what a long session forgets, Anthropic's server decides whether a tool call runs, and Cursor's coordinator keeps working after the laptop closes. Each deletes code a team maintained and replaces it with a decision the team cannot read.", "stories": [ "openai-agents-api", "anthropic-auto-policy", "cursor-projects" ] }, { "block": "boxed", "story": "codex-external-authority" }, { "block": "feature", "story": "sb1119-signed" }, { "block": "package", "name": "Scarcity sets the terms", "rationale": "Two sellers of compute, in markets that barely trade with each other, set terms on 10 September that their buyers accepted. Oracle's customers prepaid $11.4bn in one quarter, and Huawei raised its newest accelerator by as much as half in eight weeks. In both, pricing power sits with whoever holds the scarce part: finished capacity in one case, memory in the other.", "stories": [ "oracle-prepaid", "ascend-hbm" ] }, { "block": "briefs", "name": "In brief", "stories": [ "gpt-live-api", "openai-key-expiry", "cowork-windows", "sakana-sumitomo", "kv-reuse-floor", "eu-no-sept-15" ] }, { "block": "ahead" }, { "block": "ledger", "ledger": { "counts": { "swept": 100, "candidates": 26, "deduped": 26, "verified": 21, "printed": 16 }, "note": "The collector's wire carried 100 items generated at 22:01 UTC on 10 September, most of them arXiv listings and Codex alpha tags. Nine reporting areas were then swept live against 10 and 11 September with every previously printed URL excluded, and three fact-desk agents refetched every surviving item and pulled its specifics. The editor refetched the lead's sources directly: DeepSeek's pricing page, its change log, the Hugging Face model card and file listing, OpenRouter's model and endpoint records, and an Internet Archive copy of the pricing page from 9 September. That last one mattered. The open-weights reporter filed V4.1 Flash as a price rise, comparing its rate with an aggregator's figure for V4 Flash. DeepSeek's own page as archived on 9 September shows V4 Flash at $0.22 input and $0.66 output off-peak, so Thursday's change was a cut, and the lead says so. The editor also erred on the way, reading OpenRouter's deepseek-v4-pro listing as the only route to V4 Pro until a separate slug turned up carrying the 0813 checkpoint, DeepSeek among its providers. Three other reporter claims were corrected before print: GPT-Live 1 was described as a preview reaching general availability when it was a ChatGPT feature new to the API; a five-point gap in the IB2 paper was attributed to the serving route alone when the authors attribute it to route, harness and parser together; and the research reporter returned nothing at all, because it dated arXiv papers by submission and so missed the listing announced on 10 September. The editor read that listing and two papers from it run today. The reporting workflow did not run, for the fourth edition in a row, and it failed two different ways. The first call was refused because the session held no workflow-authoring receipt; with the receipt loaded, the guard printed its preflight card, which under this permission mode is shown to nobody, and refused again. The beats ran as parallel agents instead. Whether the paper's saved workflow should be exempt from that guard is a decision for its owner and has not been made. On the gates: rule 14, the bare-number detector, blocked twelve times on the first pass. Four were names the identifier guard did not know: the checkpoint suffixes 0423 and 0813, the status code in HTTP 400, the bill number in Assembly Bill 1405, and a parameter count hyphen-glued to a model name, as in Qwen3.6-27B. The detector was taught those four shapes rather than the sentences being bent round it, with four sentences that must not fire and four controls beside them that must, and all nine framework invariants pass. The other eight were fair, and the sentences were rewritten: comparators that sat a sentence away were brought into the sentence, a count from a partner's press release was cut as the marketing figure it was, and two first lines that restated their own headlines were replaced. Then, for the first time before rather than after publishing, every story went to a blind judge that saw only its body and the ten-criterion rubric. The ten longer stories scored between 11 and 20 of 20, with no hard-gate failure. The six briefs scored between 12 and 16. Across all sixteen the judges found the fault the last judging round found, and a second beside it: a source's words quoted without the source named inside the sentence, on eight, plus one banned verb, and the paper's verdict parked in the consequence box rather than in the prose, on ten. Two briefs also failed a hard gate, one opening on a status-page frame instead of the fault and one giving dates with no mechanism behind them. All of it was rewritten before print. One judge docked the boxed story for saying why it was nearly cut, which is what the treatment requires, and that score stands as a disagreement. This edition published, was read back, and was republished the same morning. The reader caught what no gate looks for: the lead counted OpenRouter's endpoint rows rather than its hosts, and one host is listed twice on each of the two V4 Pro slugs, so the page said sixteen hosts where there are fifteen and twenty providers where there are nineteen. The counts were re-read from OpenRouter's API and corrected before the edition froze. One sentence about V4 Flash's price cut also gave no figure, and now does. No correction runs today. Yesterday's calendar gave 30 September as Newsom's deadline on SB 1119; he signed on 10 September, which is inside it, not a contradiction of it. The claimed 15 September EU deadline that yesterday's paper declined to print without a primary source was checked against the Commission's own timeline today, which has no such date, and that finding runs as a brief. Upstage's rate card still renders its prices in JavaScript, so today's step on Solar Pro 4 could not be re-read and is not printed as having happened.", "omitted": [ "Elevated latency on the Claude API from 21:43 to 23:24 UTC on 10 September, on traffic routed through the US Midwest. Under two hours in one region, resolved.", "Two GitHub repositories that gained more than 300 stars each within hours of being created on 10 September, one routing Copilot through a local proxy and one probing endpoints for \"model masking\". Their code was read in full and holds no malicious mechanism. Star counts that high with no forks are a shape, not evidence, so neither is printed as a tool or as a threat.", "Codex rust-v0.155.0 alpha tags, three of them. Every release body is empty.", "Gemini CLI 0.61.0. Only nightlies exist, with empty notes, and no stable release.", "Salesforce's reported talks to buy Listen Labs. Dated 9 September, talks rather than a deal, and nothing changes for a builder yet.", "Meta's acquisition of Stilla. There is no developer-facing product to lose.", "OpenAI's removal of Sora 2 from the API on 24 September. Real and in the calendar above, but announced in March, so not news today.", "An update to Japan's AI guidelines for business said to add watermarking recommendations. The only primary document METI publishes is still version 1.2 of 31 March.", "Four more papers from the 10 September arXiv listing, on route-aware legal claim auditing, graph retrieval cost, agent memory forgetting and a model of how an AI vendor compromise spreads through banks. Each is a real result; none changes what a builder does this week as much as the two that ran." ] } }, { "block": "wire", "snapshot": [ { "title": "Degraded performance on the Claude API", "href": "https://status.claude.com/incidents/2pt83vlkk7x7", "source": "anthropic-status", "at": "2026-09-10T22:01:17.890Z", "time": "22:01" }, { "title": "Cascade forming: \"react native\" — 3 independent sources in 7h", "href": "https://shopify.engineering/back-to-native", "source": "cascade shape", "at": "2026-09-10T21:31:12.103Z", "time": "21:31" }, { "title": "openai/codex Cygwin build inputs and matching source for Windows voice", "href": "https://github.com/openai/codex/releases/tag/voice-cygwin-108b38cf67cbb731", "source": "github release", "at": "2026-09-10T20:30:57.829Z", "time": "20:30" }, { "title": "openai/codex Python SDK 0.154.0", "href": "https://github.com/openai/codex/releases/tag/python-v0.154.0", "source": "github release", "at": "2026-09-10T20:01:05.026Z", "time": "20:01" }, { "title": "Cascade forming: \"v4.1 flash\" — 3 independent sources in 4h", "href": "https://openrouter.ai/deepseek/deepseek-v4.1-flash", "source": "cascade shape", "at": "2026-09-10T19:01:04.265Z", "time": "19:01" }, { "title": "Cascade forming: \"deepseek v4.1\" — 3 independent sources in 4h", "href": "https://openrouter.ai/deepseek/deepseek-v4.1-flash", "source": "cascade shape", "at": "2026-09-10T19:01:04.265Z", "time": "19:01" }, { "title": "Cascade forming: \"deepseek v4.1 flash\" — 3 independent sources in 4h", "href": "https://openrouter.ai/deepseek/deepseek-v4.1-flash", "source": "cascade shape", "at": "2026-09-10T18:00:58.523Z", "time": "18:00" }, { "title": "3 ways to prep for your next big race with Search", "href": "https://blog.google/products-and-platforms/products/search/running-race-training-tips/", "source": "google-blog", "at": "2026-09-10T16:30:47.738Z", "time": "16:30" }, { "title": "Degraded functionality for Claude Cowork on Windows", "href": "https://status.claude.com/incidents/r1pqn1kb4hvk", "source": "anthropic-status", "at": "2026-09-10T16:01:03.461Z", "time": "16:01" }, { "title": "The King of Unitree", "href": "https://www.chinatalk.media/p/the-king-of-unitree", "source": "chinatalk", "at": "2026-09-10T11:30:51.427Z", "time": "11:30" }, { "title": "IBIB: A Protocol for Measuring Enterprise AI Systems by Serving Route, Not Model Identifier", "href": "https://arxiv.org/abs/2609.10494v1", "source": "arXiv cs.AI", "at": "2026-09-10T11:01:07.847Z", "time": "11:01" }, { "title": "ConvMem: Convolutional Memory for Long-Context Reasoning", "href": "https://arxiv.org/abs/2609.10441v1", "source": "arXiv cs.AI", "at": "2026-09-10T11:01:07.847Z", "time": "11:01" } ] } ], "stories": [ { "id": "v4-pro-reroute", "section": "Models", "kicker": "The name stayed", "treatment": "lead", "headline": "Calls to DeepSeek V4 Pro reach a different model from Monday, and DeepSeek's own card shows what it is worse at", "standfirst": "At 04:00 UTC on 14 September the name deepseek-v4-pro starts returning V4.1 Flash at under a quarter of the price. Neither DeepSeek's pricing page nor its change log offers a way to keep the old model.", "byline": "By the Newsroom", "credit": "From DeepSeek's pricing page, change log and model card, and OpenRouter's model listings, all read 11 September", "figure": { "type": "table", "caption": "What a request for DeepSeek V4 Pro reaches, by route. DeepSeek's rates are off-peak; its peak rate, weekdays 01:00 to 04:00 and 06:00 to 10:00 UTC, is double. OpenRouter prices are the range across its listed hosts on 11 September.", "columns": [ "Route and name", "Model that answers", "Input, per M", "Output, per M" ], "rows": [ [ "DeepSeek API, deepseek-v4-pro, until Monday", "V4-Pro-0813", "$0.66", "$1.98" ], [ "DeepSeek API, deepseek-v4-pro, from Monday", "V4.1 Flash", "$0.15", "$0.60" ], [ "OpenRouter, deepseek-v4-pro, 15 hosts", "V4 Pro 0423", "$0.87 to $2.00", "$1.20 to $4.00" ], [ "OpenRouter, deepseek-v4-pro-0813, 18 other hosts", "V4-Pro-0813", "$0.99 to $1.45", "$2.60 to $4.36" ] ] }, "body": [ { "type": "p", "text": "DeepSeek pointed two retired model names at its new V4.1 Flash on Thursday, the day it released the model. Anyone still calling deepseek-v4-flash has been answered by V4.1 Flash since, at the new rate." }, { "type": "p", "text": "On Monday the same rule reaches V4 Pro, DeepSeek's largest model, and that is the change that matters. A DeepSeek model name now buys a price tier, not a set of weights." }, { "type": "p", "text": "The mechanism is a footnote on the pricing page. From 12:00 Beijing time on 14 September, \"and until V4.1 Pro is released in the future, requests to deepseek-v4-pro will all be routed to V4.1 Flash and billed at the V4.1 Flash price.\" The endpoint does not change and neither does the request." }, { "type": "p", "text": "What answers it does. DeepSeek's card lists V4 Pro at 1.6 trillion backbone parameters, against 552 billion for V4.1 Flash, an encoder-decoder that activates 8 billion of them while it reads a prompt. It can, because its decoder's cache is projected from the encoder's final layer instead of being computed afresh at every layer." }, { "type": "p", "text": "For a V4 Pro customer the bill falls by roughly three quarters: off-peak input drops from $0.66 per million tokens to $0.15. The concurrency ceiling rises fivefold." }, { "type": "p", "text": "V4 Flash customers got a smaller cut on Thursday. DeepSeek's page as it stood on 9 September listed V4 Flash input at $0.22 per million off-peak, against $0.15 now." }, { "type": "p", "text": "DeepSeek's case is that nobody loses anything. Its change log says V4.1 Flash has \"comprehensively surpassed V4 Pro in performance, cost, speed, and total time.\" Its own model card, published the same day, does not support the first of those words. On the card's base-model table V4 Pro scores 55.2 on SimpleQA-Verified, a test of short factual recall, against 42.3 for its replacement. It also leads, by smaller margins, on the long-context LongBench-V2, on GPQA Diamond and on the text-only Humanity's Last Exam. So the claim fails for retrieval, factual answering and long documents." }, { "type": "p", "text": "It holds for agents that write and run code, and that is why DeepSeek can make it at all: V4.1 Flash scores 30.0 on Terminal-Bench 3.0 against V4 Pro's 11.8. The footnote reroutes both kinds of traffic alike." }, { "type": "figure", "figure": { "type": "table", "caption": "Where each model leads, on DeepSeek's own model card. None of these has been run independently. The first two rows come from the card's base-model table; the rest compare instruct models at maximum reasoning effort.", "columns": [ "Benchmark", "V4 Pro", "V4.1 Flash" ], "rows": [ [ "SimpleQA-Verified, short facts", "55.2", "42.3" ], [ "LongBench-V2, long context", "51.5", "45.2" ], [ "GPQA Diamond", "92.4", "90.9" ], [ "Humanity's Last Exam, text only", "42.7", "39.1" ], [ "DeepSWE v1.1, resolved", "62.7", "74.2" ], [ "Terminal-Bench 3.0", "11.8", "30.0" ] ] } }, { "type": "p", "text": "The string was never one model to begin with. On OpenRouter, deepseek/deepseek-v4-pro is labelled V4 Pro 0423 and served by fifteen third-party hosts, nine of them at FP8 and two at FP4, while a separate slug carries the 0813 checkpoint DeepSeek's own API has been serving. OpenRouter marks its one floating DeepSeek name with a tilde, ~deepseek/deepseek-v4-flash-latest, and says it \"always redirects to the latest model\". DeepSeek's API gives no such mark to a name that now floats." }, { "type": "p", "text": "Nor are the weights the whole system. On DeepSeek's scaffold table the same V4.1 Flash weights resolve 74.2 per cent of DeepSWE tasks under mini-SWE and 65.5 per cent under OpenCode, a spread of almost nine points from the harness alone." }, { "type": "p", "text": "The verdict: if deepseek-v4-pro is pinned anywhere, run your evaluation set against deepseek-flash before 04:00 UTC on Monday, while the old model can still be called beside it on the same key. Coding-agent traffic gets cheaper and, on DeepSeek's numbers, better. Retrieval and long-document work is where those numbers point the other way, and the exit for it is a third-party host serving the 0813 weights, listed on OpenRouter at $0.99 to $1.45 per million input tokens." }, { "type": "p", "text": "Leave DeepSeek itself out of that route. It is one of the nineteen providers OpenRouter lists for the 0813 slug, at $0.66 against $0.99 and up for the other eighteen, and neither page says whether it will still serve 0813 there once its own API stops on Monday." } ], "consequence": "Search code, configs and gateway routing tables for the string deepseek-v4-pro today: anything that matches changes model at 04:00 UTC on Monday whether or not you deploy. On OpenRouter, give the 0813 slug a provider order that leaves DeepSeek out until its listing says what it serves.", "confidence": "verified", "note": "Every benchmark figure is DeepSeek's own, from its model card, and none has been run independently. The V4 Flash rates before Thursday come from DeepSeek's pricing page as archived on 9 September. OpenRouter's prices and host counts were read from its API on 11 September and change without notice.", "sources": [ { "label": "DeepSeek Models & Pricing", "url": "https://api-docs.deepseek.com/quick_start/pricing", "publisher": "DeepSeek", "date": "2026-09-10", "kind": "primary", "provenance": { "byline": "Not published on the page", "institution": "DeepSeek, which sets the rate and the routing", "stake": "The paper's best guess: V4.1 Flash activates 8 to 16 billion parameters per token where V4 Pro's card lists 49 billion, so the reroute cuts DeepSeek's own serving cost along with the customer's price and frees the capacity its largest model was using." } }, { "label": "DeepSeek API change log, 10 September", "url": "https://api-docs.deepseek.com/updates", "publisher": "DeepSeek", "date": "2026-09-10", "kind": "primary" }, { "label": "DeepSeek-V4.1-Flash model card", "url": "https://huggingface.co/deepseek-ai/DeepSeek-V4.1-Flash", "publisher": "DeepSeek on Hugging Face", "date": "2026-09-10", "kind": "primary", "provenance": { "byline": "DeepSeek-AI, no individual authors", "institution": "DeepSeek", "stake": "The paper's best guess: the card is the vendor grading its own replacement, and it is more candid than the change log written from it." } }, { "label": "DeepSeek pricing page as archived 9 September", "url": "https://web.archive.org/web/20260909164743/https://api-docs.deepseek.com/quick_start/pricing/", "publisher": "Internet Archive copy of DeepSeek's page", "date": "2026-09-09", "kind": "primary" }, { "label": "OpenRouter: DeepSeek V4 Pro 0813", "url": "https://openrouter.ai/deepseek/deepseek-v4-pro-0813", "publisher": "OpenRouter", "date": "2026-09-11", "kind": "primary", "provenance": { "byline": "Not published on the page", "institution": "OpenRouter, a router that takes a margin on every provider it lists", "stake": "The paper's best guess: OpenRouter gains when builders route around a first-party change like this one, which is exactly the exit this story describes." } } ] }, { "id": "ib2-three-hosts", "section": "Science", "kicker": "Beside the lead", "treatment": "rail", "headline": "The same Qwen weights scored 26, 62 and 68 on three hosts, and the model name predicted none of it", "byline": "By the Newsroom", "credit": "From the IB2 paper by Iterate.ai, submitted 9 September", "body": [ { "type": "p", "text": "Three FP8 hosts served Qwen3.6-27B the same 128 locked tasks, in a paper from Iterate.ai submitted on 9 September. It scored 26.12 on DeepInfra, against 62.25 on CoreWeave and 68.26 on a third host. The weights and the precision were the same. The routes were not." }, { "type": "p", "text": "DeepInfra rejected a thirteen-image request at its four-image route limit. CoreWeave, despite advertising a 262,144-token completion maximum, \"stopped at exactly 32,768 tokens with finish_reason=length.\" The authors audited 18 published benchmarks and found every one of them scores the advertised model identifier, so neither failure would have shown up in any of them." }, { "type": "p", "text": "Their protocol, IB2, runs ten preflight checks on a route before any task reaches it. A five-point gap they report between two other routes for Qwen3.8-27B is weaker evidence, and they say so: those arms also differed in harness and tool-call parser. The 26 and the 62 are the stronger result, because each has a named mechanism." }, { "type": "p", "text": "Iterate.ai paid the whole inference bill, $245.99 for eleven systems or about $22 each, and evaluated none of its own products. That price is the verdict: any team can afford to test its own route, and a leaderboard that names only the model has told it nothing about the host it will pay." } ], "consequence": "Before you trust a benchmark for a hosted open model, send your own largest request to the exact route you will buy: the most images, the longest completion and the full tool list.", "confidence": "verified", "sources": [ { "label": "IB2: measuring enterprise AI systems by serving route, not model identifier", "url": "https://arxiv.org/abs/2609.10494", "publisher": "arXiv", "date": "2026-09-09", "kind": "primary", "provenance": { "byline": "Blake Stenstrom, Charangan Vasantharajan and Brian Sathianathan", "institution": "Iterate.ai, which funded the study", "interests": "Iterate.ai sells enterprise AI systems; the paper states that none was evaluated", "stake": "The paper's best guess: a vendor gains standing if its evaluation protocol becomes the one buyers ask for, and the paper releases the protocol while keeping the task corpus sealed." } } ] }, { "id": "cc-third-party-400", "section": "Tooling", "kicker": "Beside the lead", "treatment": "rail", "headline": "A tool-schema change in Claude Code broke it on non-Anthropic backends for two days", "byline": "By the Newsroom", "credit": "From the claude-code release notes and GitHub's release timestamps", "body": [ { "type": "p", "text": "Claude Code 2.1.268 fixed a fault that had failed every turn sent through a third-party endpoint since 8 September. The release notes, published at 20:30 UTC on 10 September, trace it to \"a regex in the Artifact tool's input schema that those endpoints reject,\" first shipped in 2.1.265 at 20:37 UTC on 8 September. Two more releases went out with the fault, and every affected turn returned HTTP 400." }, { "type": "p", "text": "DeepSeek's documentation names exactly this route, taking Anthropic-format requests at api.deepseek.com/anthropic and listing Claude Code as a client. The notes name no endpoint, but the class is plain: a change to a tool definition, not to any model, stopped the harness working through any gateway that rejects that regex." }, { "type": "p", "text": "The same release stops plain WebFetch deny and ask rules from applying to Artifact tool reads and updates, so a settings file that gated fetching broadly now needs an Artifact rule to keep the same cover." } ], "consequence": "If you run Claude Code against any non-Anthropic endpoint, update to 2.1.268. If your settings deny or gate WebFetch broadly, add an Artifact rule, because the WebFetch rule no longer covers it.", "confidence": "verified", "sources": [ { "label": "claude-code v2.1.268 release", "url": "https://github.com/anthropics/claude-code/releases/tag/v2.1.268", "publisher": "Anthropic on GitHub", "date": "2026-09-10", "kind": "primary", "provenance": { "byline": "Release published by the GitHub account ashwin-ant", "institution": "Anthropic", "stake": "The paper's best guess: a vendor whose harness is also a way to use rival backends has little commercial reason to hurry a fix for those backends, and this one still shipped within two days." } } ] }, { "id": "openai-agents-api", "section": "Tooling", "kicker": "The loop moved", "treatment": "standard", "headline": "OpenAI's Agents API runs the Codex harness on OpenAI's servers, with no zero-retention option", "byline": "By the Newsroom", "credit": "From OpenAI's API changelog and Agents API guide, read 11 September", "body": [ { "type": "p", "text": "OpenAI put an Agents API into public beta on 10 September. In OpenAI's words, it lets developers \"build agents with a managed Codex harness while OpenAI handles session orchestration, context compaction, and recovery.\" The part that moves is the part most teams wrote themselves. When a long session nears its context limit, OpenAI's server now chooses what to compress; when a run dies, it chooses where to resume." }, { "type": "p", "text": "The developer still supplies the tools, picks an OpenAI-hosted or self-hosted sandbox and connects MCP servers. Model usage bills at the chosen model's standard rates and sandbox time separately, with no per-session fee listed, and the guide names nothing the API replaces." }, { "type": "p", "text": "Two limits decide who can use it at all. Data residency is \"currently\" the United States only, and the API does not support Zero Data Retention. A self-hosted sandbox looks like the way round that and is not: the guide says it does not make the API eligible. The verdict is that a team under a zero-retention agreement cannot use this yet, and any other team trades compaction code it could read for a server-side policy it cannot." } ], "consequence": "If you already run your own compaction and recovery, keep them until OpenAI documents what its compaction discards.", "confidence": "verified", "sources": [ { "label": "OpenAI API changelog", "url": "https://developers.openai.com/api/docs/changelog", "publisher": "OpenAI", "date": "2026-09-10", "kind": "primary" }, { "label": "Agents API overview", "url": "https://developers.openai.com/api/docs/guides/agents-api/overview", "publisher": "OpenAI", "date": "2026-09-10", "kind": "primary", "provenance": { "byline": "Not published on the page", "institution": "OpenAI", "stake": "The paper's best guess: every session that runs on OpenAI's harness is a session that cannot move to another vendor without rewriting the loop around it." } } ] }, { "id": "anthropic-auto-policy", "section": "Tooling", "kicker": "The loop moved", "treatment": "standard", "headline": "Anthropic's server now decides whether a Managed Agents tool call runs, and its docs say that is not a human checkpoint", "byline": "By the Newsroom", "credit": "From the Claude Platform release notes and permission-policy docs, read 11 September", "body": [ { "type": "p", "text": "Claude Managed Agents gained an auto permission policy on 10 September. Anthropic's docs say that under it \"the server evaluates each call and runs it, denies it, or pauses for your approval,\" judging from the tool, its input and the session so far. A denial returns an error result, \"Permission to use {tool_name} has been denied,\" that the client cannot override. A pause idles the session with stop_reason requires_action until a user.tool_confirmation event arrives, and every decision comes back in a new evaluation field carrying a reason code." }, { "type": "p", "text": "The docs do not say what does the evaluating, whether a classifier, a model or rules. They do carry the sentence that matters, \"auto is not a human checkpoint,\" and warn that an allowed call runs before anyone reviews it. That warning settles where auto belongs: on tools that read, never on tools that write, pay or delete, which should stay on always_ask. The same day's ant beta:sessions connect attaches a terminal to a live session, which is how you watch what auto let through." } ], "consequence": "Log the evaluation field on every auto decision. Its reason codes are the only record you will have of what the server allowed.", "confidence": "verified", "sources": [ { "label": "Claude Platform release notes", "url": "https://platform.claude.com/docs/en/release-notes/api", "publisher": "Anthropic", "date": "2026-09-10", "kind": "primary" }, { "label": "Managed Agents permission policies", "url": "https://platform.claude.com/docs/en/managed-agents/permission-policies", "publisher": "Anthropic", "date": "2026-09-10", "kind": "primary", "provenance": { "byline": "Not published on the page", "institution": "Anthropic", "stake": "The paper's best guess: fewer approval prompts make hosted agents easier to adopt, and the warning printed beside the feature is what keeps that from becoming the vendor's liability." } } ] }, { "id": "cursor-projects", "section": "Tooling", "kicker": "The loop moved", "treatment": "standard", "headline": "Cursor's Projects keep a coordinator agent working in the cloud after the laptop closes, at a price the launch page does not give", "byline": "By the Newsroom", "credit": "From Cursor's changelog entry of 10 September", "body": [ { "type": "p", "text": "Cursor launched Projects in beta on 10 September, rolling out to all users. It is an agent sold on the promise that nobody needs to watch it, and Cursor has not said what one costs." }, { "type": "p", "text": "In Cursor's words, a coordinator agent \"doesn't write code itself; it plans the work, delegates it to agents that implement it,\" and it runs \"on its own computer in the cloud, so closing your laptop doesn't stop it.\" Cursor says it \"delegates tasks to thousands of subagents\" and states no cap. What it knows lives in a set of files that sync across every cloud and local machine its agents use, so a lesson such as how to test a service survives from one run to the next. Subscriptions let the coordinator watch a Slack channel, run on a schedule or follow every pull request without being prompted." }, { "type": "p", "text": "The verdict: try it on a bounded migration, and do not give a Project a subscription until Cursor prices the work it does unprompted." } ], "consequence": "Before a Project runs unattended, get from Cursor in writing how its agent usage bills on your plan.", "confidence": "verified", "sources": [ { "label": "Projects in Cursor", "url": "https://cursor.com/changelog/projects", "publisher": "Cursor", "date": "2026-09-10", "kind": "primary", "provenance": { "byline": "Not published on the page", "institution": "Cursor, made by Anysphere", "stake": "The paper's best guess: usage-billed agents that run unprompted are the most direct route from a flat subscription to metered revenue." } } ] }, { "id": "codex-external-authority", "section": "Tooling", "kicker": "The one we nearly cut", "treatment": "boxed", "headline": "A Codex SDK point release wrote the prompt-injection boundary into one clause", "byline": "By the Newsroom", "credit": "From the openai/codex python-v0.154.0 release notes", "body": [ { "type": "p", "text": "OpenAI's Codex Python SDK 0.154.0 adds ExternalMessage, a way for outside systems to speak into a running agent turn. Published at 19:51 UTC on 10 September, it also says what that speech is worth: \"External content can start a turn or join an active regular turn with tool-level authority; it does not grant user authorization.\" A webhook, a monitor or another agent can push text into a Codex session, and the SDK files it as a tool's output rather than as an instruction from the person who started the session." }, { "type": "p", "text": "We nearly cut it as a point release of an SDK most readers do not use. We kept it because the three launches above all move tool-call decisions onto a vendor's server, and this release writes down which inputs count as the user. It does not claim the model honours the label under hostile text; the label is a promise about routing, not about behaviour." }, { "type": "p", "text": "It also breaks hook code. HookMetadata now wraps its handler, so hook.command becomes hook.root.command." } ], "consequence": "If you feed webhook or agent output into Codex, move it onto ExternalMessage so it arrives with tool authority. Update any hook code that reads hook.command before upgrading.", "confidence": "verified", "sources": [ { "label": "openai/codex python-v0.154.0", "url": "https://github.com/openai/codex/releases/tag/python-v0.154.0", "publisher": "OpenAI on GitHub", "date": "2026-09-10", "kind": "primary" } ] }, { "id": "sb1119-signed", "section": "The Board", "kicker": "The law", "treatment": "feature", "headline": "California will make companion chatbots pass an independent audit, and exempts anyone under $500m in revenue until 2032", "standfirst": "Newsom signed SB 1119 on 10 September, twenty days before his deadline. The duties that change how a builder ships start on 1 July 2027.", "byline": "By the Newsroom", "credit": "From the enrolled text of SB 1119 and the Governor's announcement", "figure": { "type": "timeline", "caption": "When SB 1119 binds, from the enrolled bill text.", "events": [ { "when": "8 Sep 2026", "what": "Enrolled after passing both houses" }, { "when": "10 Sep 2026", "what": "Signed by Newsom with twelve other child-safety bills" }, { "when": "1 Jul 2027", "what": "Pre-release risk assessments and child default settings bind", "accent": true }, { "when": "1 Jan 2029", "what": "First independent child-safety audit due, or before first release if later" }, { "when": "1 Jan 2032", "what": "Audit duty reaches operators under $500m in revenue" } ] }, "body": [ { "type": "p", "text": "Governor Newsom signed SB 1119, which the bill itself names Adam's Law, on 10 September along with twelve other bills on children's safety online. It regulates how a companion chatbot is released, not which model it runs." }, { "type": "p", "text": "The trigger is a definition. A substantial modification is \"a new version, new release, or other update to a companion chatbot that materially changes its functionality or performance,\" and before one reaches users in the state, the operator must perform and document a risk assessment. The assessment has to cite the public benchmarks it relied on and, if it used nothing else, justify why." }, { "type": "p", "text": "Who is covered turns on age. An operator must either determine each user's age under the state's age-assurance law or apply the child protections to every user. Those include default settings that cannot be changed unless a parent account is linked, and a parental control that switches off access for a child under 16. An operator that bars children escapes most of the chapter and publishes how it checks instead. Chatbots offered only to employees, or by a college only for teaching, are outside it." }, { "type": "p", "text": "The audit is the expensive part. An independent auditor, who may be paid but not paid by result, must assess the chatbot's controls by 1 January 2029, and the operator sends the Attorney General a summary within 30 business days. Operators with under $500m in prior-year revenue are exempt from it until 2032, three years after the date that binds larger ones. One section, the child-safety report to the Attorney General, takes effect only if Assembly Bill 1405 is not chaptered by 1 January 2027." }, { "type": "p", "text": "Public prosecutors enforce it, at up to $5,000 per affected child for a negligent violation and three times that, $15,000, for an intentional one. Builders will object that \"materially changes its functionality or performance\" could cover a prompt edit. It could, and the text offers no safe harbour, so the reading to plan for is the broad one: treat any change of model as a substantial modification." }, { "type": "p", "text": "Nothing is due this week. For anyone running a companion chatbot that could reach Californian minors, the verdict is to start logging every model and prompt change with a date now. On the paper's reading, that includes a change you did not make: from July 2027, an operator whose vendor swaps the weights behind a fixed model name, as DeepSeek does on Monday, has shipped a substantial modification without a risk assessment." } ], "consequence": "Above $500m in revenue, budget for an independent child-safety audit by 1 January 2029; below it, by 2032. Either way, the pre-release risk assessment binds from 1 July 2027.", "confidence": "verified", "sources": [ { "label": "SB 1119, enrolled text", "url": "https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260SB1119", "publisher": "California Legislature", "date": "2026-09-08", "kind": "primary" }, { "label": "Governor Newsom signs child safety chatbot and social media laws", "url": "https://www.gov.ca.gov/2026/09/10/governor-newsom-signs-the-strongest-child-safety-chatbot-and-social-media-laws-in-the-nation/", "publisher": "Office of the Governor of California", "date": "2026-09-10", "kind": "primary", "provenance": { "byline": "Governor's press office", "institution": "Office of Governor Gavin Newsom", "stake": "The paper's best guess: \"the strongest in the nation\" is a political claim about the signing, and the bill text, not the release, is where the obligations are." } } ] }, { "id": "oracle-prepaid", "section": "Infrastructure", "kicker": "The seller's terms", "treatment": "data", "headline": "Oracle's customers prepaid a sum equal to two fifths of what it spent building in the quarter", "byline": "By the Newsroom", "credit": "From Oracle's first-quarter results, filed 10 September", "figure": { "type": "number", "value": "40%", "label": "of Oracle's quarterly capital spending, matched by customer prepayments", "caption": "Customer prepayments as a share of capital expenditure, three months to 31 August 2026, from Oracle's cash-flow statement." }, "body": [ { "type": "p", "text": "Oracle's customers prepaid it $11.4bn in the three months to 31 August, against $28.5bn it spent on capital projects. Its buyers are financing its build. The cash-flow line reads \"increase in deferred revenues from customer prepayments with significant financing component,\" and that accounting label means the money arrives far enough ahead of the service that it works as a loan from the customer to the builder of the capacity." }, { "type": "p", "text": "Cloud infrastructure revenue reached $7.4bn, up 121 per cent from $3.3bn a year earlier. Oracle says it booked \"more than $30 billion of additional AI cloud contracts\" in the quarter, lifting remaining performance obligations to $664bn from $638bn three months earlier." }, { "type": "p", "text": "That backlog grew 46 per cent on the year, against 359 per cent a year ago, which reads like a slowdown and is mostly arithmetic on a base that had already more than quadrupled. It still rose by $209bn, from $455bn a year earlier. The verdict for a buyer is that a prepayment is a loan to Oracle against capacity not yet built, and it should be priced as one." } ], "consequence": "If you are negotiating OCI capacity and are asked to prepay, put delivery dates and refund terms in the same contract. A seller whose buyers finance the build has no reason to discount it.", "confidence": "verified", "sources": [ { "label": "Oracle Q1 FY2027 results, exhibit 99.1", "url": "https://www.sec.gov/Archives/edgar/data/1341439/000119312526387905/orcl-ex99_1.htm", "publisher": "Oracle, filed with the SEC", "date": "2026-09-10", "kind": "primary", "provenance": { "byline": "Unsigned corporate filing", "institution": "Oracle Corporation", "stake": "The paper's best guess: prepayments make capital spending look smaller against cash flow, and Oracle chose to put the line in the release rather than leave it to the 10-Q." } }, { "label": "Oracle Announces Q1 Results", "url": "https://investor.oracle.com/investor-news/news-details/2026/Oracle-Announces-Q1-Results-Driven-by-Triple-Digit-Growth-in-Cloud-Infrastructure-Revenues/default.aspx", "publisher": "Oracle investor relations", "date": "2026-09-10", "kind": "primary" } ] }, { "id": "ascend-hbm", "section": "Silicon", "kicker": "The seller's terms", "treatment": "standard", "headline": "Huawei raised its newest AI accelerator by up to half in two months, because it cannot buy the memory", "byline": "By the Newsroom", "credit": "From Reuters, 10 September, in a syndicated copy", "body": [ { "type": "p", "text": "Huawei now quotes its Ascend 950DT above ¥250,000, about $37,255, Reuters reported on 10 September. That is between 20 and 50 per cent more than it quoted customers two months ago. The constraint is memory, not the chip. Since Washington restricted exports of advanced high-bandwidth memory to China in December 2024, Chinese chipmakers have bought HBM, the stacked memory packaged beside an accelerator's compute die, through grey-market channels at several times the price paid outside China." }, { "type": "p", "text": "Older parts moved too. The 950PR went from about ¥60,000 at the start of the year to more than ¥80,000, and Cambricon repriced its coming 690 between 20 and 30 per cent above the level it had quoted two months earlier. Every figure comes from people familiar with the matter; Huawei and Cambricon declined to comment." } ], "consequence": "If a deployment plan assumes Ascend or Cambricon parts at spring prices, re-quote it before committing. The input that moved is memory supply, not fab capacity.", "confidence": "reported", "note": "Reuters sourced the Huawei prices to three people familiar with the matter and Cambricon's to two. Read in a syndicated copy; the reuters.com original was not reached.", "sources": [ { "label": "China's AI chipmakers raise prices as high-bandwidth memory shortage bites", "url": "https://www.freemalaysiatoday.com/category/business/2026/09/10/china-s-ai-chipmakers-raise-prices-as-high-bandwidth-memory-shortage-bites", "publisher": "Reuters, via Free Malaysia Today", "date": "2026-09-10", "kind": "secondary", "provenance": { "byline": "Reuters, no individual byline in the syndicated copy", "institution": "Reuters", "stake": "The paper's best guess: the unnamed sources are most likely in the distribution chain, which gains from buyers believing prices will keep rising." } } ] }, { "id": "gpt-live-api", "section": "Models", "kicker": "In brief", "treatment": "brief", "headline": "GPT-Live 1 moved from ChatGPT into the API at five cents a minute, with the thinking billed on top", "byline": "By the Newsroom", "credit": "From OpenAI's API changelog", "body": [ { "type": "p", "text": "OpenAI made gpt-live-1, ChatGPT's default voice model since 8 July, generally available in the API on 10 September at $0.05 a minute, billed per second. OpenAI says it holds a full-duplex conversation \"while a backend model or agent handles reasoning and tools,\" and that backend bills separately at its own rates. The verdict: five cents buys the voice, and the thinking is a second meter." } ], "consequence": "Before comparing this with a voice stack you run yourself, work out the backend tokens a minute of your conversations burns.", "confidence": "verified", "sources": [ { "label": "OpenAI API changelog", "url": "https://developers.openai.com/api/docs/changelog", "publisher": "OpenAI", "date": "2026-09-10", "kind": "primary" } ] }, { "id": "openai-key-expiry", "section": "Tooling", "kicker": "In brief", "treatment": "brief", "headline": "OpenAI project keys can now expire, but the new lifetime cap applies only to keys made from now on", "byline": "By the Newsroom", "credit": "From OpenAI's API changelog", "body": [ { "type": "p", "text": "Since 10 September an OpenAI project key can carry an expiry date set when it is created. Administrators can also cap key lifetime for an organisation or project, and OpenAI's changelog says the cap requires \"newly created keys to expire within the configured limit.\" Every key minted before the setting existed is untouched by it. The verdict: those old keys are the exposure, and the new setting does nothing about them." } ], "consequence": "List every project key created before today and rotate it by hand.", "confidence": "verified", "sources": [ { "label": "OpenAI API changelog", "url": "https://developers.openai.com/api/docs/changelog", "publisher": "OpenAI", "date": "2026-09-10", "kind": "primary" } ] }, { "id": "cowork-windows", "section": "Applications", "kicker": "In brief", "treatment": "brief", "headline": "Anthropic has no fix yet for Cowork on Windows, and reinstalling will not bring it back", "byline": "By the Newsroom", "credit": "From Anthropic's status page", "body": [ { "type": "p", "text": "A Windows update released on 8 September stopped Claude Cowork on Windows from running local commands, Anthropic's status page says. Its workspace \"can no longer reach your computer's drive.\" Chat and file edits still work. Anthropic says there is \"no in-app workaround yet, and restarting or reinstalling won't help,\" and the incident has stayed open since 15:54 UTC on 10 September. The verdict: until it closes, Cowork on Windows is a chat window, not an agent." } ], "consequence": "Move any Cowork workflow that runs local commands to macOS or to a terminal agent until the incident closes.", "confidence": "verified", "sources": [ { "label": "Degraded functionality for Claude Cowork on Windows", "url": "https://status.claude.com/incidents/r1pqn1kb4hvk", "publisher": "Anthropic status page", "date": "2026-09-10", "kind": "primary" } ] }, { "id": "sakana-sumitomo", "section": "Applications", "global": true, "kicker": "In brief", "treatment": "brief", "headline": "Sakana AI gets Sumitomo's customer network as a sales channel, with SCSK doing the integration", "byline": "By the Newsroom", "credit": "From Sumitomo Corporation's release of 10 September", "body": [ { "type": "p", "text": "Sakana AI, the Tokyo model lab, formed an alliance with the trading house Sumitomo Corporation and its systems integrator SCSK on 10 September. In the companies' announcement, Sakana supplies models, SCSK takes projects from pilot to production, and Sumitomo sells through the subsidiaries and customer relationships it already has. No money, equity or first customer was disclosed. The verdict: a distribution deal with no named customer is not yet a channel, and a named deployment is what to count." } ], "consequence": "If you sell AI into Japanese finance or manufacturing, you now compete with a model lab that has a distributor.", "confidence": "verified", "sources": [ { "label": "Sakana AI, SCSK and Sumitomo Corporation alliance", "url": "https://www.sumitomocorp.com/ja/jp/news/topics/2026/group/20260910", "publisher": "Sumitomo Corporation", "date": "2026-09-10", "kind": "primary" } ] }, { "id": "kv-reuse-floor", "section": "Science", "kicker": "In brief", "treatment": "brief", "headline": "Reusing another agent's KV cache inside a new prompt scored worse than using no cache at all", "byline": "By the Newsroom", "credit": "From KVShareArena, University of Central Florida, submitted 9 September", "body": [ { "type": "p", "text": "KVShareArena, from the University of Central Florida, measured what happens when a coordinator reuses the KV caches of its subagents' reports. On its numbers, caches stitched naively into a new prompt did worse than no cache at all, scoring minus 0.82 where zero is no cache and one is full recomputation. Fixing positions rescued single-document questions, not multi-hop ones. Every result comes from models of 8 billion parameters or fewer. The verdict: never splice a subagent's cache into a new prompt without a repair step." } ], "consequence": "If your serving stack reuses KV caches outside the prompt prefix, compare multi-hop answers with and without reuse before shipping it.", "confidence": "verified", "sources": [ { "label": "KVShareArena: KV-cache reuse across contexts and model checkpoints", "url": "https://arxiv.org/abs/2609.10266", "publisher": "arXiv", "date": "2026-09-09", "kind": "primary", "provenance": { "byline": "Xi Shi and Qian Lou", "institution": "University of Central Florida", "stake": "The paper's best guess: an academic benchmark with a public leaderboard gains from being adopted as the yardstick, and discloses no commercial interest." } } ] }, { "id": "eu-no-sept-15", "section": "The Board", "kicker": "In brief", "treatment": "brief", "headline": "No EU filing deadline falls on 15 September for model providers, despite a claim that one does", "byline": "By the Newsroom", "credit": "From the European Commission's AI Act page, last updated 3 August", "body": [ { "type": "p", "text": "The European Commission's AI Act timeline, last updated 3 August, sets nothing for 15 September. It dates general-purpose model obligations to 2 August 2025 and enforcement to 2 August 2026. For frontier-scale models the Act's trigger is an event, not a date: under Article 52 a provider must notify the Commission within two weeks of a model meeting the systemic-risk threshold, or of learning that it will. A single deadline for every provider at once is not how the rule works." } ], "consequence": "Nothing is due on 15 September. The enforcement date that already passed, 2 August, is the one your compliance file should answer.", "confidence": "verified", "sources": [ { "label": "AI Act regulatory framework", "url": "https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai", "publisher": "European Commission", "date": "2026-08-03", "kind": "primary" }, { "label": "AI Act, Article 52", "url": "https://artificialintelligenceact.eu/article/52/", "publisher": "artificialintelligenceact.eu, publishing the regulation's text", "date": "2024-07-12", "kind": "secondary" } ] } ] }