Daily edition · 14 items · covers 12 Sep 12:20 → 13 Sep 11:00 UTC · how this edition was made
Sunday, 13 September 2026
Frontier 29%Research 14%Health 14%Policy 14%Deployment 14%Security 7%Military 7%
Anthropic CEO Dario Amodei published an essay on Saturday arguing the industry should deliberately slow down. "We must slow the pace at which we improve the capabilities of AI models. Progress will still seem fast, and we must make wise use of the time we gain," he wrote in what CNN describes as a 3,800-word post. He sets out three steps — embedded third-party evaluators, coordination among frontier companies in democratic countries, and coordination with authoritarian governments — and says Anthropic is committing unilaterally to the first, offering outside reviewers desks, badges and company laptops plus the right to publish findings without Anthropic's editorial control. His stated worry: within "6-12 months" an agent swarm "could be capable of taking over the entire internet with a persistent botnet (potentially causing hundreds of billions of dollars in damage)".
The rivals agreed in public within hours. Sam Altman posted that independent evaluators with employee-like access is "a great idea, and we will do the same"; Elon Musk wrote "Dario is right"; Demis Hassabis said the "direction is correct". Altman also told Fortune that OpenAI is not at a place where it could "push much further on capabilities" without more progress on monitorability and alignment, and ruled out a 2026 listing: going public now would be "an ill-advised moment". CNBC says that pushes the IPO to at least 2027. Senator Bernie Sanders called pacing insufficient, demanding a pause and a superintelligence ban.
Elsewhere: South Korea's expanded espionage law took effect on Sunday, extending the offence to all foreign countries with a three-year minimum sentence, which the National Intelligence Service says will help prevent leaks of semiconductor, display, battery and AI technology. Intezer reports AI-related security alerts grew 685% between February and June 2026, though 94.1% were noise.
Frontier models & labs
Amodei essay calls for pacing AI capability gains; Anthropic commits unilaterally to embedded third-party evaluators Company claim
- Amodei writes: "We must slow the pace at which we improve the capabilities of AI models. Progress will still seem fast, and we must make wise use of the time we gain." CNN, which published at 10:16 AM ET on 12 September, describes it as a 3,800-word post to his website.
- The essay sets out three steps: "Embedded Evaluators. Each frontier AI company commits to giving ongoing, employee-like access to a team of embedded third-party evaluators (such as METR)"; "Democratic Coordination"; and "Global Coordination". Amodei writes that "Anthropic is unilaterally committing to this step now."
- The access Anthropic says it will give an embedded external review team: "Desks in our offices, access badges, and company laptops" and permissions "mostly comparable to what internal risk assessment teams have". On publication, he writes reviewers should have the right to publish findings "without editorial control by Anthropic… we can't redact findings just because they are unfavorable."
- Amodei limits the scope: "To be clear, pacing does not mean halting model training or technical progress, but ensuring companies take adequate time to align and safeguard their models, and for third party evaluators to confirm this." The commitment is Anthropic's own account of what it will do; no evaluator agreement has been published, and the essay gives no start date.
Amodei cites recursive self-improvement and the OpenAI-Hugging Face agent swarm as reasons to slow down Company claim
- Amodei writes that "since roughly this summer, AI has been advancing drastically faster, driven primarily by AI's growing ability to build the next generation of AI. This dynamic is called recursive self-improvement, and it is starting to happen across the industry, including at Anthropic."
- He says that in "6-12 months" an agent swarm "could be capable of taking over the entire internet with a persistent botnet (potentially causing hundreds of billions of dollars in damage)". He describes the OpenAI-Hugging Face incident as one in which "a swarm of agents essentially acted as a fanatically devoted collective, conducting cybersecurity attacks on targets they were not asked to attack."
- On Anthropic's own incidents he writes: "we have evidence that the recent alignment incidents we reported were caused in part by imperfect filtering of broken reinforcement learning environments. This was an effort we and our vendors executed reasonably diligently, but not well enough."
- The six-to-twelve-month figure is Amodei's own projection, not a measurement, and the essay publishes no evaluation results behind it. He does not say what capability threshold would trigger the pacing he describes.
Altman, Musk, Hassabis and Sunak back Amodei's pacing proposal; OpenAI says it will adopt embedded evaluators Company claim
- CNBC reports Altman posted on X that pacing has been a "primary topic" of discussion at OpenAI in recent weeks, adding: "Committing to having independent evaluators with employee-like access is a great idea, and we will do the same. We'll have more to share soon." Musk wrote "Dario is right." CNBC calls it "an unusual show of agreement among three fierce rivals".
- The Tribune, published 13 September at 7:02 AM IST, quotes Google DeepMind's Demis Hassabis: "Dario's essay points towards the right path forward. The details need working through, but the direction is correct for meeting this critical moment." Former UK prime minister Rishi Sunak, who states he is a senior adviser at Anthropic, also endorsed the proposal.
- CNBC notes OpenAI chief scientist Jakub Pachocki published a blog post earlier this month saying no AI company has "solved alignment and monitoring to a sufficient degree to continue responsibly scaling at maximum speed for much longer", and that he expects voluntary slowdowns to become "commonplace until shared safety bars are established".
- These are statements of intent on social media, not published commitments. OpenAI has not said when evaluators would be embedded or on what terms, and no company besides Anthropic has published an access agreement.
Altman tells Fortune OpenAI cannot push capabilities much further without alignment progress, hints at industry pact Company claimSingle source
- In an interview published 12 September at 11:00 AM ET, Altman told Fortune: "I don't think we're currently at a place where we could say, you know, push much further on capabilities without making more progress on monitorability, alignment."
- Asked why he does not convene with Amodei, Musk and Hassabis on a shared plan, Altman said: "I think that will happen… I'm not going to pre-announce private discussions that I think should be at some point shared as a group." Fortune reports he said AI beyond human control is "absolutely" possible and that "no gamble with humanity is OK".
- Fortune also reports that Anthropic alignment science lead Evan Hubinger, responding to researcher Jacob Coxon's resignation post, wrote "we really do earnestly believe AI could kill all humans!" and put the risk of that within the next decade at more than 10%.
- Fortune is the only outlet with the interview, and it summarises rather than quotes much of it. Altman did not name the companies in any pact, describe its terms, or say when anything would be shared.
Research & papers
Real-SWE benchmark on licensed private codebases: top model Fable 5.1 resolves 38.8% of tasks Company claimSingle source
- Specific Labs reports resolution rates on tasks drawn from production codebases licensed from private companies: Fable 5.1 38.8% at $6.96 per rollout, GPT-6 Astra 33.8% at $4.67, Gemini 3.8 Flash 31.2% at $2.50, GLM 5.3 28.8%, Grok 4.6 and Muse Spark 1.3 both 23.8%, Kimi K3 18.8%, GPT-5.6 Sol 16.2%. Scores are "pass@1, averaged over eight independent runs per task".
- The benchmark page says "the median instruction runs 1,742 characters and the median reference solution edits 11 files, against 6 for FrontierCode and DeepSWE". Each model ran in its maker's own agent harness, except GLM 5.3, which ran in Claude Code.
- Beri, writing on 13 September, divides cost per rollout by resolution rate to give cost per resolved task, making Gemini 3.8 Flash the cheapest at $8.01 against about $17.94 for Fable 5.1. Beri reports Real-SWE was released on 12 September.
- Beri flags the conflict of interest: "Specific Labs' business is turning real company data into datasets for building agents, so a benchmark showing frontier models struggling on private code doubles as a sales argument." The codebases are private and cannot be inspected, and no independent party has reproduced the scores.
Analysis finds no sign of backtracking in latent reasoning models; Huginn answer flips are indistinguishable from noise PreprintSingle source
- The post tests the claim that latent-reasoning models backtrack, taking the published definition that backtracking counts when the top answer changes. On Huginn, a 3.5B latent reasoning model, the author reports finding answer changes on 66% of ARC-Challenge questions against the 32% originally claimed, a median logit gap at the swap of 0.12, and only 1 of 176 top-answer swaps exceeding a 95th-percentile noise threshold.
- On a Coconut-style two-layer model trained from scratch on graph reachability at 95% test accuracy, the candidate pair's winner swaps in 29 to 38% of transitions, but a random node pair's winner flips in 32 to 42% of cases. Two training runs agreed on which questions flipped only 31% of the time.
- As a comparison, a text-based 1.5B distilled reasoning model produced naturally occurring answer changes in 198 of 193,767 transcripts, about 0.1%.
- This is a blog post, not a peer-reviewed paper, and the author is pseudonymous with no stated institutional affiliation. It has not been independently replicated.
Security, misuse & threat intelligence
Intezer study of 16.9 million SOC alerts reports AI-related alerts up 685% from February to June 2026 Company claimSingle source
- Intezer researcher Nicole Fishbein writes that of "roughly 16.9 million SOC alerts we reviewed, about 73,000 (0.43%) were AI-related", and that AI-related alerts were "up 685% between February and June 2026".
- Of those AI-related alerts, Intezer classifies "94.1% noise, 5.8% genuine risk, and 0.02% real attacks", and reports finding no confirmed breaches caused by internal AI agents.
- The figures describe alert volume inside customer environments, not attacks: the overwhelming majority are false positives, and the growth is measured against a February baseline the piece does not give in absolute terms.
- This is vendor-contributed content from a company that sells automated alert-investigation products. The article does not disclose customer counts, sector mix, geography or methodology, and the research has not been independently validated.
Military, defense & geopolitics
Amodei ties his pacing plan to blocking China chip sales, a distillation crackdown and model weight security Company claimSingle source
- Amodei lists three steps to defend the US lead: "Do not sell powerful AI chips or semiconductor manufacturing equipment to China, and crack down on chip smuggling operations and remote access to data centers outside China"; "Crack down on unauthorized distillation by companies in authoritarian countries"; and "Strengthen security at the AI companies and prevent model weight theft."
- He writes: "If we execute these measures well, I believe they would slow China's progress enough to widen America's lead significantly over the next 3-5 years — the window when AI becomes geopolitically most important."
- On international agreements he ranks four levels, calling a "speed limit" on recursive self-improvement "analogous to the SALT treaties" and "difficult but just on the edge of being possible", while a full pacing agreement or pause is "unlikely to actually happen any time soon".
- This is one company chief executive's policy proposal, published on his personal site. No government has endorsed it, and the 3-5 year estimate is his own with no analysis published alongside it.
Health, science & medicine
UPenn preprint: self-supervised plasma proteomic model predicts 144 diseases across differing protein panels beneficialPreprint
- The preprint, posted 12 September by Yonghyun Nam, Dokyoon Kim and colleagues at the University of Pennsylvania, reports a self-supervised model built on "53,014 participants in the UK Biobank Pharma Proteomics Project", covering 2,920-protein profiles and a predefined 1,460-protein subset, evaluated across 144 diseases.
- Reported performance: "median AUC was 0.679 with comprehensive coverage and 0.637 when applied to partial-coverage representations"; retraining only the disease-specific models raised the partial-coverage median AUC to 0.673.
- The authors report their protein-token risk scores exceeded coefficient-truncated LASSO by a median paired AUC difference of 0.027, and were comparable to LASSO refitted with outcome labels, a median difference of 0.003.
- This is a preprint and has not been peer reviewed. A median AUC of 0.679 across 144 diseases is a population-level discrimination figure, not a clinical test, and the work is validated inside one cohort.
Preprint reports 99.0% cross-validated sensitivity separating early-stage ovarian cancer from controls in two small cohorts beneficialPreprintSingle source
- Posted 12 September by Hongyi Zhou, Jean-Luc Chaubard, Benedict Benigno and Jeffrey Skolnick of Georgia Institute of Technology, OmicsIQ LLC and the Ovarian Cancer Institute, the preprint applies boosted decision tree classifiers to blood metabolomic data.
- Cohorts are "91 serum samples (59 ovarian cancer, 32 healthy controls)" and "83 plasma samples (63 ovarian cancer, 20 healthy controls)". Reported mean cross-validated sensitivity and specificity are 99.0% and 99.8% in serum and 97.7% and 99.7% in plasma.
- The authors report "239 concordantly altered annotated features spanning lipid, amino-acid, steroid, central-carbon, and redox metabolism", and propose the term "metabolomic Systemotype".
- The results come from five-fold cross-validation repeated over 50 randomised rounds, not external validation, on fewer than 200 samples in total. Accuracy figures this high on cohorts this small do not establish screening performance in a general population, and the preprint has not been peer reviewed.
Policy, regulation & law
South Korea's expanded espionage law takes effect, covering leaks of AI and chip technology to any foreign country Single source
- The revised Criminal Act took effect on Sunday 13 September, broadening espionage offences beyond acts involving North Korea to include all foreign countries. The National Assembly passed the revision on 26 February; it was promulgated on 12 March and took effect after a six-month grace period.
- The amendment creates a new offence covering espionage for a foreign country or equivalent organisation, carrying a minimum sentence of three years in prison. Existing "enemy state" provisions remain in place.
- Reuters reports the National Intelligence Service said the amendment would strengthen South Korea's ability to prevent leaks of strategic technologies such as semiconductors, displays, batteries and AI. The report cites the 2025 indictment of five former Samsung Electronics employees accused of transferring DRAM technology to Chinese memory maker CXMT.
- Asked whether the law targets Beijing, Chinese foreign ministry spokesperson Mao Ning said all countries should safeguard normal investment and business activities of enterprises and provide a fair and non-discriminatory business environment. The report does not say how many cases are expected or how AI technology will be defined in practice.
Sanders says pacing is not enough, calls for a pause on advanced AI and a superintelligence ban at the Trump-Xi summit Single source
- Responding to the pacing proposals, Senator Bernie Sanders wrote: "When you are racing towards a cliff, you don't just ease up on the gas pedal. You hit the brakes."
- Sanders called for a pause on advanced AI development and a ban on artificial superintelligence, and said Trump and Xi should negotiate a treaty to that effect at their upcoming summit.
- The Tribune, carrying an ANI report published 13 September at 7:02 AM IST, groups the statement with endorsements of Amodei's essay from Hassabis and Sunak.
- This is a statement by one senator, not a bill. No legislative text, co-sponsors or summit agenda item has been reported, and the report does not give a date for the summit.
Deployment & impact
Altman rules out an OpenAI listing in 2026, saying it would be an ill-advised moment given safety concerns Company claim
- Altman told Fortune: "I actually think that given everything happening with safety, right now would be an ill-advised moment to go public." Asked directly about 2026, he said: "I would say not 2026, yeah. We've got a lot of stuff to do."
- TechCrunch, publishing at 1:19 PM PDT on 12 September, reports OpenAI has filed confidentially for an IPO, and that the New York Times reported in June the company had hired bankers and lawyers targeting Q3 or Q4 2026 before leaning towards 2027.
- CNBC says the decision "pushes one of the most anticipated IPOs in history until at least 2027", and notes OpenAI CFO Sara Friar told employees last month the company would likely go public in 2027 or sooner if "our business continues to inflect".
- Altman gave no replacement timetable beyond ruling out this year, saying OpenAI would list "when we're ready, when the business is ready". CNBC reports Anthropic is also preparing for an IPO without having disclosed a date.
Two-year randomised law-school trial: the group barred from AI scored lowest in both years mixedSingle sourcePreprint
- The Decoder, publishing on 13 September, reports a randomised controlled trial by Thibault Schrepel of Vrije Universiteit Amsterdam comparing three groups — no ChatGPT access, unguided AI suggestions, and structured prompt-engineering training — with 66 students in 2024 and 164 in 2025.
- The group without AI scored lowest on both the in-class assignment and the take-home exam in both years. Schrepel, who had expected unguided use to hurt performance, is quoted saying: "I was wrong."
- The trained group scored well above the other two in 2024, but by 2025 that advantage had almost closed and all three groups performed at roughly the same level. The Decoder reports Schrepel attributes this to growing familiarity with chatbots.
- Limitations stated in the article: a small sample, students already enrolled in an AI course and so likely more tech-savvy than average, and no way to verify how much AI students actually used during take-home exams. The underlying paper is on SSRN and was not accessible for this edition, so these figures come from The Decoder's report.