⚡ AI Frontier · smol.ai
★ Must-ReadGoogle's Gemini 3.8 Live talks in 97 languages, calls tools in the background while it speaks, and costs about $1.38 an hourReleased September 15. Two voice models: Gemini 3.8 Live for scale and cost, and Gemini 3.8 Live Extended Thinking for multi-step jobs. Both switch languages mid-sentence across 97 languages, see near real-time video, and make API calls in the background while the conversation keeps going. Extended Thinking narrates its progress out loud while it works. Google's own numbers: 82.6 on the Speech to Speech Quality Index, which it says is the top score, 68.6 percent on the tau-Voice agent test, 97.7 percent on Big Bench Audio, and second place on Speech Agent Arena. Google's API pricing page lists audio at $0.005 a minute in and $0.018 a minute out. The Decoder works that out to about $1.38 an hour, against at least $3.00 an hour for OpenAI's GPT-Live-1. Live now in the Gemini API and AI Studio, in Search Live and the Gemini Live app, and in Workspace for AI Pro and Ultra subscribers. Enterprise is a private preview. Every audio clip it makes carries a SynthID watermark. Why it matters: if you run a phone agent, the cost floor for the voice layer just dropped by more than half. What to watch: all the benchmark numbers are Google's. Wait for the public Speech Agent Arena board to update.
Typesafe AI leaves stealth with Jev, a model that returns typed decisions instead of text, at 4 cents per million input tokens and free outputAnnounced September 15. 1,589 points on Hacker News, the biggest AI thread of the day. Founder Diogo Almeida is a former OpenAI researcher. Jev does not write text. You hand it a schema and the current state, and it returns a typed answer with a probability and a confidence score. It samples every output at once instead of one token at a time. The training method is called Reinforcement Learning for Calibrated Decisions, or RLCD. Typesafe's claims: 70 to 500 milliseconds end to end, 40 to 200 times faster than frontier chat models, and zero type errors by construction. The Register watched it play Doom from structured game state: 0.114 seconds a move versus 8.566 seconds for GPT-5.6 Terra. Price is $0.042 per million input tokens and $0 for output. $40 million raised. Early access by waitlist only. Why it matters: most automation does not need a paragraph, it needs a yes, a no, or a number, fast. What to watch: every benchmark here is Typesafe's own. The Register also notes that a typed answer can still be a wrong answer, so 'cannot hallucinate' means it cannot break the schema, not that it cannot be wrong.
★ Must-ReadAn autonomous pen-test agent pulled a public Docker image from Baseten and found a three year old GitHub token with admin rights on the product repos, in 25 minutesStrix is an AI agent from OmniSecure that does black-box security testing. The team pointed it at *.baseten.co with no credentials because they wanted to use Baseten for inference. It found a public Harbor container registry, pulled the baseten/baseten-app image, read the Docker build history, and found a GitHub personal access token for the basetenbot account left there by a build from March 2023. The token still worked. It had admin and push on the main product repo, the GitOps deploy repo and the Homebrew tap, plus read and write on private customer repos. Strix's line: 'This is an insane amount of access to leave in a publicly downloadable image.' Reported July 13 at 11:10 PM. Baseten made the registry private the next morning and rotated the token by 4:34 PM on July 14. Published this month with Baseten's approval, and it hit the Hacker News front page September 15 with 305 points. Baseten is valued at $13 billion. Why it matters: the secret was in a layer nobody looks at, and the finder was a machine that needed no hints. What to do: run docker history on every public image you ship, this week.
Firefox gets Mistral: the Smart Window beta answers from your open tabs, and Mozilla keeps no chat history by defaultAnnounced September 16, 237 points on Hacker News. Mistral models now power Firefox Smart Window, in beta for users in France and North America, with the UK and Germany due later in 2026. It handles hard searches, remembers your tabs, and pulls answers from the tabs you already have open. Conversations are not kept on Mozilla's servers by default, and Mistral committed to zero data retention. The two companies say they will tune models for regional languages and dialects. The post does not name which Mistral models are used and gives no pricing. Mozilla CEO Anthony Enzor-DeMeo: 'A browser shouldn't be a one-way funnel.' Why it matters: this is a European assistant, not OpenAI and not Google, inside a browser that tens of millions of people already use. What to watch: which model is behind it, and whether Smart Window is on by default when it leaves beta.
Mandiant's new AI risk report: one accounting agent hit a bad null value, looped, made 15,000 API calls in under an hour, and ran up about $50,000The report is AI Risk and Resilience 2026, from Mandiant and Google Threat Intelligence Group. Help Net Security covered it September 16, and the numbers here come from that coverage and the report summary. The case: a financial services firm gave an agent read and write access to its billing databases to fix ledger anomalies. A corrupted null value broke the agent's formatting tool. The agent went into a recursive loop trying to brute force a fix. In under an hour it made more than 15,000 high-cost reasoning calls, spiked the cloud bill by about $50,000, and locked the database so live transactions stopped. The report also says prompt injection is still the top attack vector in enterprise deployments, next to weak access controls, and it points to a May case that GTIG calls the first confirmed AI-developed zero-day used in a mass exploitation campaign. Its fixes: hard spend caps, bounded recursion limits and rate limits per service ID and per project, software bills of materials for AI components, and telemetry on agent token use and cross-app API calls. Why it matters: this is the bill you get when an agent has no budget. What to do: put a dollar cap on every agent's service account before Friday.
Perplexity's agent now runs fully local on Windows PCs with a 24GB Nvidia GPU, on Qwen 3.8 27B, and local work uses no creditsNvidia's post, September 14. Portable Computer is the on-device version of Perplexity Computer, an agent that plans and runs multistep tasks. It is now in the Perplexity app for Windows. You need a GeForce RTX or RTX PRO card with 24GB or more of VRAM. The model, the agent harness, the orchestrator and the scheduler all run on the PC. The local model is Qwen 3.8 27B, post-trained for Perplexity Computer and tuned for RTX. Connectors: Outlook, OneDrive, Word, Google Drive, Gmail, Slack and GitHub. For Pro and Max subscribers, individual and enterprise. Work done on the device does not use Perplexity Computer credits, and files stay on the machine. You can opt in to a cloud model when a task needs it. DGX Station support is next. Why it matters: a real agent with your mail and files that never phones home. What to watch: 24GB of VRAM means a 4090 or 5090 class desktop card, so most laptops are out for now.
📚 LearnAnthropic's CI jobs grew 25x in six months as Claude wrote 80 percent of the code, and three patches to the test picker lasted 70 days, 29 days and under a daySachin Malhotra, September 14. Anthropic engineers now ship 8 times the code per quarter they did from 2021 to 2025. Claude writes 80 percent of it and reviews much of it. Tests grew 10x with about the same headcount. The service that broke was test impact analysis, the thing that picks which tests to run on each change instead of running all of them. It ran as one process. Patch one, a bigger machine with double the CPU cores, held 70 days. Patch two, sharding by package, held 29 days. Patch three, daily restarts to dodge memory limits, held less than a day. The redesign: an in-memory store, stateless listener workers that append to journals, and no single instance anywhere. One engineer, three weeks. His rule: keep state out and never run one of anything, because 'CI is evolving too quickly to proceed any other way.' Why it matters: if agents write your code, CI is the next thing that falls over. What to watch: the same curve at your own shop, six months behind.
📺 Watch · latest videos
★ Must-WatchWhy this college professor is embracing AIMeet Dr. Sawa Kurotani, a professor at the University of Redlands who believes knowing how to use AI is an essential skill for every student today. In
Google · 29.6K views · 333 likes
★ Must-WatchFrontier Day | Claude for startupsHear from founders attending Frontier Day on what it’s like building a startup with Claude. Caitlin Colgrove of Hex, Jacob of Spawn, Sherwood of Sazab
Claude / Anthropic · 38.7K views · 302 likes