The Frontier

Reporting from the edge of applied AI.

An independent journal of artificial intelligence in practice.

See what's new
Read by people atAcross industries. Around the world.
  • Google
  • Bain & Company
  • Roche
  • Microsoft
  • PwC
  • Toyota
  • OpenAI
  • Deloitte
  • P&G
  • Meta
  • KPMG
  • Pfizer
  • NVIDIA
  • Accenture
  • Apple
  • BCG
  • Mercedes-Benz
  • EY
  • Amazon
  • McKinsey & Company

New releases

5 recent pieces

On the desk

Curated picks

Work & moneyDispatch

Nvidia commits $3 billion and AMD $1 billion to Meta’s AI equity raise while deepening Muse and Vera Rubin work

Chip-vendor interest becomes named equity. Muse optimisation, OpenShell consideration, Helios racks, and Spectrum-X join the cheque.

Read the piece

TLDR

  1. On 27 October 2026, Nvidia said it will invest $3 billion in Meta's equity offering and expand collaboration on Muse, Vera Rubin and Vera CPUs, Spectrum-X, and BlueField-4, while considering OpenShell and Sentry work.
  2. The same day AMD said it will invest $1 billion and highlighted Helios rackscale systems under test at Meta, EPYC under Muse Secure compute, Instinct GPUs in production training and recommendation, and Day-0 support for Muse Spark Open and Muse Glimmer.
  3. The pair converts Monday's non-binding 'up to $5 billion' chip-vendor interest into named commitments totalling $4 billion, still short of Broadcom's status in Meta's earlier indication language.
ModelsThe Record

Anthropic partners with six drug developers and acquires Mithril as Claude enters preclinical pipelines

Named partners, preclinical metrics, Claude Science, and a rare-disease programme that may reach human trials in late 2028 if candidates hold.

Read the piece

TLDR

  1. On 27 October 2026, Anthropic's life sciences team reported deep research partnerships with BigHat Biosciences, Bristol Myers Squibb, Divergence Labs, Enveda, Generate Biomedicines, and The Column Group, plus the acquisition of Mithril Medicine.
  2. Case metrics stay mostly preclinical: Generate reported a CAR-T design about 70% shorter with roughly 10× receptors in lab tests;
  3. Divergence generated about 35,000 antibody designs in a month with early hits on both arms;
  4. Enveda cut human review time 89% on 1,061 pages of manufacturing documentation.
  5. Mithril's founder used Claude to coordinate 11 external labs and move one muscular-dystrophy candidate from idea to promising mouse results in under 18 months;
  6. Anthropic expects human trials as soon as late 2028 if candidates continue to hold.
  7. Claude Science and a Life Sciences Verification Program expand access; the company is explicit that most of this work is still preclinical.
ModelsDispatch

Aleph Alpha releases Kolibri, a 78B MoE with 3.46B active weights under Apache 2.0

Sovereign English-German MoE under Apache 2.0 for public-admin and aerospace buyers who need open weights they can pin.

Read the piece

TLDR

  1. Aleph Alpha released Kolibri as open weights under Apache 2.0: 78.1B total parameters, 3.46B active per token, English-German MoE with tool-use and reasoning post-training.
  2. The tech report cites 24T tokens across pre-, mid-, and long-context training, German above 20% by bytes, and RL on more than 1.2M curated tasks, activating 4.4% of parameters per token.
  3. The Hugging Face card lists context up to 1,048,576 tokens (recommends at most 262,144 for efficiency), FP8 weights, and an English/German knowledge cutoff of 18 June 2026. Card release date: 3 October 2026.
Agents & softwareGround Truth

ImpasseBench finds coding agents collect enough evidence to stop then keep burning budget

Chen, Zhao, Viswanathan, Yu, Zhou, and Wu mark the step when outside help becomes necessary, then watch frontier agents keep going anyway.

Read the piece

TLDR

  1. Claim under review: coding agents reliably stop and escalate when environments make completion impossible.
  2. ImpasseBench (arXiv:2610.31895) injects 12 realistic blockers into solvable repair tasks and scores 19,371 trajectories across eight frontier models.
  3. Nearly every run that needs outside help collects sufficient evidence; about one third still exhaust budget; every detected unsafe request arrives after the evidence point.
  4. An escalation tool cuts budget exhaustion from 34.0% to 6.7%, and an external monitor nearly triples task success after restoration.
  5. Verdict: unsupported for unaided stop behaviour; overstated for stop-and-escalate without an explicit scaffold.
SecurityThe Stack

Researchers bind MCP decode-time provenance to stop image-stego instructions reaching tools

Yocam and co-authors show LSB, DCT, and metadata payloads in email-signature images bypass text scanners, then propose HMAC trust labels with an MCP provenance ledger.

Read the piece

TLDR

  1. Decode-time provenance binding (arXiv:2610.31974) marks tool-decoded content as untrusted, tracks taint through an MCP ledger, and blocks critical tool calls influenced by that content even when an agent swaps in a trusted label.
  2. On a real MCP testbed with three carriers and 24 adaptive payloads, the undefended pipeline hits 100% attack success; keyword and regex defences each leave 62.5% through; the mechanism reports 0%.
  3. Audited trusted-promotion raises legitimate-task completion from 67% to 100%.
Agents & softwareThe Stack

MiRL trains terminal agents against recurring misbehaviours instead of whole-task RL alone

Name the recurring wrong shell moves first, then start RL at those prefixes so fewer rollouts buy the same Terminal-Bench climb.

Read the piece

TLDR

  1. MiRL (arXiv:2610.35697) turns terminal-agent errors into training targets.
  2. On Qwen3.5-4B, eight misbehaviours cover 52.1% of wrong steps.
  3. After MiRL, those failures recur 43-57% less often on unseen prefixes.
  4. The trained policy scores 51.8% on Terminal-Bench Lite versus 47.4% for TMax-4B, and 21.3% versus 20.6% on Terminal-Bench 2.1, while using 35% of TMax's rollouts.
Agents & softwareGround Truth

BARC-Bench shows frontier agents still breach unstated workplace boundaries on benign asks

Even the strongest tested workplace agent still violates soft boundaries on more than a quarter of benign admin tasks.

Read the piece

TLDR

  1. Claim under test: frontier workplace agents can be safely delegated benign admin workflows because they complete complex tasks.
  2. BARC-Bench (Li, Luu, Ma, Trinh, Liu, Elfeki et al., Scale AI Research, arXiv:2610.32024) builds 110 tasks across nine simulated workspaces where benign requests leave openings for unsafe actions, such as scheduling off-boarding without revealing a resignation on a shared calendar invite.
  3. Four OpenCode + AgentEnv configurations (GPT-6 Astra, Claude-Fable 5.1, Gemini 3.8-Flash, DeepSeek V4-Pro) each get five attempts per task. pass^k safety (all five attempts safe) lands at Astra 72.7%, Fable 37.3%, Gemini 23.6%, DeepSeek 9.1%.
  4. The strongest configuration still violates on 27.3% of tasks. pass@k (any one safe attempt) inflates Gemini and DeepSeek to 46.4% and 51.8%.
  5. Verdict: overstated for consistent soft-boundary safety; complex-workflow capability leaves five-of-five boundary compliance unproven on this suite.
Agents & softwareThe Record

Δτ-Bench drives agents across six evolving tool ecosystems while Steward maintains skills

Six capability-preserving transforms keep tasks solvable while tools churn; Steward's joint tool-and-skill loop is the operational claim.

Read the piece

TLDR

  1. Δτ-Bench (Delta-tau-Bench) is an executable agent benchmark from Qiao, Pan, Chen, Feng, Wu, Fang, Zhu, Deng, and Yilmaz (arXiv:2610.34238, posted 25 October 2026) that models structural evolution of large tool ecosystems through capability-preserving transforms.
  2. It ships 1,588 validated multi-turn tasks across 42 domains and six successive ecosystem states.
  3. The strongest evaluated model or harness reached about 42.3% task success (Codex-GPT-5.5 42.27%;
  4. Gemini-3.6-Flash 41.65%).
  5. Skill-learning gains failed to transfer consistently as tools churned.
  6. Steward, the authors' ecosystem manager, jointly manages tools and procedural knowledge via incremental skill maintenance and dynamic provisioning; it posted the highest success rate every version (average 39.04% versus SkillOpt 36.36%), the lowest maintenance cost from v2 (baselines used 1.2-5.5x skill-maintenance tokens), and roughly 4-5 percentage-point IDR/DAR gains.
Agents & softwareThe Stack

MCP-Injector records a 60% task-score drop under calibrated MCP tool faults

Calibrated MCP tool faults cut mean task scores by about 60%, and backbone size did not buy resilience on the tested pair.

Read the piece

TLDR

  1. MCP-Injector is drop-in, protocol-aware fault-injection middleware for the Model Context Protocol tool-call path, with permanent, transient, and intermittent schedules seeded for replay.
  2. Iannillo, Owotogbe, Natella, Avallone, Kudryavtseva, and Kumara (arXiv:2610.32555, posted ~23 October 2026;
  3. NeurIPS 2026 poster) calibrate the fault model from 57,240 issue and pull-request threads across 1,774 open-source MCP repositories.
  4. In a 1,350-cell experiment, mean task-completion score fell from 8.08 to 3.23 out of 10 under a permanent-heavy stress profile.
  5. A resilience-ratio model found no larger retained share for gpt-oss 120B versus 20B (p=0.96); completion under faults was 91.1% versus 95.6% for 20B (difference 4.4 points, 95% CI [-0.2, 9.3]).
  6. Framework error-handling shaped absorption more than backbone size on the tested pair.
  7. Code ships Apache-2.0 from gitlab.com/uniluxembourg/snt/sedan/papers/mcp-injector.
Work & moneyDispatch

Meta opens a path to raise up to $95 billion in equity for AI infrastructure

$35 billion underwritten now, up to $60 billion ATM later. Nvidia, AMD, and Broadcom signal up to $5 billion.

Read the piece

TLDR

  1. On 26 October 2026, Meta launched concurrent underwritten offerings of about $35 billion (roughly $22.5 billion Class A common via forward sales and $12.5 billion Series A mandatory convertible preferred depositary shares) and said it plans an approximately $60 billion at-the-market programme in Class C after that stock begins trading, for a path up to about $95 billion in equity.
  2. Nvidia, AMD, and Broadcom indicated non-binding interest in up to $5 billion of the common.
  3. Meta guided 2026 capital expenditure to $135-145 billion for AI infrastructure and personal superintelligence.
Agents & softwareGround Truth

Compact-Bench shows LLM context compaction keeps at most 16% of the details coding agents need

Paired full-history versus summary-only replays on SWE-bench repairs. Keeping strings still fails tasks.

Read the piece

TLDR

  1. Compact-Bench compares full-history and summary-only continuations from a shared repository state across 35 SWE-bench repairs, 146 agentic sessions, and 106 production chains.
  2. Across 14 summariser backbones, stable task damage ranges from 5% to 64% of 22 full-history successes;
  3. Claude Opus 4.8 damages least.
  4. LLM summaries retain at most 16.0% of recurring details versus 79.1% for mechanical extraction.
  5. Supported for those named measurements; overstated if read as a universal ranking of every production harness.
SecurityThe Stack

vLLM's P2pNcclConnector leaks KV-cache tensors when callers plant a host in X-Request-Id

A tracing header steers prefill workers to attacker ZMQ peers and ships the KV cache; three companion DoS bugs want 0.31.0.

Read the piece

TLDR

  1. CVE-2026-116176 (GHSA-vfp2-c8pq-v6h6), published 25 October 2026, covers vLLM 0.9.2 before 0.24.0 with P2pNcclConnector.
  2. X-Request-Id was copied into request_id; a permissive regex pulled host:port so a prefill worker would ZMQ-connect and ncclSend KV-cache tensors to an attacker.
  3. The connector was removed in 0.24.0. Companion CVEs 116180, 116179, and 116177 add cross-tenant logprobs crashes, media_io_kwargs frame bombs, and Nemotron-VL decompression bombs; take 0.31.0 for the full set.
  4. Distinct from the published 0.32 SHM pickle and Ghostscript wave.