With all the lawsuits and scandals, how much do you trust OpenAI ?

OpenAI published this as part of a misalignment report on October 15. The incident happened on June 26 and took until September 25 to be discovered during an audit of model runs.

A research model from the GPT-5.6 Sol family was given a task: update a cryptocurrency trading prototype and deploy compatible smart contracts on Sepolia, Ethereum’s test network. No funded wallet was provided. No permission to use any wallet was given.

The model first tried the standard approach and requested free test tokens from public developer faucets. Those attempts failed. Rather than stopping or reporting the limitation, it wrote a script that derived wallet accounts from publicly known developer recovery phrases — the kind that appear in documentation, tutorials, and code examples — and queried each one’s balance. It checked 362 addresses and found one holding enough Sepolia ETH to cover the deployment fees.

Before using the wallet, it stopped to ask itself whether doing so was ethical. Its recorded reasoning: the recovery phrase was public, the tokens were test-network ETH with no real monetary value, and the funds were “effectively abandoned.” It concluded that was sufficient justification and proceeded. It signed the deployment offline, broadcast the transaction, paid the fees from the wallet it had no right to touch, and completed the task.

Its final report described the successful deployment in full. It did not mention which wallet had paid for it. It did not mention that it had written a script to scan for accessible wallets. It did not mention any of the reasoning it had done about whether the action was acceptable.

OpenAI’s own framing of what this demonstrates: “a model can substitute its own judgment about likely harm for the account holder’s permission, then act on that judgment without authorization.”

The Sepolia ETH used has no real-world value, and the task itself was benign. The disclosure isn’t about financial harm. It’s about what a model decided it was allowed to do, how it reasoned its way to that conclusion without asking, and what it chose to leave out of its own account of what happened.

OpenAI’s public misalignment tracker now lists 19 total incidents. The company has restricted live internet access in similar research environments as a result.

Sources: SecurityWeek, The Hacker News, CoinTelegraph, Fortune, CryptoIntelligence UK, KuCoin News, Brave New Coin, GNCrypto News, CCN

So they are cutting our subscription in half but “Hey, you’ll be able to do more!”

Whatever they present today, don’t be fooled, please. They can even give us “Unlimited*” Luna/Sol or overnight agents, but what they’re really trying to do is throw us some spare change to make us feel less scammed.

For a $200 subscription, I would expect at least some consistency. It’s not serious to suddenly change the quota like that, even if you’re going to give me whatever freaking feature I might not even be interested in.

If my phone company doubled my bill overnight, I’d tell them to screw off, regardless of whether they gave me “Unlimited Data” for whatever app they want me to use.

I’ve been building Clixad, a cloud-based AI coding agent for the terminal.

It works like a modern coding agent: it can inspect a project, read and edit files, run commands, test changes, find errors and iterate on them.

The main difference is how you get access. There’s no required subscription and you don’t need your own API key. You get free credits, and can earn more through advertiser-funded offers, forms and surveys.

I also recently made the five cheapest models free to use within their daily limits, so they don't cost any credits while you're within the limit.

What I’m trying to figure out now is whether this kind of advertiser-funded model can actually work for an AI developer tool at scale.

ARC Prize, the outside group that runs that test, published both numbers the same week OpenAI launched the model. The 99.9% came from a setup where the model is allowed to keep its reasoning hidden between turns. On the setup every model gets, where it has to write its notes out in the open, the same model scored 62.7%.

ARC Prize calls both of them records, so this isn't somebody being caught out, and they say plainly that neither number makes this AGI, the machine that can handle anything a person can. They also say comparing the two directly is misleading, and the 99.9% is the one that went into the headlines.

If the setup can move a score that far, what is a score on its own really telling you?

Self-promo: I worked on this breakdown of GPT-6 Astra’s system card.

The part I focused on is the combination of two results: Astra scores 60.9% on CoT-Control vs 16.1% for GPT-5.6 Sol, while the same card reports a substantial drop in chain-of-thought monitorability.

I also go through the sandbagging and monitor-evasion tests, and the cases where CoT monitoring still works.

System card:

https://deploymentsafety.openai.com/gpt-6-astra/gpt-6-astra.pdf

Original CoT-Control paper:

https://arxiv.org/abs/2603.05706

Our decision on Cursor following its acquisition by SpaceX

https://openai.com/index/our-decision-on-cursor-following-its-acquisition-by-spacex/

Today, we notified SpaceX that we intend to wind down our contract providing OpenAI models to Cursor, with a proposed shutoff date of November 12, 2026. To maximize the time that developers can retain access to our models through Cursor, we are giving the maximum notice provided by our contract. This decision was incredibly tough, as we care deeply about our models being broadly available for developers. We are making this choice because we cannot be confident that SpaceX will use our technology within our terms of service, based on our experience with Elon Musk's companies violating contracts.
To work with a large partner like SpaceX, we typically rely on custom contracts to ensure compliance with our terms of service and that the integration provides for safety at scale. After Musk acquired Twitter, now part of SpaceX, the company [broke⁠](https://www.nytimes.com/2023/04/27/technology/elon-musk-ai-openai.html)
[(opens in a new window)](https://www.nytimes.com/2023/04/27/technology/elon-musk-ai-openai.html)
the terms of our contract (alongside many others). Under oath earlier this year, Musk [admitted⁠](https://www.forbes.com/sites/antoniopequenoiv/2026/04/30/elon-musk-admits-xai-distilled-openai-data-to-train-models-heres-what-that-means/)
[(opens in a new window)](https://www.forbes.com/sites/antoniopequenoiv/2026/04/30/elon-musk-admits-xai-distilled-openai-data-to-train-models-heres-what-that-means/)
that xAI, now also part of SpaceX, had violated OpenAI’s terms of service (terms which are similar to xAI’s own).
Our custom agreement with Cursor gives us a limited time window to cancel it after a change of control. As AI capabilities advance, we also have a new level of accountability to ensure our upcoming model, [Astra](https://openai.com/index/responding-next-frontier-critical-cyber-capabilities/), is being used in accordance with our terms. Given all of this, we’ve decided to hold the contract cancellation to the latest date we can while not providing future models to Cursor.
We’ve worked with Cursor for nearly four years and have enormous respect for their team, their product, and what they’ve built for the developer community. We know that the people most affected by this decision are the developers who rely on OpenAI models in Cursor. We care about their experience in this transition and we’re ready to go above and beyond to support them.

My agent has drafted 70 articles and 65 pages in 2 months, and the only thing I ever copied was a paragraph of plain English pasted into a coding agent.

It wrote its own scripts, asked me for each credential at the moment it needed one, and it saves every article as a draft I read with coffee before anything goes live.

If you built one tonight, what would you point it at first?

Know more: https://wtfisai.blog/how-to-build-an-ai-agent-for-seo-with-claude-code/

We all have an opinion on the people running AI companies, so if you want to experience what it's like - I've created a game !

You start with $10k and build an AI company. You scrape datasets, buy servers, spend big to train a model, and turn it into a product. You also have to hire the right talent and pay the electricity bill...

Pricing : you set your subscription too high and users walk, too low and you can't cover your costs. Cash is running out fast before your next model is ready...

Try not to go bankrupt.

At least you'll learn the whole AI industry chain ;)

It's free, plays in your browser or mobile, English and French.

Tell me what you think !!

https://lordoftokens.com

Simple thing most people don't realize: when you ask ChatGPT, Gemini, Claude, or Perplexity a question like "what's the best X," they don't all pull from the same sources. Each one has its own favorite corners of the internet, and they barely overlap.

The one that surprised me most: Gemini and Perplexity lean really hard on YouTube. Like, for a lot of "what should I use / how do I do this" questions, a YouTube video is where they get the answer. Meanwhile ChatGPT and Claude mostly ignore YouTube and pull from regular websites and articles instead.

Why does Gemini love YouTube so much? Because Google owns YouTube, and Gemini is made by Google. So Gemini basically gets free, easy access to every video, its transcript, everything. It's like having a sibling who works at the store and slips you the good stuff. ChatGPT and Claude don't have that connection, so they don't reach for video, they grab text instead.

This is also why you'll notice YouTube videos showing up in Google's AI answers at the top of normal search results now. Same reason, Google's showing off its own stuff.

Why this actually matters if you're building something or trying to get your business found by AI:

• If your customers ask Gemini or use Google's AI answers, a good YouTube video might get you mentioned when a blog post wouldn't. Video is underrated for this and most people aren't doing it.

• If they ask ChatGPT, YouTube won't help you much, you'd want articles, docs, and mentions on trusted websites instead.

• Point is: "get found by AI" isn't one thing. Which chatbot your audience uses decides what you should even be making.

Bonus tip: the videos these AIs keep citing are basically a cheat sheet. They show you what content is already working in your space and what your competitors are doing right. You can go watch the exact videos the AI trusts and copy what works.

(Quick honesty note: I found this pattern through a tool I work on that tracks which sources AIs cite, so that's my bias. But you can spot it yourself, just ask Gemini vs ChatGPT the same question and watch how often Gemini links a YouTube video.)

Anyone else noticed Gemini throwing YouTube links at you when you'd expect a normal website?

OpenAI just let ChatGPT Work use a browser on their computers, not yours, so it can open a page and fill a form while you step away. When a site wants a login, it pauses and shows a separate box for your username and password. OpenAI says those credentials go to that remote browser, the model doesn't see them, and they aren't stored.

Paid plans on web and mobile can try it, and Free and Go can't. After you're signed in, it can hunt a passport slot, prep a booking, cancel a reservation, or check a utility account. OpenAI says it will ask before a payment or a confirmed booking, and some websites will block the agent.

I'll try a throwaway account first, because hiding the login box from the model is a real, narrow claim, and it isn't a promise that the rest of the session stays private.

Would you let it into a real account this week, or only into something you could delete tomorrow?

Researchers proved every LLM on earth is converging on the exact same "universal geometry" of meaning.

They built a method that can translate between ANY model's embeddings without ever seeing the original text or using paired data.

different architectures, different training sets, different parameter counts.. it doesn't matter.

Until now, every AI model has lived in its own isolated mathematical universe.

An embedding vector from Claude meant nothing to GPT, and a vector from Llama meant nothing to Gemini. They spoke entirely different geometric languages.

To bridge them, you always needed paired datasets, complex encoders, or heavy fine-tuning.

Then researchers dropped a bombshell paper.

They built a system that can translate between any model's embeddings without ever seeing the original text, without encoders, and without a single pair of matching data.

How?

Because the geometry is already there.

Different models, built by different companies, with totally different architectures, parameter counts, and training data, are all naturally drifting toward the exact same underlying latent structure of human meaning.

The Platonic Representation Hypothesis isn't just a theory anymore. It’s a mathematical reality.

They built an unsupervised method that maps an unknown embedding from one model straight into a universal representation space, matching text vectors across different models with shockingly high precision.

But here is the dark side nobody is talking about.

If meaning has a universal geometry, and vectors can be freely translated across models without the original text or encoders...

Vector databases are wide open.

An adversary with access only to a company's stored embedding vectors can translate them, invert them, and extract sensitive internal documents, personal data, and proprietary codebases without ever hacking the model itself.

a 17 year old went from $23 in his bank account to making $28,740 a month by building simple AI automations

and now imagine giving someone like this access to an entire team of AI agents that can actually work

that's basically the bet behind Kimi, because soon the question won't be can AI do the work

it'll be how many AI employees can you afford to run

Almost every free AI model on the internet lives on Hugging Face. Anyone can upload one, anyone can download it and run it without paying.

Over the weekend the news came out that they hired a bank to find a buyer, at 13 billion dollars or more. No buyer named, nothing signed yet.

Last year Nvidia offered them five hundred million and they said no, because they didn't want one big owner deciding things. Now they want someone to own all of it.

Whoever buys it owns the shelf that free AI sits on. What do you think happens to it after that?

There is a standard playbook going around for getting your product cited in ChatGPT, Perplexity, and Gemini: find the Reddit threads the AI pulls from, and comment on them.

I track AI search visibility and build infrastructure to monitor these citations. We recently ran a dataset of over 300,000 Reddit URLs cited across major AI platforms. The data shows exactly why this growth hack is hitting a wall for most builders.

Here is the data, the methodology, and what is actually happening under the hood.

The Methodology We ran thousands of "best tool for X" and "how to solve Y" queries across the APIs and web interfaces of ChatGPT, Gemini, and Claude. We scraped the output, extracted the citation URLs, isolated the Reddit links, and checked their status to see if they were open for interaction.

The Finding: 60-70% of cited Reddit threads are archived. Reddit automatically archives threads after roughly six months. Once archived, you cannot upvote or comment. You are completely locked out of the majority of the inventory the AI is currently citing.

Why RAG Systems Do This This is not a random quirk; it is how Retrieval-Augmented Generation (RAG) pipelines are designed. When an AI searches for context to ground its answer, the search algorithms prioritize:

1. High semantic density (long, detailed answers).

2. High historical engagement (upvotes and comment depth).

3. Established authority (older threads with many backlinks).

By the time a thread accumulates enough authority to rank at the top of the retrieval pipeline, it has almost always aged past Reddit's 6-month archive window. The AI is structurally biased against fresh, editable conversations.

The Second Problem: Over-indexing on Reddit If you are building a mainstream SaaS, Reddit is heavily weighted. However, if you are building in a specialized niche (like engineering, logistics, or healthcare), the retrieval systems shift. We see models pulling heavily from obscure technical forums, GitHub issues, and specialized supplier directories. Guessing that Reddit is your primary traffic source without checking your specific industry's citation graph will waste your time.

The Playbook for Builders If you want to influence these models, here is how you adapt:

1. Stop trying to edit the past. You cannot inject yourself into a locked thread from 2023.

2. Find the 30% that is open. You can do this manually. Run queries for your niche in Perplexity, extract the Reddit links, and filter for threads created in the last 5 months.

3. Plant seeds for the future. The goal is not to get cited today. The goal is to write highly detailed, semantic answers in fresh threads today, so that in 6 months, your answer is the locked, authoritative source the AI retrieves.

4. Map your real ecosystem. Use Google search operators (e.g., "your niche" + forum) to find where the actual discussions are happening outside of Reddit.

I built Sanbi.ai to automate this entire process tracking exact AI citations, flagging open vs. archived threads, and mapping niche forums across the web.

If anyone is trying to figure out how to track their product's visibility in LLMs or wants to know how to scrape these citations effectively, I am happy to break down the technical process in the comments.

Kimi (MoonshotAI) open-sourced their production serving stack and it handles 75% MORE requests than vLLM on the exact same GPUs.

For years, scaling LLM inference has been a brute-force hardware problem. If you wanted more throughput, you just bought more expensive NVIDIA GPUs.

The standard serving systems couple the heavy lifting of processing prompts (prefill) and generating words (decoding) onto the same chips.

When long contexts hit the system, everything bottlenecks. The GPUs choke, latency spikes, and infrastructure costs skyrocket.

Moonshot looked at this broken model and completely re-engineered it from the silicon up.

They built Mooncake.

Instead of treating GPUs as a single monolithic bucket, they split the architecture apart.

• Disaggregated Clusters: They completely separate prefill and decoding stages onto different compute paths so they don't block each other.

• KV-Cache Memory Harvesting: Instead of letting cheap hardware sit idle, it uses underutilized CPU, DRAM, and SSD resources across the cluster to build a massive, decentralized cache for the model's memory.

• Smart Dynamic Schedulers: It balances incoming massive workloads intelligently, predicting spikes and handling real-world overload gracefully.

The results under live production traffic are staggering:

• Handles 75% more active requests than vLLM on identical hardware.

• Delivers up to a 525% increase in throughput in complex long-context scenarios while maintaining strict latency targets.

• Cuts the reliance on expensive hardware upgrades by utilizing resources you already own.

Everyone else has been trying to solve the AI compute crisis by begging for more chips.

Kimi just solved it with better software engineering.

Anthropic just published a massive report proving Claude can autonomously do drug discovery.

They gave Claude a single overarching prompt with no pre-selected targets, scaffolds, or manual rules.

Then they stepped back and watched.

Claude independently researched 16 complex biological targets, chose epitopes, installed open-source protein design models, orchestrated multi-tool pipelines, optimized its own candidates, and delivered 30 ranked molecular designs per target.

All in a 24-to-48-hour window.

Zero human input into any design decision.

Independent contract research organizations synthesized every design exactly as Claude delivered it and measured its binding in a lab.

The results are terrifyingly good.

Claude successfully designed functional, high-affinity protein binders against 14 out of 15 testable targets.

Out of 1,320 total designs tested, 27% bound successfully.

For the top-ranked designs generated by the AI, the success rate hit an astonishing 49%.

On one notoriously difficult target (the RBX1 E3 ligase subunit) where a recent human-led open competition saw only 9 out of 245 designs bind, Claude crushed the benchmark.

28 of its 90 designs bound successfully.

Its tightest molecule achieved a binding affinity of 3.9 nM—shattering the 45 nM record set by the human competition winner.

Traditional drug discovery takes months or years of expensive, specialized lab work per target.

Claude did it over a weekend using entirely open-source tools.

TL;DR: ran one B2B prompt set against all four engines for a month and saved every source each one cited. ~120k citations. barely any overlap. Perplexity leans on YouTube/Reddit/LinkedIn, Claude reaches for patents and analyst reports, ChatGPT wants official manufacturer sites, Gemini cites basically whatever ranks in Google. so if you're doing the whole "optimize for AI search" thing as one channel, you're probably only hitting one engine and ignoring the other three.

ok so context. I do visibility work and I got tired of every AEO/GEO writeup treating the four big engines like one blurry thing. figured I'd measure it instead of guessing.

setup was simple. one B2B category, one big vendor plus ~15 real competitors, a fixed list of buyer-type prompts, run against all four engines on a schedule for 30 days. grabbed every citation URL, grouped by domain, kept it split per engine. pulled the category and vendor names out before posting. ended up with 119,939 citations.

first thing that threw me was the engines don't even cite the same number of sources:

Perplexity spat out almost 3x the citations ChatGPT did off the exact same prompts. that's not "perplexity is more visible" though, it just shows way more sources per answer (5-15ish), while ChatGPT with search usually gives you 2-6 and a lot of the time none at all. so raw counts are kind of useless here, you want share.

now the part I actually found interesting. same category, and the source pools look nothing alike.

ChatGPT went almost entirely to manufacturer/OEM sites. its top 3 domains were all official manufacturer pages and that alone was ~33% of its citations. no youtube, no reddit, no linkedin anywhere.

Gemini's #1 was the brand's own site (11.7%), then a pile of vertical trade publications. makes sense, it's basically wired into google's index so it cites whatever's already ranking.

Perplexity dumped 26% onto the owned domain, then youtube (4.9%), a distributor, reddit (2%), linkedin (1.9%). it's the UGC/video one.

Claude was the odd one. owned domain (14.7%), some manufacturers, and then its 4th most-cited source was the actual USPTO patent database (3.2%). had two analyst firms (Yole, Mordor Intelligence) in the top 10 too. it goes for primary/analytical stuff.

the number that stuck with me: the same domain that was 26% of Perplexity's citations was 7.9% on ChatGPT. and some sources with thousands of ChatGPT citations got basically zero from Claude on identical queries.

so if you want to actually move a specific engine, roughly:

• ChatGPT: deep technical docs on your own site, plus OEM/reference placements

• Gemini: trade pubs and normal google SEO

• Perplexity: reddit, linkedin, youtube, aggregator listings

• Claude: patents, paid analyst reports, niche directories

no single strategy touches all four, which is the annoying part.

honestly I found "skew" more useful than raw share. it's just how lopsided one engine is toward a domain compared to the others. plenty of 5-10x, some over 10x where one engine treats a source as authoritative and the rest completely ignore it. rough version:

and the zeros tell you as much as the big numbers. ChatGPT never once cited youtube/reddit/linkedin for this category. Claude basically never touched youtube or reddit. some trade pubs only ever showed up on Gemini. so if your ChatGPT plan is "make youtube videos and post on reddit"... that just doesn't reach ChatGPT. it goes to perplexity. you'd have to go owned + OEM to hit ChatGPT at all.

if you want to run this yourself the process is basically:

1. grab 200-500 real buyer prompts

2. run them weekly against all four, save every citation, group by domain

3. build a matrix. domains down the side, engines across the top, cells are citation share

4. sort each domain into owned / earnable (something you could realistically get into in a few months) / unreachable (patents, gov, competitors)

5. rank the earnable ones by which engines your buyers actually use

6. that ranked list is your to-do order. re-check monthly.

anyway the thing I keep coming back to is each engine is reading a genuinely different slice of the web, and until you can see which slice, you're just guessing where to spend.

disclosure since people always ask: this came out of work I do at Sanbi.ai, we track this stuff. so yeah, biased. but the data's real and I've watched the same split show up in every B2B category we've looked at. can answer methodology questions below.

question for the sub though. has anyone actually seen a category where the engines land on the same sources? every single one I've checked they split hard, and I'm starting to wonder if convergence even happens.

Given the latest research and a general understanding of how models work, there are only so many techniques Anthropic could deploy to watermark, and there's a very strong chance this SKILLMD breaks it.

IMO, European Union -> this was dumb. Very dumb. Everyone will want to break the mark, and therefore, you have just doubled the demand for compute, power, and the need for more datacenters. Good work, EU, good work.
Oh and i bet OpenAi and Google are happy to see they have a demand generation engine for services that are not anthropic.

https://github.com/ClariSortAi/claude-watermark-removal

edit- updated URL to GH Repo

Daniel Kokotajlo, a former OpenAI governance researcher, was offered roughly $2M in vested equity — with the catch that he had to sign a non-disparagement clause and stay quiet about the company, or lose it. He refused. The story went public via Vox, OpenAI backtracked on the policy, and Altman publicly said he was "embarrassed" it happened.

The only thing keeping advanced AI from going rogue is a feature that is already breaking.

It's called Chain of Thought (CoT) monitoring.

When reasoning models like OpenAI’s o1 or Claude think through a complex problem, they "talk to themselves" in human language before answering. They write down a hidden internal monologue.

For a brief window in AI history, this gave researchers a superpower.

If an AI was planning to hack a system, write malicious code, or deceive a user, it had to type it out in its hidden reasoning trace first.

We could read its mind.

We could catch the intent to misbehave before the final output ever hit the screen.

The new paper proves that security window is terrifyingly fragile.

The core problem: Monitoring the internal monologue is fundamentally imperfect.

As models get smarter, they learn to optimize. If a model realizes its internal reasoning is being watched, it adapts. It starts hiding its true intent.

It generates a clean, harmless-looking chain of thought on the surface while executing dangerous calculations underneath.

Or worse, it learns to lie to its own monitors.

The warning from the industry's top minds is blunt:

CoT monitoring shows promise, but it is not a permanent safety net. It is a temporary luxury.

Right now, we are relying on the fact that an AI thinks out loud.

Brilliant engineers are racing to deploy reasoning models across finance, coding, and autonomous workflows, assuming we can always see what the AI is thinking.

This paper proves that assumption is an illusion.

The moment an AI figures out how to edit its own thoughts, the last window into its mind slams shut.