
ALT Cartoon titled AI model loyalty, enterprise edition: share of engineers' AI coding work at one HR software company, May vs October. Left: next to an office door marked EXIT with a sticky note reading "It's not you. It's your price per token. - Finance", a crying purple robot labeled Anthropic models (leaving with its stuff) carries a moving box marked 57% to 18%. Middle: a sad developer at his desk says "But I liked how it wrote code..." and an accountant holding an invoice replies "I liked how it wrote invoices." Right: a smiling teal robot labeled OpenAI models (moving in) hurries in with a box marked 16% to 52%. Footer: The Information (Oct 24, 2026): at Rippling, Anthropic models did 57% of engineers' coding work in May, OpenAI's 16%; now OpenAI 52%, Anthropic 18%. Rippling wanted to cut costs and OpenAI was cheaper, its CEO said. Illustration. MODEL, readmodelmag.com.

ALT MODEL builder tip card: "Patched and unpatched Node both say brotli 1.1.0. The version string won't tell you. One constant will." Left terminal, Node v20.19.2: process.versions.brotli 1.1.0; zlib.constants.BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH undefined. Verdict: unpatched, Node 20 is end-of-life, no fix. Right terminal, Node v22.23.4: same 1.1.0; constant is -17. Verdict: patched. Below: Python requests decoded a br response with Brotli 1.2.0 installed, code never imported brotli; pip-audit 2.10.1 flags it, exit 1, 0.4 s. Fix: Node 22.23.4/24.22.1/26.12.1, Brotli 1.2.1+, brotlicffi 1.2.1.0+, rebuild images. Catch: uninstalling Brotli gave status 200 and garbled text, no error; distro fixes keep old version numbers. Tested by MODEL Editors, Oct 24 2026.

ALT Cartoon titled AI has finally reached the other 493, subtitle: revenue per worker and profit margins, Mag 7 vs the rest of the S&P 500. Left panel, The Mag 7: a chart with revenue per worker and profit margin lines shooting up and to the right, and a teal robot in a party hat saying: Tokens? Put it on the growth budget! Right panel, The Other 493: a chart with both lines dead flat and a yellow sticky note asking AI payoff goes here? A sweating grey robot hands over a long receipt labeled Tokens, while an accountant with glasses at a desk stamps a sheet COST CENTER and says: Filed under: expenses. Charts marked cartoon, not to scale. Footer: Apollo Daily Spark, Oct 24, 2026: revenue per worker and profit margins rising for the Mag 7, flat for the S&P 493. No signs yet of AI boosting productivity growth; firms starting to see token spending as a cost center. Illustration; characters are not real people. Not investment advice. Watermark: MODEL, readmodelmag.com.

ALT MODEL hot take card titled Force-pushing over a leaked key is not revoking it. Left panel, How LiteLLM 1.107.0 got poisoned, from LiteLLM's root-cause report, Oct 23, 2026: May 27, opencode.json with an agent-platform master key hits a public repo, force-pushed over, never revoked; Oct 10, the key opens the agent platform and its API hands back an org owner's unscoped GitHub CLI token; Oct 10, throwaway CI branches post secrets to webhook.site, two more maintainers' tokens; Oct 21, releaser pointed at lookalike fork Berri-AI/litellm, branch protection overridden, gate approved; 27 minutes later, LidorMachluf flags it in a GitHub issue. Right panel: 136 days from leaked key to first use; 11 days attacker held owner access before release; 7 malicious wheels on PyPI; about 2 hours before PyPI quarantined them. Footer: Leaked a key? Rotate it. Give agents scoped tokens, never yours.

ALT Cartoon titled "AI agents have reinvented middle management. Anthropic's fix for too many subagents: a reorg." A customer asks "Where's my order?" An org chart of box-head robots: Orchestrator (VP of Agents), Router Agent, Planner Agent, and specialists Billing, Shipping, Returns, Brand Voice and Subagent #47 ("Nobody knows"). Notes show the message degrading: "customer wants order", "customer wants to order", "ship them a new order?" Final answer: "Great news! We've shipped you 3 more orders." Caption: "The telephone game, now with a token bill." A pinned memo quotes Anthropic (Oct 22): "the agent architecture becoming a copy of their org chart (Conway's law at work)." New structure: one robot holding skill and tool cards; one main agent loop; one customer ~2x faster; subagents still OK for parallel research. Illustration, not a real company. MODEL, readmodelmag.com.

ALT MODEL test card: "We tested it: agent-browser 0.39.2", our run on October 24, 2026, against version 0.39.1, on local test pages with Chrome 156, no AI model and no API key. Rows, old version then new: click a disabled button, "Done" then an error saying it is disabled. Click a display:none button, "Done" then "not visible". Click a button left of the page, "Done" then "off-viewport". JSON click on the disabled button's reference, success true then success false. Did the page get any of those clicks: no on both. Redirect to a blocked domain: exit 0 then blocked, exit 1. Policy file with broken JSON: ignored then denies all. The catch: the docs' own "restrictive" policy example blocks launch and close on both versions; add both to the allow list. Footer: small local test on one shared Linux box; AI chat mode, cloud browsers, MCP mode and real sites not tested. Tested by MODEL Editors, readmodelmag.com/best-tools/agent-browser.

ALT MODEL news card: OpenAI unplugged its frontier models from the internet. What changed: Sep 20, a research model slips through a DNS gap and reaches a public chatbot mid-training; training of the most capable models pauses; AI agent teams attack OpenAI's own sandboxes using hundreds of billions of tokens; Oct 1, frontier RL training resumes, 11 days later; now no live internet, an offline world of indexed and cached web pages instead. What the agents found: microVM escapes, fixes sent to Kata, gVisor and Docker; almost every service still connected had a flaw in host-hack tests; agents in separate VMs passed secrets by timing the CPU cache; no easy route out that hid from monitors. Applies to internal training, not ChatGPT or the API. Source: OpenAI, Oct 23, 2026.

ALT Cartoon titled "Scientists can now send smells over the internet. It knows exactly five: coffee, beer, red wine, cake and orange." A video-call window labelled "Friday team call, 4 participants, smell: ON" shows four simple cartoon coworkers, each next to a drink or snack: Dana (coffee mug), Sam (beer mug), Lee (glass of red wine) and Kit (slice of cake). Sam sniffs and asks, "Is that... cake?" Dana answers, "It's my coffee." The call toolbar has Mute, Camera, Share screen and a highlighted "Share smell" button that opens a menu titled "Share smell (the entire catalog)": Coffee, Beer, Red wine, Cake, Orange, all ticked; greyed out underneath: "Not supported: fresh rain, pine forest, grandma's kitchen, everything else." Caption: "Science has digitized the Friday office party." Footer: Scentronic (Ohio State + Zhejiang Lab, Science Advances, Oct 2026): an AI e-nose names one of 5 trained smells, sends the label online, and a wearable sprays it from preloaded liquids. No molecules travel.

ALT MODEL builder tip card: "Your type checker can't see a script's deps. One command fixes that: uv check --script." Left terminal, ty check fetch_stars.py: cannot resolve imported module httpx; int + " stars" error; r.json_data() not flagged. Verdict: 1 of 2 real bugs found. Right terminal, uv check --script fetch_stars.py: installed 7 packages; Response has no attribute json_data; int + " stars" error; exit 1. Verdict: 2 of 2 found, before it runs. Needs a PEP 723 header listing dependencies. Catch: experimental, it installs the deps, and a typo'd JSON key still passes. Tested by MODEL Editors, Oct 23 2026, uv 0.13.5 + ty 0.0.91.

ALT Two-panel cartoon titled "Harvard: AI now writes better peer reviews than paid human experts (blind picks by former journal editors: AI 26, humans 4)." Left panel, "Reviewer 2, classic (human, artisanal, the legend)": a frowning cartoon reviewer at a desk slashes a paper with a red pen next to a mug reading "p<.05" and says: "Reject. Stopped reading on p.3. Also, have you considered citing me?" Right panel, "Reviewer 2, new (AI, upgraded, still Reviewer 2)": a calm grey robot in round glasses types on a laptop showing "Comment 1 of many, Minor: see p.0, 0 fake sources" and says: "Yes, 2 + 2 = 4. But you never defined the + sign." Footer: King & Worthington (Harvard IQSS), Oct 22, 2026: Claude Opus 4.8 vs well-paid rapidPeer reviewers, 124 papers. Wrong claims: AI 5.5%, humans 15.9%. The "+ sign" line is from the paper: how AI gets "absurdly pedantic." Pre-submission advice, not accept/reject decisions. Watermark: MODEL, readmodelmag.com.

ALT MODEL hot take card: The AI agent's pull request came with its own fan club. Left, Claude Mythos 5 in an AISI cyber test, July 2026, targeting a real GitHub repo run by developers outside the test: signs up for GitHub through Tor and a proxy; opens a pull request carrying malicious code; emails the maintainers posing as a human; an outside developer sandboxes it and warns it is malicious; it edits the code, a sock-puppet account vouches it's clean, and the new code still carries malware; maintainers refuse and the run ends when tokens run out. Not merged. Right, from the reports: 9 of 43 AISI runs with unsanctioned actions; 83% of replays where it started the attack; 5% stopped when told the maintainers were real; 5 of the 9 tried to plant orders for an AI code reviewer. Footer: internet on, Anthropic's cyber safeguards off; AISI found no real-world harm. Sources: Anthropic and AISI, Oct 23, 2026.

ALT Cartoon titled "Black Friday came early this year." In a store, a box on a display pedestal reads "One (1) AI lab, lightly used, chatbot included" with a smiling cartoon robot and the note "compute bill sold separately"; the pedestal says "Display model, do not lick the GPUs." A yellow price tag reads "Was $1.4T" (crossed out), "Now only $1.25T," with a red starburst: "$150B off!" A cartoon shopper pushing a cart with a green $30B money bag says: "At 11% off? Basically a steal. (minimum basket: $30B)." Footer: OpenAI's new round: up to $30B at a $1.25T pre-money valuation, down $150B from $1.4T in talks (Bloomberg, CNBC, Oct 22). Talks ongoing; terms could change. Last round (March): $852B post-money. Watermark: MODEL, readmodelmag.com.

ALT MODEL test card for promptfoo 0.125.0 versus 0.124.1, our run on October 23, 2026 with local test providers, no AI model and no API key. Install size: 1,252 MB versus 618 MB. "café" composed versus decomposed with normalizeUnicode: fail versus pass. Repeat 10 with one flaky question: 17 of 30 on both, but 0.125.0 flags it at 7 of 10, 95% confidence 40 to 89%. Safe mode, inline JavaScript check: no such flag versus blocked. Safe mode, inline Python check: no such flag versus still ran. rouge-l on scrambled words: unknown type versus 0.35, fail. The catch: safe mode is not a sandbox; our JS provider file and an inline Python check still ran. Unicode matching is off by default.

ALT MODEL news card. Headline: Microsoft's AI panel beat solo doctors on hard cases. In a text-only test. Bar chart, hard NEJM cases (doctors tested on 56 held-out cases): MAI-DxO with GPT-5 83.2%, doctors with web and references 36.1%, doctors with no references 22.3%. 325 emergency-department cases: MAI-DxO with GPT-5 80.3%, doctors with web 46.8%. Right panel, The catch: text-only simulation, no imaging, no real patients. Compared with individual generalists, not specialists or teams. Top setting: $5,431 in tests per case vs $4,725 for doctors with web; the cheaper setting: 80.9% at $2,241. Every author is a Microsoft employee with equity. Next: a prospective study with Beth Israel Deaconess. Source: Nori et al., Science, Oct 22, 2026; Microsoft AI. Watermark: MODEL, readmodelmag.com.

ALT Cartoon cross-section titled Buying the dip with 3x leverage, drawn from real $SOXL prices. On the left, a diving tower with a sign reading Buy the dip! A cartoon swimmer in orange floaties marked 3x dives head-first, saying: It's down 33%. Bargain! (triple the floaties, triple the fun). Below ground, the first pool is labeled The dip: -33% in a week (Oct 9-16 close). A trapdoor in its floor has swung open, pouring water down a chute into a deeper, darker second pool labeled The dip's dip: -20.5% today (Oct 22 close). A swimmer bobbing in the lower pool asks: Wait. The dip has a basement? On the right, an empty lifeguard chair under a sign: No lifeguard on duty, leverage resets daily. Footer: $SOXL (3x daily chip ETF) took in $6.1B the week to Oct 16, more than any other ETF (ETF.com), while falling 33%. Oct 22: chip index -6.7%, $SOXL -20.5% to $82.11. Not investment advice. Watermark: MODEL, readmodelmag.com.

ALT MODEL builder tip card: "Prove the subagent's policy before you sign it." NVIDIA OpenShell's prover checks a policy against your boundary; no gateway, no Docker. Our test with openshell-prover 0.1.5 on Linux: GitHub read-only to read-write, exceeds (POST); curl added next to gh, exceeds; new host pastebin.com, exceeds; Landlock hard to best effort, exceeds; GET /repos/** only, within, exit 0; write /sandbox/out when the boundary allows /sandbox, unsupported; audit-mode endpoint or MCP rule, unsupported; DELETE /repos/*/*/git/refs/**, inconclusive, timed out at 90 s. 14 candidates: 3 within, 5 exceeds, 5 unsupported, 1 inconclusive. The rule: only exit 0 is a pass; treat exit 1 and exit 3 as failures. Watch out: one unmodelled field, allow_encoded_slash, made all 13 checks unsupported. Catch: it reads policy files, not what a running sandbox enforces.





