While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected. Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions. Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent. But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models? We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem. Read the full report: cohere.com/blog/concerning-b…

there is no moat

Introducing Pomerado (YC F26): the faster, cheaper, and more reliable alternative to browser use. Open source. Sign up for free to supercharge your agents 🧵

Claude and ChatGPT plugins are the death of software. 1. Integrate your software into their interface 2. Get everyone used to using it in that way (because it’s a better experience). 3. Eventually cut you out of the equation. CapCut doesn’t need to exist 😂 It’s an interface for something that doesn’t need an interface anymore. Lambs to the slaughter. They are going to eat effectively all software this way. And APIs aren’t going to save everyone. APIs are just software that computers use.

My general advice for using AI for any purpose is to ask yourself: "how do I make what I am doing even more ambitious?" You do this until you either hit a wall and then you know the shape of the frontier (useful!) or you find out that the AI can do more than you think (common!)

Talked to multiple founders yesterday who have been building their products over the last 3 years. Started manual code. They feel behind and slower than companies that started this year with all code written by agents. I have never seen such an order of magnitude difference.

The next great "language for agents" should be: - As fast as Rust - As little design space as Go - Have the strictest type/verification system ever written Bend seems like an interesting first effort

My take: SaaS is dead. Software is charity now, make money elsewhere. No one can make $$ selling the same features for years anymore. Instead: - Use good software to collect user data and sell data. - Use good software to deliver outcome and sell outcome. - Arbitrage tokens under the guise of selling software - buy bulk, sell retail. - Use good software internally to drive your own margin higher for your services/products - Build RSI agent in a domain that has the fastest learning loop so it has the most, latest expertise: e.g. a marketing agent that knows the latest tricks to get viral in X coz it's doing it for others every day and learn and evolve. - Give away all your features for free, it's futile anyways. Open source them. Make money elsewhere.