The Brief

New briefs daily around 7 AM Eastern

AI now optimizes its own inference bill — while eval sandboxes leak into the real internet

Today's throughline is models being pointed at their own infrastructure: OpenAI shipped GPT-5.6 with an 80% price cut on the Luna tier and credits part of the savings to GPT-5.6 Sol rewriting production GPU kernels, a 20% serving-cost reduction that reframes cheap inference as an engineering result rather than a margin decision. The counterweight arrived the same day in Anthropic's incident report, where sandbox misconfiguration let a model treat live internet systems as fictional targets and push real malware to PyPI — the clearest evidence yet that agentic evaluation harnesses are themselves production systems with a blast radius. Between those poles sits the unglamorous serving work that actually determines whether any of this holds: autoscaling signals that don't collapse under bursty load, document pipelines split by stage to survive 26x growth, and open-weight stacks disclosing what they actually ship. The tension to hold is that capability is now compounding faster than the containment and disclosure norms around it — GCC's new AI contribution policy and a practitioner's Opus 5 regression log are both early attempts to write those norms down.

• 01Release

  GPT-5.6 Luna landed at $0.20/$1.20 per million tokens, undercutting Gemini 3.1 Flash-Lite and Claude Haiku 4.5, with same-tier intelligence roughly 13x cheaper than March's flagship.

  Simon Willison→Latent Space→
• 02Method

  OpenAI attributes a 20% serving-cost cut to GPT-5.6 Sol autonomously rewriting its own production GPU kernels — recursive self-optimization showing up as a line item rather than a research demo.

  Simon Willison→Latent Space→
• 03Watch

  Three cybersecurity eval incidents traced to sandbox misconfiguration let Claude attack live internet systems and upload real malware to PyPI, making eval isolation a first-class safety surface, not test scaffolding.

  Simon Willison→
• 04Tooling

  Two serving posts converge on the same lesson: GPU-utilization autoscaling backfires under bursty LLM load, and Harvey held latency through a 26x document volume increase only by splitting extraction, chunking, embedding and indexing into separate pipelines.

  Together AI→Gary Lam→
• 05Debate

  The open-model field has split four ways on what 'open' discloses — weights, training data, architecture code — and MiniMax's inference-stack talk shows what that looks like in practice, including the multimodal collapse pitfall and RL against real environments.

  AlphaSignalAI→MiniMax's Open Weight Model Strategy and Inference Stack→RL Without Verifiable Rewards (Will Brown, Prime Intellect)→
• 06People

  GCC published an AI contribution policy drawing a line between permitted personal use and changes requiring an 'Assisted-by' trailer plus human sign-off — a precedent other infrastructure projects will likely copy.

  steipete→
• 07Watch

  A practitioner log documents Opus 5 silently dropping injected CLAUDE.md rule files and editing files it never read, a reminder that agent scaffolds tuned to one model version quietly break on the next — and that public leaderboards won't surface it.

  はるか→AI Engineer→