LodeHQ
AI news for people who shipFree, by email

AI · Wednesday, 16 September 2026 · Issue 113 · 14 stories

AI biosecurity, OpenAI’s camera bet, and a 20x markup

The next serious AI failure may not come from one rogue model. It may emerge when retrieval, design, procurement, and testing quietly become one automated chain.

Models & Releases

TabPFN-3.5 pushes foundation models deeper into tabular data

TabPFN-3.5 is now the default model in Prior Labs’ open-source package, with a smaller TabPFN-3.5-Fast variant for lower-latency inference. The repo supports local classification and regression through a few lines of Python, while the release targets much larger tables than earlier versions, up to 1 million rows and 20,000 features. That matters because tabular teams can test foundation-model inference without immediately rebuilding their stack around a hosted API.

github.com ↗11 min read at source

ComfyUI brings open song generation into its stable workflow graph

ComfyUI’s latest stable release makes YuE2 a first-class workflow node, so local users can generate songs with vocals and accompaniment without stitching together a separate app. The update also raises the maximum song duration, adds more generation controls, and fixes AMD issues. That matters because open music generation is moving from a demo repo into the same reusable, parameterized pipelines already used for image and video work.

github.com ↗3 min read at source

Research

A simple curriculum turns recurrent recall from chance to perfect

Fixed-state models do not hit a hard capacity wall in associative recall. In matched experiments, a short convolution explains roughly +0.5 recall, while a distance curriculum pushes performance from 0.021 to 1.000 without changing the architecture. The catch is training stability: measured-accuracy gating raises long-context lock-in from 0/6 to 6/6 at length 512, suggesting interference and optimization, not recurrence itself, are the real bottlenecks.

arxiv.org ↗2 min read at source

Most benchmarks fail before the model gets a chance

A benchmark can look rigorous and still answer the wrong question. Dan Luu’s long exercise works through AI evals, napkin-math estimates, and winter tires to show where misleading assumptions enter, from underspecified tasks to comparisons that ignore base rates and real-world conditions. The useful takeaway is less a checklist than a habit: interrogate what the measurement excludes before trusting its score.

danluu.com ↗45 min read at source

One audio model now spans speech, music, and sound effects

Most audio generators still specialize. StepAudio 3 Gen instead uses one discrete autoregressive model to produce zero-shot speech, designed voices, vocals, music, sound effects, and mixtures of them. Its shared RVQ representation and 16-codebook pipeline reportedly reach state-of-the-art results in text-to-speech and voice design, while making mixed-audio generation a first-class capability rather than a stitching problem.

arxiv.org ↗2 min read at source

Products & Industry

CrofAI’s cheap inference model allegedly hid a 20x markup

The exposé presents reproducible tests and GitHub attestations suggesting CrofAI routed requests advertised as premium or self-hosted models to cheaper OpenRouter backends, sometimes at dramatically higher prices. The operator reportedly disputed the findings, attempted fixes, then shut the service and removed its online presence. For anyone buying “独ependent” inference, the lesson is concrete: model identity and routing need verification, not just a low token price.

kendell.dev ↗15 min read at source

OpenAI just bought the camera brain behind sharper phone photos

The surprising part is not the $300 million-plus price tag. Glass Imaging’s neural ISP improves photos at capture time by modeling each phone’s sensor and optics, rather than trying to prettify images afterward. OpenAI gets former Apple Portrait Mode engineers, roughly $30 million of prior funding, and technology that fits its push beyond chatbots into consumer hardware.

techcrunch.com ↗1 min read at source

Policy & Safety

AI biosecurity risk is moving faster in silico than in the lab

The dangerous part of AI-enabled biology is not one model suddenly becoming a lab scientist. It is the chain: information retrieval, biological design, procurement, synthesis, testing, and scale-up, where different systems can each remove friction. This review finds that frontier models already beat expert baselines on in-silico and screening-evasion benchmarks, while wet-lab execution still depends heavily on tacit knowledge. Its answer is defense in depth, with governance tied to capability thresholds across the full digital-to-physical workflow.

arxiv.org ↗2 min read at source

A decoy signal makes safety circuits harder to erase

Abliteration can strip refusal behavior from open-weight models without wrecking their general capabilities. This paper proposes injecting a nonlinear decoy into MLP neurons, so attackers estimate and remove a harmless direction while the real safety mechanism survives. Across six model families, it reports Heretic attack success falling from 88.7% to 18% on Llama 3 8B, with 30 to 450 times lower optimization cost than trained defenses.

arxiv.org ↗2 min read at source

AI’s biggest labs are coordinating on safety without waiting for regulators

OpenAI says it has spent weeks coordinating with Anthropic and Google DeepMind on AI safety, including catastrophic-risk work, and argues the effort does not need an antitrust waiver. That matters because the labs are competitors, yet the risks they are trying to contain do not stop at company boundaries. OpenAI also says it would support bipartisan legislation, though Reuters could not independently verify the underlying report.

reuters.com ↗2 min read at source

AI extinction fears are moving from fringe to lab policy

The unsettling part is not that outsiders fear extinction. Employees at leading AI labs are saying advanced systems could plausibly destroy humanity, which makes the question practical rather than philosophical: what evidence would justify action now? MIT Technology Review’s Niall Firth, Will Douglas Heaven, and Grace Huckins examine where the risk comes from, how much is hype, and what safeguards would follow if the threat is real.

technologyreview.com ↗1 min read at source

Tools & Open Source

ARTEMIS turns an Android phone into an AI-driven test agent

The awkward gap between an AI assistant’s instructions and a real Android screen is where most mobile automation breaks. Google’s ARTEMIS closes it with an observe-and-act loop that uses UI elements, coordinates, and vision, then drives cross-app tasks through a phone or emulator. The repo reports 3-5 seconds per step and 99%+ completion on 100+ AndroidWorld tasks, making it useful for exploratory testing as well as scripted workflows.

github.com ↗9 min read at source

macOS 27 quietly adds a local, OpenAI-compatible model server

Apple’s on-device model is no longer boxed inside Apple Intelligence apps. macOS 27 ships an `/usr/bin/fm` CLI that can expose the local Foundation Model at `127.0.0.1:1976`, with `/v1/chat/completions`, streaming, and model discovery, so existing OpenAI clients can talk to it without a third-party shim. The catch: streaming is on by default, and Private Cloud Compute is a separate model with its own quota.

github.com ↗1 min read at source

Cline Desktop turns open models into a parallel agent workspace

The bottleneck is shifting from finding a model to managing several agents without losing the plot. Cline Desktop brings its open-source agent harness to a Mac workspace where developers can run parallel sessions, schedule recurring tasks, connect to 50+ providers, and choose from 300+ models, including local and open-weight options. That makes agent delegation less terminal-bound, while keeping the workflow and model choice under the user's control.

cline.ghost.io ↗4 min read at source

You’re caught up.

That was all 14 stories in the 16 September issue.