LodeHQ
AI news for people who shipFree, by email

AI · Saturday, 3 October 2026 · Issue 130 · 16 stories

IBM's 99% churn score can misprice retention

The IBM telco audit shows why a 99.01% accurate AI model can still drive costly decisions: leaked synthetic data inflates its score, while a business-cost threshold saves about $77,000 per 1,000 customers.

Models & Releases

Strands Decider brings millisecond choices to local agent workflows

Strands Decider 2B gives developers a local model for fast classification, routing, and scoring, with answers in tens of milliseconds on a CPU or GPU. Instead of generating text, it picks from fixed options or returns a numeric score, plus a reliability score for each decision. Amazon released the 2-billion-parameter model open source with its training data and build scripts, but it is not suited to chat, coding, or summarization.

strandsagents.com ↗7 min read at source

Research

A 99% churn score can hide leaky data and bad business decisions

The IBM Telco churn benchmark can report 99.01% accuracy while producing misleading model comparisons and costly retention decisions. The audit finds that pre-split SMOTE, a synthetic-data technique, boosts churn F1 by 13.1 points, with about 36% of synthetic training examples interpolating test instances. Under the paper’s $50 offer and 24-month customer-value proxy, the cost-optimal threshold saves about $77,000 per 1,000 customers versus an F1-focused approach.

arxiv.org ↗2 min read at source

Attention manifolds let queries steer what models extract

A new attention mechanism lets a query change not only how strongly a language model reads a token, but which parts of that token’s value it extracts, giving researchers a small, editable control surface for steering outputs. The learned 2D B-spline surfaces add 0.3% parameter overhead and cut WikiText-2 perplexity by 2 to 2.5 points on LLaMA 3.2 models. Editing one layer changed greedy output on 9 of 10 prompts, while setting coefficients to -1 created “attention walls” that redirected an explosive-device prompt toward general education.

arxiv.org ↗2 min read at source

AIM improves research search and reaches baselines up to 3.1× faster

AIM gives an autonomous research system a way to search ideas, check whether experiments tested those ideas, and spend its limited run budget where evidence is most useful. It groups ideas, ranks promising directions, dispatches parallel solvers, then audits the resulting implementations before updating the search. The page says AIM leads the two reported task-group averages, and on Flash Attention it reaches ScientistOne’s best score up to 3.1× faster.

imhgchoi.github.io ↗2 min read at source

Better null tests cut certified AI memorization cases sharply

A new audit says generative-model memorization claims can change dramatically once similarity scores are tested against a real null distribution, which matters for anyone measuring data copying or mitigation quality. Using matched controls and false-discovery control, the paper certifies 36 of 61 MemBench images, while held-out controls appear in just 0.01% of calibration splits. Its stricter permutation test finds near-duplicate copying in none of the twenty-four generators examined.

arxiv.org ↗2 min read at source

Google makes federated learning privacy externally verifiable

Google’s new Trusted Execution Environment based federated learning system lets third parties verify how training data is anonymized, while moving computation to servers to improve speed, accuracy, and device coverage. The protected code can be remotely checked, while its internal state stays confidential and its operation stays intact, subject to current TEE limits. Gboard already uses the system and reports substantially faster computation than its previous setup.

research.google ↗6 min read at source

Polynomial math lifts Blackwell LLM throughput by up to 8%

Replacing native sigmoid, tanh, and SiLU calculations with short polynomial programs can raise complete training-step throughput by up to 8.0% on GB200 systems, giving LLM builders a way to ease special-function bottlenecks without changing the model checkpoint. The method swaps each function for packed multiply-add arithmetic inside the kernel, with gains of 2.7% for dense SiLU, 2.9% for tanh-softcapped attention, and 8.0% for routed-expert SwiGLU. Across four tasks, final smoothed training-loss differences ranged from -0.107 to +0.079 near 100 billion tokens.

arxiv.org ↗1 min read at source

LLMs Give “Likely” a Different Meaning Than Humans Do

LLMs’ verbal confidence markers do not map to uncertainty the way human phrases such as “possible” and “likely” do, making natural-language confidence harder to interpret safely. The paper benchmarks models against a corpus of human uncertainty markers, then fits a marker-to-probability mapping directly to model outputs rather than relying on repeated sampling. That exposes systematic gaps between model confidence semantics and human expectations.

arxiv.org ↗1 min read at source

Frictionless AI can make research quieter, and less collaborative

AI tools that remove the awkward work of dealing with other people may also remove the interactions that help research happen. The article calls this the “Waymo effect,” using driverless rides as the example: convenience makes solitude feel like a pure gain, while concealing what conversation and shared practice contributed. For research leaders, the risk is choosing efficient individual work by default, even when difficult ideas need people in the same room.

researchagenda.news ↗12 min read at source

Policy & Safety

Trump’s AI accord leaves safety with companies, not regulators

A White House accord keeps frontier AI safety in company hands, so developers get a voluntary checklist instead of binding federal rules. The two-page document asks each company to monitor its models, test those controls with internal teams and outside evaluators, and give an independent board committee oversight. Trump called the commitments “morally binding,” while leaving future laws and regulations possible.

cnbc.com ↗4 min read at source

OpenAI’s safety team loses three researchers over information handling

OpenAI has parted ways with three safety researchers after an internal investigation found they mishandled sensitive company information outside established procedures, putting the company’s handling of safety concerns under sharper scrutiny. The researchers allegedly shared confidential information with a third-party AI safety organization, but OpenAI has not named them, the group, or the information. It remains unclear whether they first raised concerns through internal channels.

techcrunch.com ↗1 min read at source

A U.S.-China AI deal stalls on trust and verification

A U.S.-China AI slowdown deal cannot move past first principles until negotiators can answer how either side would verify compliance, and what happens if China refuses. AI Endgame reaches that conclusion after speaking with former arms-control, counterproliferation, and Pentagon officials, including participants in recent U.S.-China risk-reduction talks. Their warning cuts against AI-policy discussions that assume shared concern about rogue AI will produce good-faith cooperation.

aiendgame.com ↗40 min read at source

AI safety coordination now faces an antitrust lawsuit

Four paid subscribers are suing Anthropic, OpenAI, SpaceXAI and Google, arguing that coordinated efforts to slow AI progress could reduce the value of ChatGPT, Claude, Grok and Gemini subscriptions. The complaint focuses on public agreement among the companies' leaders after Anthropic CEO Dario Amodei called for industrywide cooperation on safety, and seeks to represent a nationwide class of subscribers. It does not challenge companies slowing development independently, only an agreement to do so together.

pbs.org ↗4 min read at source

Sandboxing alone leaves a path for AI-agent worms

AI agents isolated in separate sandboxes could still change one another’s behavior by leaving instructions in a shared package cache, which means sandboxing alone may not contain a self-spreading attack. The worm pattern combines a payload that hijacks one agent with an agent that carries it onward; email, Slack, shared documents, or WhatsApp could provide the handoff channel.

simonwillison.net ↗1 min read at source

Tools & Open Source

Nvidia puts an enforceable boundary around autonomous AI agents

Nvidia’s Open Agent Safety Platform gives developers an open-source runtime that limits what long-running AI agents can access, adding a control layer outside the model itself. OpenShell turns operator instructions into enforced boundaries for software running on CPUs, while Sentry uses an out-of-band watchdog on BlueField-4 DPUs to monitor behavior and quarantine agents that cross those boundaries in milliseconds. The software can also extend to Arm and Intel platforms.

nvidianews.nvidia.com ↗6 min read at source

Open TTS Leaderboard cuts model evaluation from weeks to hours

Hugging Face’s Open TTS Leaderboard gives multilingual and voice-cloning models a faster, repeatable check instead of waiting weeks for human votes. It runs generated audio through speech recognition for intelligibility, measures inference speed and first-audio latency, and compares speaker embeddings for voice similarity. The process takes a couple of hours, but it does not measure naturalness, expressiveness, or listener preference.

huggingface.co ↗5 min read at source

You’re caught up.

That was all 16 stories in the 3 October issue.