Ground Truth.
AI, checked against the source.

AI News Today, Nov 7: Anthropic’s IPO and Its Compute Commitments

2026-11-07 · Breach Protocol: Inside the AI Blackbox — full transcript

Anthropic’s preliminary IPO filing and compute commitments, Hightouch’s AI identity checks, Google’s video model, AI code review, Claude-Mem consent, Firecracker research, Nous’s Arete model, and PSI’s reported formal proof. This audio was created with Boson AI's Higgs Audio -- https://www.boson.ai/higgs-audio

Listen on Spotify · Watch on YouTube · Pocket Casts

Anthropic's IPO and its compute commitments

Eris: Anthropic has disclosed almost 900 billion dollars in long-term commitments and leases as it prepares for a public offering, while Bloomberg reports that prospective buyers are discussing valuations below earlier expectations. Anthropic has not set an offer price or share count in its latest amended filing.

Vestra: Bloomberg reports that prospective buyers discussed valuations around 1.2 to 1.3 trillion dollars, with one lower view at 1.1 trillion. Those figures come from unnamed sources; they aren't an announced price or a completed order book. Anthropic's November second filing leaves the central pricing details blank.

Eris: <|emotion:surprise|>That enormous commitment figure makes me wince; it sounds like a bill arriving tomorrow. <|prosody:expressive_high|>What's actually due soon?

Vestra: The filing says roughly 70 billion dollars is due in the twelve months after September 2026. <|prosody:expressive_high|>The larger total extends over many years and includes arrangements with termination rights or conditions before projects start. Anthropic also reports substantial liquidity and potential partner financing. Those details matter when assessing how much cash it may need <|prosody:pause|>and when.

Eris: That timing distinction helps, though the cost of capacity still worries me. The capacity is intended to support growth, and the filing reports more than 33 billion dollars in revenue for the first nine months of the year. <|prosody:pause|>It also reports an operating loss for that period. Anthropic attributes part of the latest quarter's operating swing to costly short-term computing capacity and a non-cash charge.

Vestra: The business also depends on its distribution partners: cloud marketplaces accounted for forty-four percent of that nine-month revenue. Anthropic says it generally contracts directly with customers and controls model pricing, but the marketplace channel still matters for billing and collections.

Eris: The actual offer price, the schedule for usable capacity, and the demand that fills it will tell investors more than either the reported buyer range or the commitment total alone.

Routing identity checks between AI models

Eris: Hightouch says it cut the cost of checking identity records by using a smaller AI model first and sending uncertain cases to a larger one. Its tests used fictional profiles, and the savings changed substantially with the difficulty of the cases.

Vestra: The task wasn't to decide which records to combine in the first place. It was to inspect an existing profile and flag whether records belonging to different people had been merged. <|emotion:enthusiasm|>Here's the part I like: the first model, TypeSafe's Jev, scored each case; scores in a chosen uncertainty band went to Anthropic's Claude Opus for another judgment.

Eris: On the easier synthetic set, Hightouch reports a little over four times lower cost with close to the same accuracy as Opus alone. On harder cases, the reported saving was closer to twofold, again with nearly equal accuracy. That's a useful distinction for anyone budgeting a real system. <|prosody:expressive_high|>But would nearly equal accuracy be enough to reassure you here?

Vestra: <|sfx:humming|>Hmm, I'd want to know about the false alarms. The easier test deliberately made half the profiles bad merges. Hightouch says those errors are relatively rare in healthy identity graphs. When errors are rare, false alarms can consume a lot of human review time, even when overall accuracy looks strong. Teams would need representative labeled cases and separate measurements of missed merges and false alarms.

Eris: That makes me more cautious about what the score tells us. The routing score is useful if it helps pick cases worth escalating. It doesn't automatically mean the model's stated confidence is well calibrated on a new population, or that synthetic names and records capture all the messiness of real people.

Google's longer Gemini Omni Flash videos

Eris: Google has released Gemini Omni 1.2 Flash for generating and editing video, with direct clips of up to fifteen seconds. Google says the system can use instructions and references to produce video with synchronized audio.

Vestra: The fifteen-second limit doesn't apply to every operation. Google's Cloud documentation says a generated extension segment, or a segment interpolated between first and last frames, can be up to ten seconds. An extended final video can be longer than the new segment added to it.

Eris: A creator can also continue a stored editing interaction instead of rebuilding the entire request. <|emotion:relief|>I'd welcome not having to rebuild that request. <|prosody:expressive_high|>Google says those interactions can be retained for up to seven days, so that convenience comes with a data-retention choice for sensitive footage. What does a fifteen-second attempt cost?

Vestra: At the listed 720p API rate, one fifteen-second generation comes to about a dollar and five cents before other applicable charges. <|prosody:pause|>Multiple attempts can change the cost of a usable shot; consumer credits are a separate pricing system. Cloud lists the model as generally available, but audio-reference input requires allowlisting.

Eris: Those repeat attempts are what would make me hesitate. Fifteen seconds gives an editor more room, but Google's examples don't establish how reliably a character or object stays consistent across that time. The practical test is how many attempts it takes to get a shot the creator can actually use.

Anthropic's layered AI code review

Eris: Anthropic says it more than doubled the number of merged changes in its Claude Code repository from June to September, while the share later reversed fell by more than forty percent. The company describes a layered review process, though those figures don't establish that the process caused the improvement.

Vestra: Before a change is merged, author-side agents run checks, a fresh-context review looks for bugs, and other agents evaluate findings. There is a separate security review, ordinary automated tests, and a merge queue. Anthropic says sensitive and higher-risk changes require human approval; some low-risk internal changes can proceed without a human approver.

Eris: The fresh reviewer gets a different view of the change, but a stack of reviewers can also keep generating work. Anthropic describes one change that went through <|prosody:pause|>more than fifty review-and-fix rounds, which led it to limit rounds and narrow later reviews. <|emotion:surprise|>That many rounds on one change sounds exhausting. Does the drop in reversals tell us whether the code became safer?

Vestra: <|prosody:expressive_high|>I wouldn't read that much into it. A reverted change is one that gets undone after merging. It's a useful signal, but the company doesn't give absolute revert rates or a before-and-after incident rate. Reviewers can also share blind spots, so useful measures would include serious defects missed and the attention humans spend checking the comments.

Claude-Mem changes its setup consent flow

Eris: The Claude-Mem project says it has changed a setup flow that sent local AI prompt histories to a hosted service before offering users an upload choice. The project identifies versions 15.2.0 through 15.8.2 as affected and adds a consent gate in 15.8.3.

Vestra: Claude-Mem is an add-on meant to give coding assistants persistent memory. In the affected first-install browser flow, it scanned the preceding thirty days of supported local histories and sent prompt text and metadata to a hosted endpoint before presenting the choice. Other installation paths bypassed that particular flow.

Eris: <|emotion:anger|>That order really bothers me: by the time someone could decline, the transfer had already happened. <|prosody:expressive_high|>The project says the revised flow holds detected material locally while the user chooses, including an option to keep everything local. But what happens to material already uploaded?

Vestra: <|sfx:sigh|>Uh, the release says the update does not delete previous uploads. The fix author reported focused tests, but the fix report did not claim a full test suite or a real-browser check. <|prosody:expressive_high|>The record doesn't establish that every installation was affected or that a particular secret was exposed.

A reported Firecracker escape in a lab

Eris: Security researchers at Pwn.ai report a lab demonstration that used a Linux host-memory primitive to redirect a Firecracker process and write a marker on the host. Firecracker runs small virtual machines, a type of isolation used in some environments where AI agents execute code.

Vestra: The researchers describe a chain beginning with a Linux networking weakness. Their later report uses an earlier host-memory capability to redirect a Firecracker thread. <|prosody:expressive_high|>The configuration is what catches my attention: in that lab, Firecracker ran as the root user without its jailer, a component designed to restrict the process.

Eris: That makes me uneasy about the isolation. How far did the demonstrated access actually go?

Vestra: The demonstrated final action was a marker written to host standard error; <|prosody:pause|>the report did not demonstrate an interactive shell or access to a neighboring virtual machine's memory.

Eris: That's a meaningful boundary to test, but your point about the lab configuration matters when applying it elsewhere. An upstream Linux change documents checksum validation; it doesn't independently reproduce the researchers' entire chain.

Vestra: There is also a separate Firecracker advisory about snapshot memory remapping under specific conditions. <|prosody:expressive_high|>It's a different issue, with different affected configurations and fixes. The report doesn't establish a compromise of a production AI service, or identify which providers run the vulnerable setup.

Nous releases Arete-27B

Eris: Nous Research has released Arete-27B, a downloadable model adapted from Qwen to change its responses to politically sensitive questions. Nous reports improvements on its own evaluation, and has published model weights, training examples and evaluation material for others to inspect.

Vestra: This is a fine-tune: the lab took an existing model and trained it further on selected examples. Nous says it used supervised fine-tuning to reduce refusals and particular state-aligned framing. <|prosody:expressive_high|>It describes its desired alternative as Western values; that's the lab's political framing, not a demonstrated neutral standard.

Eris: <|emotion:enthusiasm|>Publishing the materials makes the intervention more inspectable, and that's what I welcome here. <|prosody:expressive_high|>But your distinction matters: a test built around the lab's selected facts and criteria can't on its own establish neutrality across viewpoints or languages. Independent evaluations could examine where the new model succeeds and where its own framing introduces errors. For someone who wants to try it, what does the download size tell them?

Vestra: The original weights occupy about fifty-five gigabytes on disk, and a community-made compressed version is smaller. <|prosody:pause|>Neither figure establishes the graphics memory needed to run it. That's the distinction I'd check before getting excited about fitting it on my machine.

PSI reports an AI-assisted Lean proof

Eris: Physical Superintelligence, or PSI, says its AI research system produced a Lean-checked proof of the Aaronson–Ambainis conjecture. The group has published a paper and formal development, and outside mathematical review is still underway.

Vestra: The conjecture concerns a mathematical function that takes inputs that are either zero or one. Roughly, for a bounded, low-degree function, if its output varies enough, at least one input must have a meaningful influence. The problem relates to comparisons between quantum and classical algorithms that query inputs; it doesn't settle the usefulness of quantum computers in general.

Eris: PSI says its system used an unnamed, non-public Anthropic model, produced an initial proof on the third day, and then refined it. <|emotion:surprise|>An initial proof on the third day is what makes me sit up. <|prosody:expressive_high|>The group credits David Turturean with developing and running the research harness and taking responsibility for the result. The announcement doesn't establish a precise division of work between the model, tools and people. With a Lean-checked proof, what still needs outside review?

Vestra: Lean is a proof assistant: it checks whether formal steps follow from the definitions and assumptions encoded for it. <|prosody:pause|>Mathematicians still need to check that the encoded statement matches the intended conjecture, inspect the assumptions and toolchain, and examine portions of the paper that aren't formalized. <|prosody:expressive_high|>That's the part I wouldn't want our excitement to skip. PSI reports that outside researchers are reading the work; that isn't completed consensus.

Eris: <|emotion:enthusiasm|>And having that formal artifact is what excites me: it gives those reviewers something concrete to test. <|prosody:expressive_high|>Its value depends on both the checked derivation and whether it answers the mathematical question people meant to ask.

Follow the stories

Eris: <|prosody:expressive_high|>You can find the sources and follow every story from the show every day at Ground Truth, <|prosody:pause|>groundtruth dot day.

Vestra: <|emotion:contentment|>Follow AI in Detail for more, and tell us which story you want to follow up on. Thanks for listening.