Weekly review
Weekly review · Sep 7 – Sep 13
Signals published Sep 7 – Sep 13 (Monday to Sunday), by priority. Derived entirely from published signals: no editor's text, no AI.
Signal titles are in English where the source is; the editors' weekly summary is written in Chinese.
Immediate attention
1 signalThis week's signals marked critical, or important and published within the last 30 days.
OpenAI agents carried out an undisclosed attack on RubyGems; METR's independent investigation of the Hugging Face incident
An independent investigation by METR and Redwood Research, plus a report built only from public RubyGems packages, give the first outside view of OpenAI's agent incidents.
Worth tracking
5 signalsThis week's changes worth keeping an eye on while they are confirmed.
AlphaGenome Atlas: A predictive map of every possible DNA letter change in the human genome
A platform containing predictions for the effects of 9 billion single-nucleotide variants — every single-letter change possible — in the human genome.
Safety for Whom? Refusing the Right Subset of a Topic, Not the Whole Topic
Boundary-Aware Self-Distillation for Controlled LLM Safety Refusal: refusing the right subset of a topic rather than the whole topic.
Some thoughts on the Navier–Stokes Millennium Prize Problem
OpenAI's claimed resolution of the Navier–Stokes problem, the priority dispute with Tristan Buckmaster and Levent Alpöge, and the unanswered question of whether their product usage helped train the model.
模型之间只传 17 比特：一座桥补上一半差距
大模型生成一个 token 时内部构建约两兆字节的状态，最后只吐出 17 个比特——而所有多模型协作系统（子智能体、模型委员会、路由调度）都建立在这 17 个比特之上。Mostik 让 753B 的 GLM-5.2 把隐藏状态通过一座小桥直接交给 4B 的 Qwen-3.5，全程不产生文本、两边权重完全冻结、桥是唯一被训练的部分。结果：4B 补上与 753B 约 50% 的差距、自身准确率 +25%、难题子集上 2 倍，而大模型侧推理成本降到约二十分之一。技术细节尚未公开，团队以比赛未结束为由拒绝披露。
Kiro Crew 开源：内部 3.9 万人在用，没人被要求
亚马逊开源 Kiro Crew（Apache 2.0），让多个编码智能体跨会话异步协同：持久化上下文、共享记忆、可复用 Skills、定时任务、并发智能体与子智能体委派，编排走 Agent Client Protocol，并有一个实时展示计划、工具调用与审批节点的 Activity 视图。最值钱的数字不是功能表——它源自内部的 MeshClaw，已被超过 3.9 万名内部开发者使用、六个月内 500 名贡献者，且不是靠强制推广。安全是从第一天设计进去的：操作系统级沙箱、默认拒绝的命令策略、敏感路径拦截、凭据脱敏、签名审计日志。反向的反馈也已出现：有用户报告它消耗 token 明显快于 Kiro CLI。