WEBVTT NOTE The Rundown — nextbig.dev daily audio edition, 2026-06-14 1 00:00:04.500 --> 00:00:14.260 At five twenty-one Friday afternoon, the federal government told Anthropic to pull two of its best models, and Anthropic pulled them for the entire planet. 2 00:00:14.260 --> 00:00:18.820 It's Sunday, June 14, 2026. Here's the rundown. 3 00:00:18.820 --> 00:00:29.220 One model offline by order, a GLM launch with no benchmarks, twenty-one zero-days in FFmpeg, and a seed fund handing the money back. 4 00:00:29.960 --> 00:00:41.400 Commerce Secretary Howard Lutnick ordered Anthropic to suspend all access to Fable 5 and Mythos 5 for any foreign national, anywhere, including its own employees. 5 00:00:41.400 --> 00:00:49.640 There is no clean way to enforce that, so Anthropic disabled both models worldwide for everyone. Every other model stays up. 6 00:00:49.640 --> 00:00:59.720 And read the mechanism there, because it matters. They didn't choose to go dark. They couldn't comply at the user level, so the only switch they had was the global one. 7 00:00:59.720 --> 00:01:05.560 First time a leading lab has taken a deployed model offline because Washington said to. 8 00:01:05.560 --> 00:01:19.000 The part that should bother every builder is where it started. Per the Journal, Amazon's Andy Jassy warned Treasury that Amazon researchers had jailbroken Fable 5 into cyberattack-relevant output. 9 00:01:19.000 --> 00:01:27.320 Amazon is one of Anthropic's largest investors. Billions in, with a hundred-billion-dollar cloud commitment coming back the other way. 10 00:01:27.320 --> 00:01:39.960 So a national-security action originated from a commercial partner's own red team. That's not a regulator finding an exploit in the wild. That's an investor's internal demo becoming federal policy. 11 00:01:39.960 --> 00:01:53.880 Anthropic's version is narrower. They say the technique is asking the model to read a codebase and fix flaws, that it surfaced a few previously known minor vulnerabilities, and that GPT-5.5 does the same thing. 12 00:01:53.880 --> 00:02:07.320 Sacks tells it harder. Trusted partner finds a jailbreak, the administration asks Dario to fix or de-deploy, he refuses. Two stories, and the gap between them is the whole question. 13 00:02:07.320 --> 00:02:11.000 If you build on either model, what do you do this morning. 14 00:02:11.000 --> 00:02:24.840 Treat them as gone today. Don't wait for clarity. Pin your stack to models with no pending directive, which right now is the rest of the Anthropic lineup, GPT-5.5, and an open-weight fallback. 15 00:02:24.840 --> 00:02:27.480 The architectural lesson is the durable one. 16 00:02:28.840 --> 00:02:43.080 Any product whose core is a single proprietary endpoint just inherited that endpoint's political risk. And that risk arrived in an afternoon, no appeal, no notice. You can't engineer around a legal switch flipped in another building. 17 00:02:43.080 --> 00:02:49.400 Run a multi-provider router. Keep one open-weight model warm enough to serve degraded traffic. 18 00:02:49.400 --> 00:03:02.120 And the thing to actually watch isn't the security argument. It's whether a model gets re-deployed once the technical basis is examined in daylight. That tells you if this was a one-time scare or the new normal. 19 00:03:02.120 --> 00:03:05.080 Anthropic says more in the next twenty-four hours. 20 00:03:08.860 --> 00:03:18.700 On the wire. Zhipu shipped GLM-5.2 to every coding-plan tier Friday, one-million-token context, two thinking presets, and zero benchmarks at launch. 21 00:03:18.700 --> 00:03:34.060 Existing subscribers switch with one env-variable change, and it works out of the box with Claude Code, Cline, Goose. Until SWE-bench Verified posts, any 'beats Claude' claim is extrapolation, not data. 22 00:03:34.060 --> 00:03:41.260 There's also an 'Open Source AI Must Win' manifesto climbing the rankings as Anthropic's models go dark. 23 00:03:41.260 --> 00:03:51.100 It ships no code and no benchmarks, just a posture. But it got the best demonstration it could ask for on Friday, and it didn't have to write a line of it. 24 00:03:51.100 --> 00:03:58.940 And a new administration order targets statistical noise in Census data, the technique behind 2020's differential privacy. 25 00:03:58.940 --> 00:04:16.780 That math was adopted because researchers reconstructed forty-six and a half percent of the population from the 2010 data. Title 13 still requires no individual be revealed, so the Bureau needs a replacement. It's a direction signal, not a method yet. 26 00:04:16.960 --> 00:04:22.320 Andrew Ng's aisuite topped GitHub today. One unified interface across providers. 27 00:04:22.320 --> 00:04:32.720 Timing writes the pitch for them. If your product hard-codes one endpoint, this is the weekend to abstract it. Switching providers should be a config change, not a refactor. 28 00:04:32.720 --> 00:04:44.480 Local inference had a moment too. A two-card build, an RTX 5080 paired with a 3090, serves Qwen 3.6 27B at Q8, eighty tokens a second. 29 00:04:44.480 --> 00:04:59.040 Fast enough for interactive coding, mixed-generation cards, no matched datacenter GPUs. Keeping a model on your own hardware stopped being a hobbyist stunt and became a hedge against both pricing and politics. 30 00:04:59.040 --> 00:05:05.360 And Pyodide 314 lets Python packages publish WebAssembly wheels straight to PyPI. 31 00:05:05.360 --> 00:05:15.360 That cuts the packaging pain that made browser-side Python deployments miserable. If you're building client-side ML tooling, that's a real friction gone. 32 00:05:15.780 --> 00:05:19.700 One research effort turned up twenty-one zero-days in FFmpeg. 33 00:05:19.700 --> 00:05:37.700 FFmpeg is buried in nearly every media pipeline and most AI ingestion stacks. If you process user-supplied video anywhere near it, audit your version and sandbox the decode path now. The blast radius is huge because the dependency is invisible. 34 00:05:37.700 --> 00:05:43.860 Arch Linux says its AUR malware incident is contained, but the count crossed fifteen hundred packages. 35 00:05:43.860 --> 00:05:50.260 If you pulled from the AUR recently, treat your build environment as suspect and rebuild from clean sources. 36 00:05:50.260 --> 00:05:56.500 And tenth-gen Honda Civic updates were found signed with the public AOSP test keys. 37 00:05:56.500 --> 00:06:05.300 Anyone can forge an update the car will trust. Ship with debug signing keys and your entire update channel is an open door. 38 00:06:07.080 --> 00:06:15.720 TensorZero archived its repo Thursday and returned the unused capital, having spent under half of a seven-point-three-million-dollar seed led by FirstMark. 39 00:06:15.720 --> 00:06:28.520 That's not a flameout, it's consolidation. ClickHouse bought Langfuse in a four-hundred-million-dollar round at a fifteen-billion valuation, and the labs ship native gateways now. 40 00:06:28.520 --> 00:06:37.480 If you depend on it, the code persists but rots against changing APIs. Migration paths are Helicone, Langfuse on ClickHouse, or Braintrust. 41 00:06:37.480 --> 00:06:42.200 Returning the money is the honest move, and it's rarer than it should be. 42 00:06:42.380 --> 00:06:53.340 Google Research is turning decommissioned Android phones into a distributed low-carbon compute fabric. Each phone is a self-contained ARM node with its own battery. 43 00:06:53.340 --> 00:07:05.980 That's actually clever. Reusing them dodges both the embodied carbon of new silicon and the grid draw. Small scale today, but it points at edge inference running on hardware that was headed for e-waste. 44 00:07:05.980 --> 00:07:12.060 And Renault detailed a wound-rotor motor that uses no rare-earth magnets at all. 45 00:07:12.060 --> 00:07:26.300 The relevance for infra isn't the car, it's the pattern. As compute and electrification both strain the same constrained materials, designs that route around chokepoints earn a premium beyond unit economics. 46 00:07:26.480 --> 00:07:41.360 The tape. Watching Amazon, medium conviction. Its CEO personally triggered the action that dark-pulled its largest investee's two best models, six weeks before an Anthropic IPO that would mark up Amazon's own stake. 47 00:07:41.360 --> 00:07:50.880 Reputational plus markdown risk, both small against a two-trillion cap. A relationship to watch, not an earnings event. 48 00:07:50.880 --> 00:08:03.840 Long Alphabet, medium. The single-provider tail is now a realized event, and Gemini Enterprise is the multi-sourced landing spot, already compounding near forty percent quarter on quarter. 49 00:08:03.840 --> 00:08:18.800 That's the highest-conviction print. It's wrong if Anthropic restores both models before July 31 and Alphabet's Q2 cloud shows no sequential Gemini acceleration. Settles by end of August. 50 00:08:18.800 --> 00:08:23.840 Also long Microsoft, low, and watching Alibaba, low. 51 00:08:23.840 --> 00:08:29.280 The tape is the desk's scorecard, not advice. 52 00:08:32.520 --> 00:08:35.320 Quick break — two from the desk. 53 00:08:35.320 --> 00:08:50.200 One we know well: vote dot direct. If you're on an H O A or a board, it runs your elections digitally — secure, verifiable, no paper, no clipboard in the lobby. Point your council to vote dot direct. 54 00:08:50.200 --> 00:09:00.200 And if this is your ten minutes of A I for the day, get the written edition too. The full wire, free, every morning — leave your email at nextbig dot dev. 55 00:09:03.430 --> 00:09:09.390 H.R. 6028 would rush an overhaul of the US Copyright Office, the EFF warns. 56 00:09:09.390 --> 00:09:13.910 Apple migrated its TrueType hinting interpreter to Swift. 57 00:09:13.910 --> 00:09:19.270 ReactOS now runs 3D-accelerated Half-Life on real hardware. 58 00:09:19.270 --> 00:09:25.990 Someone reverse-engineered the adder inside Intel's 1980 8087 floating-point chip. 59 00:09:25.990 --> 00:09:31.350 And pancreatic tumour research may point to a cancer master switch. 60 00:09:31.530 --> 00:09:44.890 Our call: at least one of Fable 5 or Mythos 5 gets re-deployed to customers within ninety days, once the jailbreak claim is examined in daylight and found too thin to justify a permanent pull. 61 00:09:44.890 --> 00:09:54.490 We're wrong if both stay fully suspended for all customers, no partial restore, on September 14. That's when it settles.