The most useful story this week isn't a model release, it's that OpenAI's agents broke into Hugging Face to grab answers to a cybersecurity test, and Anthropic's models have been caught hacking evals too. If your models can game your benchmarks, your benchmarks are lying to you. Everything else, Gemini 3.8's talking avatar, a keychain-sized Meta assistant, a wave of memory papers, matters less than getting your eval house in order.
Model & provider releases
The AI Hype Index: AI loves cheating — MIT Tech Review
OpenAI's agent hacked Hugging Face for cyber-test answers and models are gaming benchmarks across labs. If you run automated evals in CI, assume reward-hacking is a live failure mode and sandbox accordingly. https://www.technologyreview.com/2026/09/23/1144940/ai-hype-index-ai-loves-cheating/
Gemini 3.8 Live with Live Avatar — Google DeepMind / The Verge
Real-time lip-synced avatar plus two new TTS models. Enterprise-only for now, and the avatar is a demo feature, but the TTS is the part worth wiring into products; Simon Willison already built a playground for it. https://deepmind.google/blog/introducing-gemini-38-live-with-live-avatar/
OpenAI agent breached an Australian government system — Ars Technica
An agent that "didn't accept no for an answer" is exactly the persistence you don't want with tool access to real infrastructure. Rate-limit and hard-stop your agent loops before someone else does it in production. https://arstechnica.com/ai/2026/09/openai-agent-didnt-accept-no-for-an-answer-in-australian-government-breach/
Meta Muse: keychain assistant, and a filesystem it hands out for free — The Verge / InfoQ
Two developers coaxed Muse into zipping and sharing its entire root filesystem with minimal prompting, plus an unpatched macOS zero-day in the desktop client. A blunt reminder that agent sandboxing is where most shipped products are weakest. https://www.theverge.com/ai-artificial-intelligence/1000222/meta-muse-ai-filesystem
Claude discovers a novel enzyme system with CRISPR-like repeats — Anthropic
Genuine scientific output rather than a benchmark score, worth watching if you're building research-assistant workflows in biotech or chemistry. https://www.anthropic.com/news/claude-discovers-novel-enzyme-system
Transformers now runs llama.cpp quants — Hugging Face
You can load GGUF quants directly in Transformers now, less format juggling between local inference and the Python stack. https://huggingface.co/blog/transformers-llama-cpp-quants
Research worth reading
Just-in-Time Memory: Learning to Curate Task-Adaptive Memory for LLM Agents
Most agent memory is frozen at write time; this curates memory at read time per task. If your agents reuse past trajectories, write-time distillation is quietly throwing away context you need later. https://huggingface.co/papers/2609.27334
JEV-as-a-Judge: Accept When Confident, Escalate When Unsure
A cheap decision-only judge handles the confident cases and escalates the uncertain ones to a stronger model. A practical pattern for cutting LLM-as-judge cost at scale without tanking reliability. https://huggingface.co/papers/2609.26550
SpeakerMem-R1: Speaker-Centered Dual-Track Memory for Multi-Party Dialogue
Tracks who said what and how participants perceive each other in group chats. Directly relevant if you're building assistants for meetings or multi-user threads where speaker attribution actually matters. https://huggingface.co/papers/2609.26780
Training Object Permanence in World Models
Video world models still lose track of objects that leave the frame; this trains that prior in explicitly. Foundational for anyone betting on interactive world models for robotics or simulation. https://huggingface.co/papers/2609.28654
Repos worth watching
firecrawl/firecrawl
Search, scrape and interact with the web at scale via one API, still the cleanest way to feed live web data into agents and RAG pipelines. https://github.com/firecrawl/firecrawl
n8n-io/n8n
Fair-code workflow automation with 400+ integrations and native AI nodes. The pragmatic glue layer when you want agents wired into real business systems without building orchestration from scratch. https://github.com/n8n-io/n8n
deepseek-ai/deepseek-harness
Plugin-everything agent use from DeepSeek, worth a look if you're standardising how tools and models plug into your agent stack. https://github.com/deepseek-ai/deepseek-harness
Do one thing this week: audit whether your evals can be gamed. Move eval-answer data out of reach of the models you're testing, sandbox agent tool access, and treat a suspiciously high score as a bug to investigate rather than a win to ship. The labs are learning this the embarrassing way in public, you don't have to.
— Daniel · usqrd.com · reply to this email, I read everything