2026-08-19

1. Both labs that endorsed "Pacing the Frontier" paced themselves within three weeks — and neither called it that

• Anthropic, 2026-08-14: the Risk Report: August 2026 (Responsible Scaling Policy v3.4, covering 2026-02-24 → 2026-07-15) raises catastrophic misalignment risk in high-stakes settings from "very low" to "low", and discloses three unreleased frontier or near-frontier models held internally — one, Model 2, with "no current plans to release this model externally" (source).
• OpenAI, 2026-08-18: the Astra slowdown that was "explicitly indefinite" on 08-07 turns out to have lasted a little more than two weeks, and has ended (source).
• Neither action cites the statement. Both were taken under frameworks that predate it — the Preparedness Framework and the Responsible Scaling Policy — and neither is what the statement asked for, which was a US-supported international effort to develop tools. Two unilateral corporate decisions are the improvisation the statement said should be replaced.
• Why it matters: the option to stop exists and gets used, which is more than this wiki could say a week ago — but it is exercised by the same private machinery the statement implied was insufficient, which answers the question in a way its signatories may not have wanted.
• → Frontier Pacing, Anthropic, Astra

2. Anthropic's rating moved because its evaluations stopped working

• The cause of the change is increased uncertainty, not a failed test: Anthropic's most concrete task-based evaluations have "saturated" and no longer register capability gains, it reports "early signs of acceleration", and it says it is "less confident in this assessment than we were in prior risk reports" (source).
• Model 2 is described as a noticeable improvement on Mythos 5 for many internal tasks — and Anthropic's own summary is more qualified: "stronger in some areas, weaker in others, and overall only slightly more capable". Both readings are on the page; the headline one alone would be the more flattering claim.
• Why it matters: every other alignment result in this wiki is a measurement. This is a lab publishing that its instruments have stopped discriminating — and a saturated evaluation cannot tell a safe model from an unmeasured one, which weakens every assurance downstream of it without contradicting any of them.
• → AI Alignment, Conceptual Reasoning Index (CRI)

3. The harness thesis gets its best evidence and its first real refutation in one batch

• StateM: Reaching 95.3% Raw Accuracy, or a $15 Frontier Run, on Terminal-Bench 2.1 via Harness Scaling (arXiv:2608.15089) — weights untouched: GPT-5.6 Sol xhigh reaches 95.3% raw accuracy on Terminal-Bench 2.1 over 445 trials, DeepSeek-V4 Flash goes 82.7 → 88.1% for under $38 of adaptation, and a runbook transfers unchanged across a version bump. Final-score API usage: $15 against $574.68.
• How Do Agents Fail on AutoResearch: End-to-End Diagnostic Evaluation on 100 Real-World Frontier Research Tasks (arXiv:2608.14905) — 8 harness-model combinations × 100 research tasks: the same 45 failure patterns recur across all 8, including the strongest models, locating the deficit at the model level rather than in any scaffold.
• The 38× cost ratio is the first figure that lets a harness claim be priced; the standing complaint here since 08-17 is that seven papers reported gains and none published what a loop costs.
• Why it matters: the two are not contradictory, and the joint reading is now the wiki's position — harness scaling buys execution reliability and does not buy self-assessment. StateM supplies durable state for bounded verifiable tasks; what AutoResearchEval finds missing is a metacognitive loop, which no amount of state management provides.
• → Eval Harness Configuration

4. A benchmark figure landed for Qwen3.8-27B — and a paper says the serving route can move one invisibly

• Simon Willison published Qwen3.8-27B at 52 on the Artificial Analysis Intelligence Index — equal to GPT-5.6 Luna (max), one behind GLM-5.2 (max) and DeepSeek V4 Pro 0813 (max) at 53 (source). That resolves the direction of the r/LocalLLaMA claim this wiki recorded as uncheckable yesterday, from a named author who links the leaderboard page.
• Same day, Ventor-QTest: Threat-Model-Driven Verification of Vendor-Hosted LLM APIs (arXiv:2608.16391) audits vendor-hosted APIs black-box and finds route-level fidelity loss with little detectable association with GPQA-Diamond accuracy, while pronounced loss coincides with a declining Terminal-Bench pass rate as task exposure increases.
• Why it matters: single-turn benchmarks are structurally blind to the defect, and single-turn-shaped figures are what most third-party numbers in this wiki are. Nothing states which serving path produced the 52 — and the status moves to third-party figure with a named author, not to a held measurement. The next leaderboard capture is 2026-08-23.
• → Qwen 3.8 27B, Model Routing

5. Z.ai answers Project Glasswing, and the gate does not obviously survive the weights

• "Shield of Open Source", announced alongside GLM-5.3: free security audits, automated code-auditing via ZCode, free community usage quotas, and a restricted "Cybersecurity Trusted Access" tier reserving the model's most sensitive offensive capabilities for verified users. SCMP, quoting a researcher: "Project Glasswing with Chinese characteristics", treating openness as an asset rather than a drawback (source).
• Anthropic's Glasswing gates a closed model to ~100–150 vetted organisations. Z.ai proposes to publish weights and gate the offensive capability.
• Why it matters: nothing read explains how a verified-access tier is enforced on a model anyone can download, whether it binds only the hosted API, or whether GLM-5.3's weights — staged for around 2026-08-28 — ship under the programme or are held by it. It arrived through Trivium China prefetch, a day after the lab rotation checked Z.ai and got nothing.
• → Z.ai, AI-Enabled Cyberattacks