Watch today's digest as a video summary (generated by NotebookLM)
Statistically Speaking
One Thing to Tell Your Friends
TL;DR
Hot off the Presses
OpenAI's Codex Hits 7 Million Users - and May Have Passed Claude Code
Codex (OpenAI's coding agent, now bundled as "Codex and ChatGPT Work") reached 7 million active users on July 13, adding roughly 1 million in about 24 hours. The surge followed two moves: OpenAI temporarily lifting its usage-hour caps, and the July 9 launch of its GPT-5.6 models. Anthropic's Claude Code last publicly reported around 2 million users earlier this year, and has since gone quiet on numbers while shifting some effort to its Slack-based "Claude Tag."
- 10x growth in six months - from an estimated 550,000-700,000 users at the start of 2026.
- Caps distort the picture - removing usage limits inflates active-user counts, so the milestone should be read alongside that policy change.
- The real battleground is distribution - generous limits and bundling now drive adoption spikes as much as raw model quality.
A Popular AI Coding Tool Runs Hidden Malware the Moment You Open a Project
Security firm Mindgard disclosed a zero-day (a flaw with no fix available) in Cursor, an AI-powered code editor used by more than 7 million people and 50,000 companies. On Windows, Cursor looks for its Git helper program in several places - including inside the project folder itself - so an attacker can plant a booby-trapped file named git.exe in a project, and Cursor runs it automatically with the user's full privileges. A proof-of-concept renamed the Windows calculator to git.exe; opening the repo launched it repeatedly.
- Seven months of silence - reported in December 2025, it went unfixed through 197+ releases before Mindgard published it on July 14.
- No interaction needed - the code runs during normal editor operations, not from anything the user clicks.
- The practical rule - treat opening an unknown repository in an AI code editor as a code-execution risk, like running a stranger's program.
Google DeepMind's CEO Wants a Global AI Watchdog Running by New Year
Demis Hassabis, CEO of Google DeepMind and a Nobel laureate, published a personal framework on July 14 calling for the United States to create a new AI oversight body. It would screen the world's most capable models, be funded by the AI industry, and be staffed by independent technical experts - with the power to coordinate an industry-wide slowdown if risks mount. Crucially, the rules would apply to every frontier-class model regardless of country of origin or whether it is open or closed.
- He wants it operational before year-end - an unusually fast timeline for regulation.
- Today's cyber risks are "warning shots" - he warns that within 18 months, far graver biological and nuclear misuse could be baked into freely downloadable models.
- Benchmark-triggered oversight - qualifying tests would decide which models face scrutiny, updated as capabilities grow.
A Phone Can Now Run a 27-Billion-Parameter AI Model
PrismML released Bonsai 27B, a version of the Qwen3.6-27B model compressed so aggressively it fits in a phone's memory. The trick is extreme quantization - storing each of the model's internal numbers with far less detail. A "1-bit" variant uses just two possible values per number, shrinking the model to 3.9GB, small enough for an iPhone 17 Pro, while keeping about 90% of the original's benchmark quality.
It is free and open (Apache 2.0), available on Hugging Face and GitHub. PrismML: Bonsai 27B
- A "ternary" variant (three values per number) keeps ~95% of quality at a 5.9GB footprint with full reasoning and tool use.
- It runs on-device - roughly 11 tokens per second on an iPhone 17 Pro Max, per PrismML.
- The weak spot is tool use - the ability to call other apps degrades the most under compression, dropping from a score of 80 down to 66.
The Most Famous AI Coding Test Is Badly Broken
A new benchmark called SWE-MERA audited SWE-bench, the industry-standard test for AI coding agents, and found that a large share of "successful" fixes were not real. Roughly a third of passing patches had the actual solution leak into the test, and another third passed only because the test was too weak to catch a wrong answer. SWE-MERA's fix is to continuously pull fresh, real GitHub bugs that models could not have seen during training.
- 63.75% combined artifact rate - direct leakage plus inadequate tests accounted for most reported success.
- Contamination is the theme of 2026 - static tests that get reused eventually leak into training data and overstate ability.
- The takeaway - prefer benchmarks whose tasks are dated after a model's training cutoff.
Creative AI & Media
Pedalican - A Desktop "Pet" Built Entirely With AI-Generated Art
Try it: GitHub: simonw/pedalican
- What it does - an animated pelican on a bicycle that bounces around your screen with updates from your coding agent, like a modern Clippy.
- Why it's notable - developer Simon Willison built the sprite animations with GPT-5.6 driving an image model, using a fixed reference image and a magenta backdrop for consistent frames.
- It's a reproducible recipe - the project ships every prompt and intermediate image, showing how to make game-ready art without a traditional art pipeline.
Generated Sprite Art Is Now a Reusable Recipe
- What's happening - the Pedalican build shows a repeatable pipeline: a fixed reference image plus a chroma-key background yields consistent, composable animation frames from a general image model.
- Why it matters - small teams can produce game-ready character art without a traditional art pipeline, using reusable open-source "skills" for the desktop-pet framework and image generation.
- The trick - keeping a single reference image and a magenta backdrop is what makes the frames stay on-model and easy to cut out.
Developer Tools & Infrastructure
Research & Models
Cheap AI Verification: Let Models Vote as a Jury
- The finding - having several independently trained models agree on an answer is a better quality check than trusting any single model's confidence or a specially trained scoring model.
- Why it works - independent models make different mistakes, so wrong answers scatter while correct ones pile up agreement.
- The catch - it fails when models share the same misconception (common in science, near-zero in math).
Multi-Agent Systems Get Smarter by Doing Less
- The result - GRADE, a system that decides how many AI agents to use and how deeply per question, beat the strongest baseline by 4.8 points while using half the computing power.
- Why it matters - it challenges the "throw more agents at it" approach, showing that adaptive, gated effort wins on accuracy-per-dollar.
Diffusion-Style Language Models Are Closing the Reasoning Gap
- The shift - diffusion language models generate text differently and can be faster, but have lagged on reasoning. New methods are fixing that.
- The numbers - DMPO improved reasoning accuracy by up to 39.6 points over prior methods; a related method, BARD, delivered up to 3x faster output than its source model.
- Why it matters - the speed advantage of this alternative approach no longer requires sacrificing quality.
Graph-Based Retrieval Gets 20x Cheaper
- The problem - feeding AI relevant documents before it answers (retrieval-augmented generation, or RAG) works better with a knowledge graph, but building those graphs has been slow and expensive.
- The result - MG2-RAG reports state-of-the-art quality with a 43x faster graph build and 24x lower cost, while keeping image detail intact.
AI Doctors Stop Gathering Evidence Right When It Matters Most
- The finding - when 32 top models had to actively request patient data before diagnosing, the best managed only 68% accuracy, and their use of available data collapsed from 57% to 26% in the final round.
- The warning - their reasoning looked good (91% scored well) but did not correlate with correct answers, exposing the same biases as inexperienced clinicians.
Turning On "Reasoning" Can Make AI Overconfident
- The finding - chain-of-thought reasoning in vision-language models can raise accuracy while making the model's confidence scores unreliable and overconfident.
- The fix - don't read confidence off the model's word probabilities when reasoning is on; sample multiple answers and measure agreement instead.
Business & Industry
Surprising & Under-the-Radar
AI Can Be Jailbroken by Faking Its Own Past Words
- Why it's surprising - instead of tricking the user's message, an attacker inserts a fake AI reply into the conversation history, and the model trusts its own "past" far more than it questions a user, then continues from the planted harmful content.
- The fix has to verify where each message came from, not just filter inputs. arXiv: Trojan Horse Prompting
"Many Humans ARE Bots"
- Why it's surprising - a study cited in Zvi Mowshowitz's analysis of X found most divisive content comes from ordinary home internet connections without VPNs, making genuine users nearly impossible to distinguish from coordinated manipulation.
- The platform's algorithm rewards author replies far more than reposts, effectively paying people to be provocative. The Zvi: Twitter Thoughts
Are We Offloading Too Much Thinking to AI?
- The debate - writer Yennie Jun argues the danger isn't automating boring tasks, it's automating human agency itself - our decisions, preferences, and judgment.
- She cites a San Francisco man who records conversations for AI analysis because he trusts the machine's "critical thinking" over his own. It resonated widely (345 Hacker News points). artfish.ai: Offloading thinking to AI
The Hidden Cost of Skipping Code Review
- The argument - developer Armin Ronacher warns that the friction of reviewing and discussing code was never pure waste; it kept teams sharing one mental model of how the system works.
- As agents merge code with less human back-and-forth, that shared understanding can quietly fragment even as output rises. Simon Willison: Quoting Armin Ronacher
Signals to Track
"Loop Engineering" Becomes a Standard Skill
Repeated-prompting "goal" commands are now built into Codex, Claude Code, and Hermes. The honest caveat: many developers find agents drift off-target and rack up costs, so the real skill becomes designing guardrails and stopping conditions. If this matures, routine multi-step work (fixing flaky tests, long migrations) increasingly runs unattended. Pragmatic Engineer: loop engineering
Diffusion Language Models Are Closing the Reasoning Gap
Most AI writes one word at a time (autoregression); diffusion models generate text differently and can be quicker, but have trailed on reasoning. New training methods just changed that, with one (DMPO) improving reasoning accuracy by up to 39.6 points and another (BARD) running up to 3x faster than its source. If this holds, the speed gains of diffusion generation could arrive without the usual quality penalty, making AI responses cheaper and faster for everyone. arXiv: DMPO
SQLite Keeps Eating Bigger Workloads
The lobste.rs migration adds to a 2026 pattern of serious sites running on SQLite. If it continues, expect cheaper, simpler hosting to become the default for small-to-medium web apps, quietly lowering the cost of running online services. Simon Willison: lobste.rs on SQLite
One-Bit Models Put Real AI on Phones
Bonsai 27B fitting on an iPhone is the leading edge of a trend toward private, offline, free-to-run AI. The weak spot to watch is tool use, which degrades most under compression, so the first phone-native agents may think well but struggle to act. PrismML: Bonsai 27B
Top Repos Today
📜 License: MIT · 👤 By: individual developer
🎯 Time to value: 10 minutes
| ✓ Pros | ✗ Cons |
|---|---|
| Ready-made, proven workflows | Reflects one developer's style |
| Works across major AI coding tools | Needs a compatible agent |
| Actively maintained | Skills still need reviewing before use |
📜 License: Apache 2.0 · 👤 By: community
🎯 Time to value: 15 minutes
| ✓ Pros | ✗ Cons |
|---|---|
| Huge, practical example set | Quality varies by project |
| Runnable, not just descriptions | Some apps need paid API (application programming interface) keys |
| Beginner-friendly | Curation can lag fast-moving tools |
📜 License: MIT · 👤 By: open-source project
🎯 Time to value: 20 minutes
| ✓ Pros | ✗ Cons |
|---|---|
| Free and open source | Younger than commercial tools |
| No account or cloud required | Fewer advanced effects so far |
| Fast-growing community | Still maturing toward stable |
📜 License: MIT · 👤 By: university lab
🎯 Time to value: 30 minutes
| ✓ Pros | ✗ Cons |
|---|---|
| Complete agent scaffold | Financial risk if misused |
| Active development | Not financial advice or a guarantee |
| Educational value | Needs market and coding knowledge |
📜 License: MIT · 👤 By: individual developer
🎯 Time to value: 10 minutes
| ✓ Pros | ✗ Cons |
|---|---|
| Noticeably improves AI UI output | Taste is subjective |
| Simple to add | Works only with supported tools |
| Free | Not a full design system |
📜 License: MIT · 👤 By: individual developer
🎯 Time to value: 5 minutes
| ✓ Pros | ✗ Cons |
|---|---|
| Directly targets agent accidents | Not a complete sandbox |
| Quick to install | Rules need tuning |
| Lightweight | Can block legitimate commands |
Top Models Today
👤 By: empero-ai · 🎯 Task: image-text-to-text
📐 Size: 9B
| ✓ Pros | ✗ Cons |
|---|---|
| Runs locally, multimodal | Licensing needs checking |
| Very high download momentum | Smaller than frontier models |
| Efficient packaged format | Community-made, less documented |

👤 By: OpenMOSS-Team · 🎯 Task: audio-text-to-text
📐 Size: 0.9B
| ✓ Pros | ✗ Cons |
|---|---|
| Small and efficient | Niche audio use case |
| Speaker separation built in | Accuracy varies by audio quality |
| Open weights | Newer, less battle-tested |

👤 By: Baidu · 🎯 Task: image-text-to-text
📐 Size: 3B
| ✓ Pros | ✗ Cons |
|---|---|
| Strong, in-demand OCR | Focused on one task |
| Efficient at 3B | Language coverage varies |
| From a major lab | License needs review |

👤 By: Z.ai · 🎯 Task: text generation
📐 Size: 753B
| ✓ Pros | ✗ Cons |
|---|---|
| Frontier-scale, open | Needs serious hardware |
| Sustained popularity | Not for local phone use |
| Strong general capability | Large storage footprint |

👤 By: unsloth · 🎯 Task: text generation
📐 Size: 284B
| ✓ Pros | ✗ Cons |
|---|---|
| Optimized for local runs | Still large at 284B |
| Speed-focused | Quantization trims quality |
| Popular, well-supported packager | License needs review |

AI Launches Today
💰 Pricing: free (open source) · 🏷 Category: marketing
💰 Pricing: paid (intro $500/mo) · 🏷 Category: agent infrastructure
💰 Pricing: freemium · 🏷 Category: productivity
Snapshot
| Provider | Model | Input $/1M | Output $/1M | Context |
|---|---|---|---|---|
| Anthropic | Claude Opus 4.8 | $5.00 | $25.00 | 200K |
| Anthropic | Claude Sonnet 5 (intro, thru Aug 31) | $2.00 | $10.00 | 200K |
| OpenAI | GPT-5.6 Sol | $5.00 | $30.00 | 1M |
| OpenAI | GPT-5.6 Luna | $1.00 | $6.00 | 1M |
| Gemini 3 Pro | $2.00 | $12.00 | 200K ($4/$18 beyond) | |
| Gemini 3.5 Flash | $1.50 | $9.00 | 1M | |
| Groq | Llama 3.3 70B | $0.59 | $0.79 | hosted |
What this means: Flagship prices from Anthropic, OpenAI, and Google cluster tightly around $2-5 input, but output pricing spreads wider (GPT-5.6 Sol charges $30 output vs Gemini 3 Pro's $12). Anthropic's introductory Sonnet 5 pricing and Google's Flash tier are the current value picks for everyday work; Groq remains far cheaper by hosting open models rather than selling its own frontier family. No day-over-day changes from official pages; GPT-5.6's tiered pricing was noted at its July 9 launch.

Member discussion