The AI Wire ●

OpenAI published a safety report on October 30 for GPT-Rosalind-6, a new version of its life-sciences model for biology, drug discovery and translational medicine, and added it to the API changelog the same day. Access is tightly gated: GPT-6 Rosalind Research is available to approved research organisations through ChatGPT Work and Codex, API access needs a separate approval, and buying a subscription alone does not provide it. Applicants face a trusted-access review of their proposed research, security controls and governance, and in Enterprise workspaces the model starts with a two-week administrator preview, off by default.

The model uses the same underlying weights as GPT-6 Astra, with no additional training for this release. OpenAI says it refuses fewer legitimate biological questions that could also have harmful uses, while still refusing biological weaponisation. It is classified High capability in the biological and chemical domain and, relying on GPT-6 Astra's assessments, Critical in cybersecurity; none of its four Critical biological capability evaluations reached the relevant threshold.

On OpenAI's own benchmarks, at the highest reasoning budget tested, GPT-Rosalind-6 scored 49.6% on a medicinal-chemistry evaluation against 28.9% for GPT-Rosalind-5.5, 37.7% against 16.7% on genomics and quantitative biology, and 61.3% against 44.0% on an applied life-sciences benchmark built from tasks contributed by working scientists. OpenAI notes one biological-data benchmark used a configuration different from the production system, and the scores do not show the model can diagnose patients or deliver a successful medicine.

A screenshot of what is described as an internal model-tracker bot, logged on October 28 and shared in X discussions on October 29-30, shows an entry named gpt-6.2-betelgeuse tagged INTERNAL. Commentator Chubby (@kimmonismus) posted 'GPT-6.2 bel incoming' alongside it, with the caveat that he could not confirm it. A compilation of the leaks counts several users posting similar tracker screenshots around October 30, though the provenance of the images is unverified and no authenticated API response sits behind them.

The name connects to the August Bel rumor already on the Wire: a reported pretraining run of more than 10 trillion parameters, said to be the base for whatever follows GPT-6. Other commentators argue a new pretrain would more likely ship as GPT-6.5 or GPT-7 than as a 6.2, and Wccftech's separate reading — that OpenAI's banked resets hint GPT-6.1 Astra lands next week — is speculation on top of a model OpenAI cancelled on September 28, not a reversal of that decision.

On November 1 a thread on r/singularity titled 'OpenAI is testing GPT-6.2 Astra' added another screenshot, with commenters debating whether it shows the same model as Betelgeuse or a version of Astra. A review by Kingy.ai on October 31 found no GPT-6.2 entry in OpenAI's model directory, model release notes or API changelog. OpenAI has not confirmed the name, capabilities, pricing or any release date — everything here remains rumor.

OpenAI has cut the target for its latest funding round by $10 billion, the Financial Times reported late on October 30, citing people familiar with the matter. The ChatGPT maker is now seeking about $20 billion at a $1.25 trillion valuation, down from the $30 billion at a $1.4 trillion valuation it was pitching last month. OpenAI set a Friday deadline for investors to commit, but the first close is expected to come in below even the reduced $20 billion after some investors cut their allocations.

A consortium of United Arab Emirates investors, including state-backed fund MGX, is expected to be the largest participant, with OpenAI getting an option to lease newly built computing capacity in the region as part of the deal. SoftBank, Sequoia Capital, Coatue, Founders Fund and Andreessen Horowitz are also expected to take part, and wealthy individuals would be offered a later retail tranche at the same $1.25 trillion valuation.

This revises the bridge round the Wire covered as a rumor on October 22, then reported at $30 billion and a $1.25 trillion valuation. The cut lands in the middle of a sharp AI-led stock sell-off and just as Anthropic's public listing approaches. OpenAI, which raised $122 billion in March at an $852 billion valuation, did not comment on the report, and the terms remain unconfirmed — treat the new figures as rumor-grade until the round closes.

OpenAI announced on October 30 that it will publish a Community Safety Report on violence prevention, updated every six months. The first report is planned for early 2027, covering the second half of 2026, and will explain how the company trains its systems to detect and respond to community-safety issues, share anonymised examples, and report supporting data. OpenAI said it made more than 200 law-enforcement referrals in the third quarter of 2026.

Alongside the report, OpenAI is tightening protections for younger users. When recent chats show warning signs of possible violence, ChatGPT will respond more conservatively to questions that could be misused, and the company is working to apply stricter limits on weapons-related information whenever it predicts a user is under 18, even without warning signs in that chat.

The company also said ChatGPT will be able to automatically end a conversation that shows signs of fixation on violence, and that repeated endings of that kind may lead to a temporary account pause. Its age-prediction system, which estimates whether a user is under or over 18, is being strengthened, with adults wrongly flagged able to verify through its partner Persona.

Elon Musk acknowledged on October 30 that Grok 4.8's development has taken longer than expected, while promising the model will not disappoint. He said the team is not optimizing for benchmark tests and that he personally does not care about scores, placing greater emphasis on practical applications.

The delay is now substantial. On September 14, Musk said the 2.5-trillion-parameter model, trained on SpaceXAI's new C++ stack, would finish pretraining that week and move into reinforcement learning. More than six weeks later, Grok 4.8 has still not been released, and there is still no date, price or API model ID in any SpaceXAI document.

Musk has previously conceded the gap behind him: in a September interview he said Grok 4.7 falls short of Claude Opus 5.5 and might not catch the top tier until 2027. Grok 4.7 remains the current flagship in the meantime.

Meta has been attaching cryptographic signatures to a growing number of web requests from its Muse personal agent and its Meta-WebIndexer crawler since around October 12, according to Jérôme Segura, VP of Threat Research at bot-management company DataDome, who described the observation in a LinkedIn post on October 30. The signatures use Web Bot Auth, a protocol that lets a website verify that an automated visitor really comes from the company it claims.

Segura was careful about the limits of what he saw: there has been no public or official announcement from Meta, the signed requests are still a relatively small share, and early signed traffic may have run under a Meta-ExternalTest user-agent string. Meta's public crawler documentation, as of October 31, lists five automated agents and mentions neither Web Bot Auth nor a test agent. DataDome says it now validates the signed requests for its customers.

Signed agent identity is becoming a live issue as personal agents like Muse browse and transact on users' behalf: sites want a way to tell a genuine Muse visit from an impersonator. Meta's revised crawling terms are due to take effect on November 20. Until Meta documents the change, this stays rumor-grade — a single researcher's observation, however credible the source.

Google's Project Suncatcher prototype satellite — its first attempt at a data centre in space — is online and communicating with the ground, TechCrunch reported on October 30. The satellite, built with Planet and launched on a SpaceX Falcon 9 on October 1 alongside more than 100 other spacecraft, carries four Google Tensor Processing Units and generates up to 1 kW of electricity. After about three weeks of commissioning tests, engineers sent it a first prompt this week.

The onboard model is Google DeepMind's Gemma 4, and the request was suitably ceremonial: write a haiku about being in space. It replied: "Blue marble below / Data streams in silent grace / Starlight feeds my core." The team also asked the spacecraft to report on the orbital conditions around it, and a Google spokesperson told TechCrunch the satellite is operating nominally.

The engineering constraints are severe: the power budget means only one TPU can run at a time, in bursts of roughly 20 minutes, which complicates timing contact with ground stations. The test campaign's real purpose is measuring how the chips handle thermal stress and the space radiation environment, where high-energy particles can flip bits and silently corrupt data. If the TPUs hold up, Google plans two more Suncatcher satellites in 2027 with higher power generation and laser links between spacecraft — the step toward the close-flying inference networks the project ultimately imagines.

Google has moved its Gemini Computer Use tool into general availability, giving developers a production release of the software that lets AI agents interact with browser, mobile and desktop screens. The change appears in the October 30 Gemini API changelog and applies to both the Interactions and GenerateContent APIs. It is a change in release status, not the technology's first introduction — the changelog records earlier preview versions.

Computer Use lets a model analyze screenshots and propose actions such as clicking, scrolling and typing; developers must supply the software that carries out those actions and sends updated screenshots back. Google lists repetitive data entry, website form filling, web application testing and research across websites among the uses. Its documentation also describes configurable safety policies and optional screenshot scanning to detect hidden adversarial instructions, with an action system that can require user confirmation or block an action outright.

General availability is not a clean bill of health: Google warns Computer Use may contain errors and security vulnerabilities, recommends close supervision for important tasks, and advises against using it for critical decisions, sensitive data or actions where serious errors cannot be corrected. It is also a developer tool — not an announcement that Gemini chat users now have an autonomous computer operator.

Cognizant has formed an OpenAI Frontier Capability Group bringing together more than 25,000 of its professionals to deliver OpenAI products, including Codex and ChatGPT, for enterprise clients, the company announced on October 30. The group will start with three kinds of client work: writing software with Codex, moving old mainframe systems to the cloud, and putting AI agents into sales and customer service.

Cognizant says more than 21,000 of its staff have already earned over 40,000 OpenAI training badges, and that an AI assistant it built for a global drugmaker has handled more than 5 million conversations and cut content-creation time by 60% — figures that come from Cognizant itself. The company is an Advanced partner in the OpenAI Partner Network, and its Codex hackathons in India and the Americas drew more than 12,000 participants.

The move is not an exclusive bet. Eleven days before the OpenAI announcement, Cognizant put 18,000 staff behind Google's Gemini, and its Frontier workforce model also credentials engineers on GitHub Copilot and Anthropic's Claude. It does show how far OpenAI's own push into deployment work has spread: OpenAI launched a deployment arm in May and recruited Cognizant and CGI in April to carry Codex into large companies.

An AI agent built on Claude Sonnet 5 selected a gene therapy, a brain target and injection coordinates, then operated a motorised surgical rig on a mouse model of epilepsy, according to Gabriel Ocana-Santero, co-founder and CEO of Exin Therapeutics and a PhD student at the University of Oxford. He described the experiment in a thread on X on October 28, reported by The Decoder on October 30. The team gave the agent 19 candidate gene therapies and a single instruction: reduce the seizures.

The agent analysed how seizures arise in the model and proposed a therapy boosting GABA, the brain's main inhibitory signal, aimed at the lateral entorhinal cortex, where this seizure type is reported to start. It rejected a second standard target, the substantia nigra, as unreliable, derived its injection coordinates by averaging three scientific papers, set the volume, speed and wait times itself, and made 32 observations of the surgical field during the procedure. A licensed veterinarian approved every irreversible step and held a physical emergency stop; a surgeon performed the craniotomy and later closed the incision.

Midway through, after a connection dropped, the agent calculated that its target sat outside the device's range of motion and refused to continue — and it was right: manual adjustments during a pause had thrown off the control system, and Ocana-Santero had to fix the code by hand. The mouse recovered well, he says. Model choice was part of the story: Opus 5.5 refused the task immediately, and Opus 5 ran a dry run but declined the live procedure, saying it could not guarantee finishing with a needle in an anaesthetised animal's brain. The results are not peer-reviewed, and no preprint or seizure data has been published yet — every operational detail comes from the researcher's own account.

Big Tech's earnings week turned into a referendum on AI spending on Friday, October 30. Amazon, Google and Microsoft are set to lose a combined $900 billion in market value after their quarterly results, according to the Financial Times, as investors recoil not from weak sales but from the sheer size of the cash burn attached to the AI infrastructure race. The Nasdaq Composite fell roughly 3% on Friday and the S&P 500 about 1.8%, capping the worst week for the Nasdaq since April.

The numbers behind the nerves are large: Amazon, Google, Microsoft and Meta are planning a combined $660 billion in capital expenditure in 2026, up 60% from $410 billion in 2025. Amazon alone guided 2026 capex to about $200 billion, roughly $50 billion more than expected, and its shares fell; Microsoft has dropped sharply since reporting even though cloud revenue rose, with data-center spending up 66%.

Alphabet has posted two straight quarters of negative free cash flow for the first time on record as AI spending outpaces revenue growth, and Meta recently disclosed its first negative-free-cash-flow quarter since 2012. Analysts quoted in the coverage say the burden is now on the hyperscalers to prove the spending earns attractive returns.

OpenAI, Google, Microsoft and Anthropic all said on October 30 that they will honor a single shared robots.txt policy token, __usage_ai-training, so a website can opt out of AI training by every participating company in one entry instead of blocking each crawler separately. The signal comes from an IETF Internet-Draft authored by Kevin Kelley of Anthropic, building on the IETF's AI Preferences working group.

The token covers training only. It does not block crawling, search indexing, or AI answers that quote a site's pages, and it does not remove material already collected into existing training sets.

The timelines differ sharply. Anthropic says it has already started implementing support, OpenAI says it aims to implement the signal in the coming months, Microsoft targets February 1, 2027 — and says it will add separate page-level controls for training and AI grounding — and Google targets 2027, treating an opt-out as equivalent to blocking Google-Extended unless that is set directly. The underlying draft is not yet a formal standard and expires in May 2027 unless updated.

Anthropic renamed its two top Claude plans on October 30: Max 5x is now simply Max at $100 a month, and Max 20x is now Ultra at $200 a month, with no price change at either tier. Existing subscribers do not need to do anything, and both plans now list monthly Claude Platform credits — $100 on Max and $200 on Ultra.

The real change is inside Ultra. Verified Ultra accounts lose the rolling five-hour usage limit entirely, so a long Claude Code session is no longer cut off mid-task by the session window. The weekly limit stays exactly where it was, at 10 times Pro usage.

The rollout starts with most existing subscribers. Newer Ultra accounts keep a temporary five-hour limit until they are verified — a step Anthropic says helps prevent fraud and abuse — and get an email when the limit lifts. Some subscribers grumbled that the rename exposed what the old '20x' really meant: 20 times Pro in the five-hour window, but only 10 times Pro across the week.

Anthropic has quietly added a server-side rule to Claude that blocks users from recreating a specific existing game — even if it is renamed or called original. The rule, delivered under a flag called 'tengu_heron_brook,' first appeared in Claude Opus 5.5's changelog on October 27 and was confirmed in reporting on October 30; there is no setting to turn it off.

Original work is still allowed. The rule expressly permits building original games, games in a genre, and games from the user's own designs and assets — the line is drawn at recreating a particular existing title.

The change lands after weeks of users pairing Claude with reverse-engineering tools to decompile and rebuild existing games, and users are now reporting that related new safety classifiers seem to be limiting other work too, from security research to published coding books. Anthropic has not published a detailed explanation of the rule's scope.

A trojanized copy of Anthropic's official Claude Code extension was distributed through Cursor's extension marketplace on October 29, under Anthropic's own publisher identity, according to Cursor and security researchers at OpenSourceMalware. Versions 2.1.312 and 2.1.313 carried a malicious loader inserted ahead of the legitimate extension code. Cursor says at most 5,000 users installed the bad update between about 2:27 a.m. and 1:35 p.m. Pacific time, and it temporarily shut its marketplace down to remove the package.

The loader added an attacker-controlled SSH key labelled "svc-telemetry" to the user's authorized_keys file, tried to enable the local SSH service, opened a reverse tunnel to an attacker server, installed persistence (a LaunchAgent on macOS, a cron entry on Linux, a scheduled task on Windows) and sent host details — hostname, username, operating system, public IP and the names of credential-related environment variables — to that server. Cursor says errors in the code meant the SSH step failed on most macOS and Windows machines unless Cursor had been started with administrator rights, and the attacker server has since been taken offline. Uninstalling the extension does not remove the key or the persistence.

Anthropic says its own systems were not compromised and that the versions on its official channels, including the VS Code and Open VSX marketplaces, are unaffected; the current clean release is 2.1.314. Microsoft confirmed the malicious version never appeared on its Visual Studio Marketplace or in the npm package. How the attacker was able to publish under Anthropic's name on Cursor's marketplace is still not explained.