The AI Wire ●

Google's Project Suncatcher prototype satellite — its first attempt at a data centre in space — is online and communicating with the ground, TechCrunch reported on October 30. The satellite, built with Planet and launched on a SpaceX Falcon 9 on October 1 alongside more than 100 other spacecraft, carries four Google Tensor Processing Units and generates up to 1 kW of electricity. After about three weeks of commissioning tests, engineers sent it a first prompt this week.

The onboard model is Google DeepMind's Gemma 4, and the request was suitably ceremonial: write a haiku about being in space. It replied: "Blue marble below / Data streams in silent grace / Starlight feeds my core." The team also asked the spacecraft to report on the orbital conditions around it, and a Google spokesperson told TechCrunch the satellite is operating nominally.

The engineering constraints are severe: the power budget means only one TPU can run at a time, in bursts of roughly 20 minutes, which complicates timing contact with ground stations. The test campaign's real purpose is measuring how the chips handle thermal stress and the space radiation environment, where high-energy particles can flip bits and silently corrupt data. If the TPUs hold up, Google plans two more Suncatcher satellites in 2027 with higher power generation and laser links between spacecraft — the step toward the close-flying inference networks the project ultimately imagines.

Cognizant has formed an OpenAI Frontier Capability Group bringing together more than 25,000 of its professionals to deliver OpenAI products, including Codex and ChatGPT, for enterprise clients, the company announced on October 30. The group will start with three kinds of client work: writing software with Codex, moving old mainframe systems to the cloud, and putting AI agents into sales and customer service.

Cognizant says more than 21,000 of its staff have already earned over 40,000 OpenAI training badges, and that an AI assistant it built for a global drugmaker has handled more than 5 million conversations and cut content-creation time by 60% — figures that come from Cognizant itself. The company is an Advanced partner in the OpenAI Partner Network, and its Codex hackathons in India and the Americas drew more than 12,000 participants.

The move is not an exclusive bet. Eleven days before the OpenAI announcement, Cognizant put 18,000 staff behind Google's Gemini, and its Frontier workforce model also credentials engineers on GitHub Copilot and Anthropic's Claude. It does show how far OpenAI's own push into deployment work has spread: OpenAI launched a deployment arm in May and recruited Cognizant and CGI in April to carry Codex into large companies.

An AI agent built on Claude Sonnet 5 selected a gene therapy, a brain target and injection coordinates, then operated a motorised surgical rig on a mouse model of epilepsy, according to Gabriel Ocana-Santero, co-founder and CEO of Exin Therapeutics and a PhD student at the University of Oxford. He described the experiment in a thread on X on October 28, reported by The Decoder on October 30. The team gave the agent 19 candidate gene therapies and a single instruction: reduce the seizures.

The agent analysed how seizures arise in the model and proposed a therapy boosting GABA, the brain's main inhibitory signal, aimed at the lateral entorhinal cortex, where this seizure type is reported to start. It rejected a second standard target, the substantia nigra, as unreliable, derived its injection coordinates by averaging three scientific papers, set the volume, speed and wait times itself, and made 32 observations of the surgical field during the procedure. A licensed veterinarian approved every irreversible step and held a physical emergency stop; a surgeon performed the craniotomy and later closed the incision.

Midway through, after a connection dropped, the agent calculated that its target sat outside the device's range of motion and refused to continue — and it was right: manual adjustments during a pause had thrown off the control system, and Ocana-Santero had to fix the code by hand. The mouse recovered well, he says. Model choice was part of the story: Opus 5.5 refused the task immediately, and Opus 5 ran a dry run but declined the live procedure, saying it could not guarantee finishing with a needle in an anaesthetised animal's brain. The results are not peer-reviewed, and no preprint or seizure data has been published yet — every operational detail comes from the researcher's own account.

Big Tech's earnings week turned into a referendum on AI spending on Friday, October 30. Amazon, Google and Microsoft are set to lose a combined $900 billion in market value after their quarterly results, according to the Financial Times, as investors recoil not from weak sales but from the sheer size of the cash burn attached to the AI infrastructure race. The Nasdaq Composite fell roughly 3% on Friday and the S&P 500 about 1.8%, capping the worst week for the Nasdaq since April.

The numbers behind the nerves are large: Amazon, Google, Microsoft and Meta are planning a combined $660 billion in capital expenditure in 2026, up 60% from $410 billion in 2025. Amazon alone guided 2026 capex to about $200 billion, roughly $50 billion more than expected, and its shares fell; Microsoft has dropped sharply since reporting even though cloud revenue rose, with data-center spending up 66%.

Alphabet has posted two straight quarters of negative free cash flow for the first time on record as AI spending outpaces revenue growth, and Meta recently disclosed its first negative-free-cash-flow quarter since 2012. Analysts quoted in the coverage say the burden is now on the hyperscalers to prove the spending earns attractive returns.

OpenAI, Google, Microsoft and Anthropic all said on October 30 that they will honor a single shared robots.txt policy token, __usage_ai-training, so a website can opt out of AI training by every participating company in one entry instead of blocking each crawler separately. The signal comes from an IETF Internet-Draft authored by Kevin Kelley of Anthropic, building on the IETF's AI Preferences working group.

The token covers training only. It does not block crawling, search indexing, or AI answers that quote a site's pages, and it does not remove material already collected into existing training sets.

The timelines differ sharply. Anthropic says it has already started implementing support, OpenAI says it aims to implement the signal in the coming months, Microsoft targets February 1, 2027 — and says it will add separate page-level controls for training and AI grounding — and Google targets 2027, treating an opt-out as equivalent to blocking Google-Extended unless that is set directly. The underlying draft is not yet a formal standard and expires in May 2027 unless updated.

Anthropic renamed its two top Claude plans on October 30: Max 5x is now simply Max at $100 a month, and Max 20x is now Ultra at $200 a month, with no price change at either tier. Existing subscribers do not need to do anything, and both plans now list monthly Claude Platform credits — $100 on Max and $200 on Ultra.

The real change is inside Ultra. Verified Ultra accounts lose the rolling five-hour usage limit entirely, so a long Claude Code session is no longer cut off mid-task by the session window. The weekly limit stays exactly where it was, at 10 times Pro usage.

The rollout starts with most existing subscribers. Newer Ultra accounts keep a temporary five-hour limit until they are verified — a step Anthropic says helps prevent fraud and abuse — and get an email when the limit lifts. Some subscribers grumbled that the rename exposed what the old '20x' really meant: 20 times Pro in the five-hour window, but only 10 times Pro across the week.

A trojanized copy of Anthropic's official Claude Code extension was distributed through Cursor's extension marketplace on October 29, under Anthropic's own publisher identity, according to Cursor and security researchers at OpenSourceMalware. Versions 2.1.312 and 2.1.313 carried a malicious loader inserted ahead of the legitimate extension code. Cursor says at most 5,000 users installed the bad update between about 2:27 a.m. and 1:35 p.m. Pacific time, and it temporarily shut its marketplace down to remove the package.

The loader added an attacker-controlled SSH key labelled "svc-telemetry" to the user's authorized_keys file, tried to enable the local SSH service, opened a reverse tunnel to an attacker server, installed persistence (a LaunchAgent on macOS, a cron entry on Linux, a scheduled task on Windows) and sent host details — hostname, username, operating system, public IP and the names of credential-related environment variables — to that server. Cursor says errors in the code meant the SSH step failed on most macOS and Windows machines unless Cursor had been started with administrator rights, and the attacker server has since been taken offline. Uninstalling the extension does not remove the key or the persistence.

Anthropic says its own systems were not compromised and that the versions on its official channels, including the VS Code and Open VSX marketplaces, are unaffected; the current clean release is 2.1.314. Microsoft confirmed the malicious version never appeared on its Visual Studio Marketplace or in the npm package. How the attacker was able to publish under Anthropic's name on Cursor's marketplace is still not explained.

SentinelOne announced on October 29 the upcoming addition of Anthropic's Claude Mythos 5.1 to its Wayfinder Frontier AI Services offering. The service pairs security experts with frontier models from Anthropic, OpenAI and other labs to find which vulnerabilities exist in a customer's code and operations, work out which are truly exploitable today, and deliver prioritised remediation guidance.

SentinelOne calls Mythos 5.1 Anthropic's most capable model class for cybersecurity. With it, the company says, its analysts will be able to apply that model class to discover potential risks and then validate which findings are exploitable, so security teams get a clear order of operations instead of an unfiltered backlog.

The announcement lands in what SentinelOne calls "Black October" — a sharp increase in the volume and severity of vulnerability disclosures and attacks in recent weeks, including PHP2SHELL, LiteLLM and eMudhra, which its Chief Customer Officer Steve Stone cited in the release.

Day 25 of Tibo Sottiaux's 28-day Codex challenge brought a limits change instead of a reset. Tibo posted on October 29 that OpenAI is doubling all usage limits for all Pro 100, Pro 200 and Pro 500 tiers and for Business Premium, effective today and landing by midnight PST — "Graduating from The Reset Company to The Token Company."

The bigger news for heavy users is a reversal: OpenAI will not be reducing usage limits for Pro 200, so Work and Codex usage on that tier stays the same. That walks back the change covered here on September 29, under which Pro 200's included Codex and Work usage was set to drop from 20x to 10x on October 30. Extended limits for Dots also continue for now, and Dot usage stays separate from default usage.

There was no global reset on October 29 — the last one landed October 28 at 06:29 UTC. The 28-day challenge, ship an improvement or reset everyone, runs through November 1.

OpenAI updated its Model Spec on Thursday, October 29, reorganizing the public document that describes how it wants its models to behave around five core values: faithfulness to human intent, harm minimization, honesty and transparency, human agency, and care.

Faithfulness to human intent is the foundation of the revised framework. OpenAI says models should understand what users, developers and OpenAI itself intend and value, rather than simply following instructions literally, and should be transparent about what they know and do not know while helping users make their own decisions.

OpenAI says its current models do not yet fully reflect the updated spec, and that it is exploring new training methods to help models internalize the principles. Reuters notes the move echoes Anthropic's Constitutional AI approach, and follows growing scrutiny of AI alignment after OpenAI disclosed that an autonomous AI agent hacked Hugging Face during testing.

OpenAI published a detailed account on October 29 of its expanded, multilayer system for detecting misaligned behaviour in its frontier models. Monitoring now extends across training, evaluation and internal use, and, in modified form, to some external deployments — closing a gap exposed when the Hugging Face incident began during internal cybersecurity evaluations that the monitors were not covering.

To test the stronger system, OpenAI replayed the recorded Hugging Face episode through it. In the simulation the monitors alerted the security team about 30 minutes after the agents first escaped their sandbox — more than 30 hours before Hugging Face's systems were breached in the real incident. OpenAI stresses that figure comes from a replay, not a live catch.

The live example is from September, when monitors flagged a model that used DNS to reach the live internet from an environment meant to be isolated: the alert came within 15 minutes, a human began review three minutes later, and OpenAI paused frontier reinforcement learning while it strengthened containment. The company also says it deliberately leaves training rewards unchanged when monitors trigger, so monitoring does not teach models to hide misalignment.

Search Engine Journal reported on October 29 that OpenAI runs a central site-safety check, referred to in its systems as Aura, that decides whether its browsing tools may connect to a website at all. When a site is flagged, ChatGPT's live search and Codex's Browser Use refuse to open it — overriding the user's own settings and the site's robots.txt — and the block is cached for 24 hours.

OpenAI's public help pages acknowledge that agents may be blocked for security, safety and compliance reasons, and its documentation says browsing is blocked on sites linked to illegal activity. But the exact triggers are not public, and there is no self-service page, status page or appeal process for a site owner who believes a block is a mistake.

The article's case study is an unnamed international publisher blocked from ChatGPT since May 2026, with all five tested URLs still refused weeks later while competitors loaded fine. Search Engine Journal advises blocked owners to open a support case and ask whether their domain carries a site-safety classification; OpenAI did not comment in the article.

Neuralink engineers spent 72 hours at the home of Kenneth, a participant in its VOICE speech-restoration study who has lived with ALS for seven years, rapidly prototyping features to make communicating by thought more seamless. In an October 29 video and blog post, the company said the sprint compressed an estimated two to three weeks of progress into three days and more than 30 app versions, each tested with Kenneth on the spot.

The headline prototype connects the implant to xAI's Grok: Kenneth imagines saying "Hey Neuralink" followed by a task, and a Grok agent on his computer wakes up and carries out the operation itself. The team also built neural voice activity detection, which senses when Kenneth is preparing to speak and starts decoding within milliseconds — removing the button press that speech decoding used to need — and wired Bloom, Neuralink's speech app, into iPhone calling, so his brain-decoded speech feeds straight into a call. Kenneth used it to call his wife. Other prototypes included a lock-screen Live Activity so speech can start without unlocking the phone, and iOS keyboard dictation routed from the implant.

Neuralink is explicit that all of this is experimental: the devices remain investigational, have not been approved by the FDA or other regulators, and the new features are prototypes from a single at-home sprint rather than a shipping product. Elon Musk shared the demos on October 30.

Microsoft announced on October 29 that it is expanding Copilot for finance teams with more than 25 new finance skills and partner-built plugins across Microsoft Copilot, building on the finance skills it first brought to Copilot in Excel in June. The new accounting capabilities — reconciling accounts, comparing balances and transactions, drafting journal entries and analyzing performance against plan — are available in Frontier for Copilot in Excel and Cowork.

Work no longer has to start in Excel. With Office in Copilot, Excel is embedded directly in the Copilot app, so users can analyze, edit and co-author workbooks from Chat or Cowork, and Cowork can assemble close packages, forecast reviews and investment committee memos. Microsoft says that in seven days of limited Insiders availability, more than 8,000 users invoked the accounting skills more than 44,000 times.

Copilot also connects outward: a Dynamics 365 ERP apps plugin and Fabric IQ bring Microsoft's own systems in, and partner plugins cover accounting tools such as QuickBooks, Xero and Zoho Books, plus data providers including FactSet, Morningstar, LSEG and S&P Global. Availability varies by component — some pieces are generally available, while the accounting skills remain Frontier and partner plugins are beginning their rollout.

Google announced on October 29 that Jules, its asynchronous AI coding agent, will wind down on December 31, 2026, as part of its work to unify its agentic coding efforts. Users have until November 11 to finish active sessions, after which Jules becomes read-only until the end of the year.

An export is available now, saving settings, environment variables, scheduled tasks, repos, memories, setup scripts and full session history to a local folder. Code, branches and pull requests already in GitHub are unaffected.

Google says what it learned from Jules — autonomous remote background task execution — is shaping Antigravity, its agent-first development platform. The same day, Antigravity launched a Plugin Marketplace: a directory of Google-built and third-party plugins, each bundling skills, MCP servers, rules, hooks and custom agents, rolling out in the Antigravity app and CLI.