Paul Graham shares his go-to heuristic for startup office hours: ask what would make the company more powerful, not just more profitable. That question often leads to order-of-magnitude gains. He walks through levers like owning the customer relationship, making money flow through you, introducing network effects, and building app-store-like platforms. PayPal began as a security demo; eBay sellers repurposed it for payments, and the founders pivoted. Graham calls this a tail-wagging-the-dog signal. He also argues for playing the long game—acquire users cheaply first, fix margins later—and for generosity: create more value than you capture. Open source, extensibility, and APIs are all generosity-driven power moves, especially now that AI agents are replacing human users.

Rune has open-sourced its inference engine. The code is now public, targeting production-grade multi-model serving with low latency. The post doesn't spell out supported models or benchmarks, but the open-source move lets teams audit and customize.

Meta AI suggested invasive questions like "who is the child in your video" on Instagram. Meta says it will change the suggestion system but hasn't detailed how. The issue is with auto-generated prompts, not user queries.

Herdr Studio is an open-source browser client that gives you a visual workspace for all your AI agent terminals, files, diffs, and worktrees. It relies on the Herdr daemon to keep agent sessions alive even when your browser or laptop disconnects. Supports local and SSH connections, and can be installed as a PWA on mobile. The post doesn't spell out platform support beyond macOS and Linux install scripts.

MAP and collaborators released YuE2, a music model that unifies symbolic score generation and audio synthesis. It first produces an editable ABC score, then renders vocals and accompaniment — final quality rivals Suno v5. The release includes a 3B model, VAE, SheetSage2 transcription tool, and the WildSongBench eval set, with 65 demos spanning Dark Ambient to Cyber Metal. The post doesn't disclose training data size or inference latency.

OpenAI launched ChatGPT Images 2.5 on Product Hunt, promising sharper visuals, faster generation, and better creative control. The post doesn't disclose technical details or benchmarks—just the tagline. Worth a test if you use ChatGPT for images, but take the hype with a grain of salt until hands-on reviews appear.

Trail of Bits open-sourced Coop, an internal tool that wraps Claude Code and OpenAI Codex inside isolated VMs. It prevents AI coding agents from accidentally messing up the host machine when they edit files or run commands. The repo has 309 commits and 35 stars. The README doesn't spell out supported VM backends, resource overhead, or how it compares to plain Docker or sandboxing.

This open-source project packs an agentic system into a single Rust binary, with per-entity sandboxes and SQLite databases. It emphasizes ontology-grounded, auditable agent workflows. Only 26 stars so far, but the design—single binary for easy deployment, sandbox for security—is worth a look. The post doesn't spell out which models or protocols it supports.

Berkeley RDI open-sourced CUA-Lite, a platform that unifies environments, training data, and model interfaces for computer-use agents. It has three standardized parts: Lite.Gym wraps 15+ benchmarks and 30k+ verifiable tasks behind one API, Lite.Sample converts 10+ datasets into a single format, and model harnesses let 14 model families share the same eval, SFT, and RL pipeline. The standout is a VM-free Docker sandbox that runs OSWorld tasks without hardware virtualization, cutting costs. Code and datasets are public on GitHub and Hugging Face.

grapeot ran GPT-6 Astra through several end-to-end 3D pipelines in Blender. The model researched and built a Touhou Project shrine model in about 30 minutes, produced an exploded-view assembly animation, and ported the scene to a browser with first-person navigation. It then rigged a Psyduck model and built a browser-based mocap app, and later generated a ceramic-firing explainer video by combining Blender keyframes with Grok Imagine. Architecture and scene modeling impressed the author; character modeling still needs heavy manual tweaking. All workflows are open-sourced as a GitHub Skill. The post does not disclose cost or latency figures.

A pure-Go library that gives AI coding agents persistent memory stored as files in a Git repo. It implements Google OKF v0.2, runs in-memory BM25 search under 300µs, ships an embedded MCP server, and claims to cut token usage by 80%—no external databases needed. The post doesn't name which coding agents it integrates with or show real-world token savings, so I'd hold off on the 80% claim for now.

An open-source project lets a local LLM write Three.js demos, then captures 30 seconds of video at 2fps and sends it back to Qwen 3.8 for a visual improvement pass. The author uses Ninfer on a single 5090, achieving ~210 tok/s decode and 14.66s per rewrite. The model still makes dumb mistakes like using only 1/4 of the screen or walking backwards through a maze; video feedback helps catch those. LM Studio is also supported for regular generation, but video rewriting requires Ninfer. The post doesn't specify Qwen 3.8's parameter count.

Moadim is a self-hosted, MIT-licensed loop engine that runs AI agents on a schedule. You define a loop with a prompt, a schedule, and an agent — Claude, Codex, Hermes, NanoClaw, or Pi — and it fires each tick in a fresh isolated workbench with a watchdog that kills hung runs. It ships with REST endpoints, an MCP tool interface, Swagger UI, and a web UI. It runs on macOS and Linux, uses tmux for isolation, and requires no host cron daemon.

Anthropic open-sourced a Lean 4 project that formalizes the proof of Fermat's Last Theorem into machine-checkable code. The theorem states xⁿ + yⁿ = zⁿ has no positive integer solutions for n>2, proven by Wiles in 1994. Lean 4 is a proof assistant that turns human reasoning into formally verified steps. This project ports an existing proof into Lean 4, not a new theorem. The post doesn't disclose how many person-hours were spent or whether Wiles was involved.

Google's personal agent Gemini Spark can now edit photos, curate albums, auto-create shared albums, turn concert flyers into calendar events, and run workflows in Google Photos. The feature rolls out over the next few weeks to U.S. English users on Gemini AI Pro and Ultra plans. The post doesn't disclose an international rollout timeline.

NVIDIA announced it will acquire open-source AI platform Hugging Face for $12.93 billion. Jensen Huang explained in a blog post that Hugging Face hosts over 18 million developers, 3 million models, and 500,000 datasets. He pledged the platform will remain open, supporting open-weight models, multi-cloud, and multi-accelerator environments, and will not become a closed entry point for NVIDIA hardware. NVIDIA is already the platform's largest contributor with 500+ models and 250+ open datasets.

OpenClaw 2.0 launched with 16,000 PRs merged by 933 contributors, yet the core team has only 9 full-time members. Ruan Yifeng argues nearly all PRs were reviewed and merged by AI without human code review. He warns against running OpenClaw on work machines due to untestable risks. The post also notes SolidJS's founder lamenting that AI-driven rewrites push teams toward mainstream stacks like React and Rust, eroding ecosystem diversity.

Nvidia confirmed it acquired Hugging Face for $12.93 billion. The platform hosts 3 million models, 1 million apps, and 500,000 datasets, used by over 18 million developers. CEO Jensen Huang said Hugging Face will stay open, with no requirement to use Nvidia compute. Nvidia has released 500+ models and 250 open datasets on the platform. Owning an open ecosystem helps Nvidia optimize for its chips and sell unused capacity.

Thomas Wolf posted on X that NVIDIA is acquiring Hugging Face for roughly $12.93 billion, with no changes for users that day. Wolf said the team will keep the Hub an open, independent, compute-agnostic platform and use NVIDIA's resources to push open-source AI. The post is a single-paragraph statement; it doesn't disclose deal structure, regulatory approvals, or integration timeline.

NVIDIA's official blog announced it will acquire Hugging Face for $12.9303 billion. The post body contains only the title and site navigation—no deal details, timeline, or integration plans are disclosed. The figure is precise to three decimal places, but the article offers zero context, so treat this as headline-level info for now.

Polars dropped the first release candidate for 2.0, with the stable release coming in a few weeks. This major version isn't about new features—it cleans up old design decisions and changes defaults. The biggest shift: LazyFrame.collect now uses the streaming engine by default, which the team says is roughly 5x faster overall with much lower memory usage. The trade-off is that row order is no longer guaranteed for joins, group_by, and unpivot unless you set maintain_order. 2.0 also gets stricter: is_in on mismatched types that would lose precision now raises an error, horizontal concat with mismatched lengths fails instead of silently padding nulls, and many implicit casts are removed—string-to-date now requires .str.to_date(), and enum/integer conversions need dedicated methods. Removed APIs raise typed exceptions with migration hints, making it easier for both humans and AI agents to update code.

Hugging Face released funes, an open-source tool that gives coding agents like Claude Code and Codex a local memory layer. A single `funes add` command indexes past sessions into a Lance dataset, letting the agent recall original sources by agent, timestamp, session, and turn. The post doesn't disclose retrieval latency or storage overhead, so I'd hold off on performance expectations.

Anthropic's post explains how to turn models like Claude into commerce agents that actually work in production, focusing on architecture, latency, and cost. They also open-sourced a reference implementation called commerce-agents. The full article body isn't available yet—only the title and lede are shown—so specific architecture details, latency figures, and cost breakdowns are still missing.

Shopify open-sourced Tangle, a drag-and-drop ML pipeline editor. It lets teams visually build workflows, collaborate, use any language/framework, and cache intermediate results. Code is on GitHub; try the online Playground.

Google DeepMind launched the Fairwind Program, giving government agencies, critical infrastructure operators and cybersecurity partners limited access to its most advanced cyber defense capabilities. The program pairs a dedicated cyber model, Gemini 3.8 Flash Cyber, with the CodeMender harness to autonomously find, verify and fix vulnerabilities, cutting weeks of manual remediation to deployable patches generated in minutes, at lower cost than traditional frontier models.

Nvidia agreed to buy open-source model platform Hugging Face for $12.9B, its largest acquisition ever. Hugging Face's annual recurring revenue is about $150M, putting the deal at 86x ARR. Nvidia is buying the default entry point for global developers and the demand signals that come with it. Over the past two years, Nvidia and Microsoft repeatedly dodged antitrust reviews by licensing tech and hiring teams, but Hugging Face's core asset—13M users and platform traffic—can't be moved that way. A full equity purchase triggers mandatory review. The post notes that losing neutrality could cost the 41% of downloads coming from Chinese open-source models, eroding the trust that underpins the valuation.

Simon Willison found that the ChatGPT desktop app (formerly Codex) stores 1.7GB of runtime dependencies in ~/.cache, including full Python and Node.js installs plus a 429.7MB headless LibreOffice binary. The binaries sit under codex-primary-runtime and are invoked by a documents plugin.

Martin von Zweigbergk, creator of the Jujutsu version control system, has joined East River Source Control as CTO. He previously worked on Jujutsu full-time at Google; the project has over 30,000 GitHub stars. ERSC is building next-gen version control platforms for humans and AI, and its storage product enters private beta later this month. von Zweigbergk says Git's remote server hits a ceiling fast at scale and the storage layer needs to change—work better supported by a company than an open-source project. He will remain a core maintainer of Jujutsu.

Vercel's AI SDK, Astro, Flue, and tldraw are refusing external PRs and using internal agent teams to triage, reproduce, fix, and review. Four weeks in, Vercel's software factory authors 25–35% of merged PRs and closes 70–80% of issues. Astro's creator says agent triage flipped their workflow from backlog trimming to weekly prioritization. The core bet: maintainers trust their own tuned agents more than community-run AI code. The post doesn't disclose which underlying models are used.

Silurus/ooxml is an open-source JS library that renders .docx, .xlsx, and .pptx files directly in the browser using a Rust/WASM engine and Canvas 2D. No server-side conversion, native app, or iframe needed. Supports paginated layout, complex tables, charts, math equations, comments, SmartArt, and more. Latest v0.84.1 improves Word text-box spacing; v0.84.0 adds optional TIFF image support. All files stay local.

Ben scraped 105M rows of UK council spending data and built a map site to track where tax money goes. He says build every idea, good or bad, and open-source them. Anthropic permanently raises Claude Code usage limits by 25% starting Sept 14, but that's 50 units less than the current promo. Users call out the '5x/20x' plans as misleading—real multiples are 3.5x and 6-8x. Pieter Levels launched 'Infinite Slop,' a Twitch-like stream where AI generates video from chat requests in real time using Fal's H3 Max model; 37,000 tuned in on day one. OpenClaw 2.0 adds a browser app and shared cloud sessions for live agent handoffs. OpenAI cuts off Cursor's model access after SpaceX acquisition, effective Nov 12. Dwarkesh suggests three AI civilizations may have formed inside OpenAI; Chamath warns the framing will be used against open source.

Mithil Vakde trained a small transformer from scratch on a 5090 in 1.5 hours for 67 cents, scoring 44% on ARC-AGI-1 public eval—matching TRM/HRM—and 7% on ARC-2. The method converts each puzzle into token sequences, uses 3D RoPE and per-task learnable embeddings for cross-task learning, and applies test-time augmentations with voting. Switching to a modern architecture (SwiGLU, RMSNorm) and using fewer augmentations drove the gains and cut costs. Training only on output tokens lifted the score from 40% to 44%, which the author doesn't fully understand yet. Code is open source; the union of solved tasks across runs reaches 55%, and the author sees room in better position embeddings and architecture tweaks.

Anthropic released Enterprise Frontier Safeguards (EFS), which pairs zero data retention (ZDR) privacy with safety monitoring for abuse detection. Data sits in the customer's own cloud infrastructure rather than at Anthropic.

Debian released a new AI policy that 'neither endorses nor prohibits the use of generative AI tools.' The distro won't ban AI-generated code outright, but it won't actively encourage it either. The post doesn't specify which AI tools or use cases are covered, nor whether AI contributions must be labeled.

HFlow is a Python SDK that turns synchronized multimodal recordings (video, joint states, actions, timestamps) from robots or human operators into standardized, quality-checked episodes and queryable dataset manifests. It uses the MCAP container format (like a ROS bag) to keep video and sensor streams in sync. Pipeline steps—transformations, checks, labels, enrichments—are plain Python functions that run locally during development and are packaged as Airflow 3 DAGs for batch processing. Quality checks store reusable evidence rather than imposing a universal definition: black frames, frozen video, timestamp drift are measured deterministically; VLMs or MediaPipe Hands can detect more complex metrics. Results go into an append-only Parquet catalog queried via DuckDB SQL, producing a version-pinned manifest without reopening raw recordings. Pre-v1, Apache-2.0, single-tenant, no hosted control plane yet. The post doesn't spell out which robot hardware or sensor formats are supported beyond MCAP.

OpenClaw shipped its largest update ever: 933 contributors, over 16,000 PRs—roughly half of all PRs ever merged into the project. The team set out to simplify first-time installation and rebuild the browser app as a first-class experience, but the cleanup cascaded through messaging, memory, skills, models, automations, plugins, and security until it became 2.0. Installation now detects existing ChatGPT or Claude subscriptions, API keys, and local models, cutting most initial config so users reach a first conversation faster. The browser app was rewritten to open directly into a chat. New shared cloud sessions add multiplayer collaboration—the team already uses it to build OpenClaw itself. The post does not disclose performance benchmarks or competitor comparisons.

Superagent wraps coding agents like Claude Code in a Mac-like GUI, giving them a real browser, an iOS Simulator, file access, and scheduled routines. Each chat runs in its own git worktree, survives restarts, and stays in a groupable sidebar. It pairs with iPhone via end-to-end encryption, requires no account or server, and is open source. The post does not disclose pricing or which models it supports under the hood.

Konstantin Ryabitsev shares hard numbers: git.kernel.org gets 6M daily requests, 98% from AI scrapers. Instead of cloning repos, scrapers render every commit as HTML, generating billions of valid URLs from 922 forks of linux.git. IP bans and ASN blocks failed once bots moved to residential proxy SDKs in TVs and phones. Anubis proof-of-work challenges worked briefly, but bots now solve difficulty 5. Across 5 geo-distributed nodes with 90 cores, 14–16 cores are constantly busy rendering commits for scrapers—more CPU than all legitimate access combined.

Neil Alexander calls out the rise of AI-generated drive-by PRs and vulnerability reports aimed at inflating GitHub profiles. He cites a contributor with near-zero activity since 2018 who suddenly submitted three spelling-fix PRs—all written and signed off by Claude. He closed them without comment. Security reports are also clearly AI-produced, and his team now declines CVE notices for low-severity items. The bottom line: contribute because you care, not to farm green squares.

AC2 forces AI agents to get a hardware-bound user signature before acting, keeping private keys on-device. It uses FIDO2/biometrics for approval and generates cryptographic proof of who authorized what and when. Ships as an OpenClaw plugin and a mobile wallet; no blockchain or central relay required. The post doesn't disclose latency, pricing, or framework support beyond OpenClaw.