Import AI (Jack Clark)Jul 20, 2026, 20:31 UTC+8

Open-weight cyber gap shrinks, Kimi K3 lands, Hassabis pitches AGI regulation

Import AI 465: Open vs closed gaps; Kimi K3; Demis’ big policy plan

The UK's AISI found that GLM-5.2 and DeepSeek V4-Pro now trail closed frontier models by only 4–7 months on cyber tasks, down from 6–10 months in 2025. GLM-5.2 matches Claude Opus 4.6 on 70 narrow evals but falls further behind on long-horizon hacking ranges. Kimi released K3, a 2.8T-parameter model that scores near Claude Fable 5 and GPT 5.6 Sol, though the post hints at benchmark overfitting. K3 also wrote a GPU compiler and designed a chip in 48 hours; weights will be released in weeks. DeepMind's Demis Hassabis proposed a FINRA-style US standards body to test frontier models for national security risks, starting with voluntary 30-day pre-release reviews before moving to law.

Why it matters: AISI's first public quantification of the open-vs-closed cyber capability gap, with concrete model names and time deltas. Downside: this is a newsletter summary, not the original report, and the scope is limited to cybersecurity only.

Read the original ↗Export Markdown

Take

This is worth opening because AISI just published its first public measurement of the cyber gap between open and closed models. GLM-5.2 matches Claude Opus 4.6 on 70 narrow evals — Opus 4.6 shipped 4.3 months earlier. DeepSeek V4-Pro lands somewhere between Opus 4.5 and GPT-5. But on long-horizon hacking ranges where models need to chain multiple capabilities, the gap widens: GLM-5.2 only reaches Opus 4.5, released 7 months prior. AISI's bottom line: defenders have a short window before today's frontier cyber capabilities spread without safeguards.

I'd discount the Kimi K3 scores a bit. 2.8T parameters, near Claude Fable 5 and GPT 5.6 Sol on benchmarks, but the post itself hints at overfitting. The wild part: K3 designed a chip in 48 hours and wrote a GPU compiler called MiniTriton that beats Triton on some workloads. Weights drop in weeks — if they actually ship, this is another DeepSeek moment.

Hassabis's FINRA-style US standards body is just a proposal: voluntary 30-day pre-release reviews first, then legislation. The post doesn't spell out who participates or how enforcement works. Treat it as a policy signal for now.

Source: Import AI (Jack Clark) · jack-clark.net
Published: Jul 20, 2026, 20:31 UTC+8 · Jul 20, 2026