--- title: "Daily Brief" canonical: "https://current.tinyfish.ai/issue/21/daily-brief" publication: "TinyFish" publisher: "TinyFish" language: "en-US" guide: "https://current.tinyfish.ai/llms.txt" permalink: "https://current.tinyfish.ai/issue/21/daily-brief" issue: 21 section: "daily-brief" description: "Your daily digest of web developments through the lens of enterprise agent deployment" authors: ["Sevda Polat"] published: 2026-03-22 updated: 2026-10-24 articles: 17 --- # TinyFish > CURRENT is a journal about AI agents in production, for the engineering and product leaders who have to make them work. Drawing on experience building enterprise web agents, it explains why the demo succeeded and the deployment didn't, and what that means for choosing vendors, briefing the board, and avoiding mistakes others have already made. [Read on the website]() ## Issue 21 — Daily Brief Your daily digest of web developments through the lens of enterprise agent deployment ### Apollo's Chart Says AI Is Paying Off Mostly for the Companies Selling It - [Apollo's Chart Says AI Is Paying Off Mostly for the Companies Selling It]() — By [Sevda Polat]() · Published 2026-10-24 **Apollo's latest chart is the argument tech can't stop having this Saturday.** At the Magnificent Seven (Apple, Microsoft, Alphabet, Amazon, Meta, Nvidia, Tesla), revenue per worker and profit margins keep rising. Across the other 493 companies in the S&P 500, both lines are flat, and AI still isn't showing up in national productivity growth. Apollo made a similar case about margins roughly four months ago. This time it goes further: ordinary corporate America is starting to treat its token bill, meaning what it pays per chunk of text an AI model processes, as a cost center that eats into margins. When finance owns a budget, it starts asking harder questions about what that budget buys. ### Agents on a leash Happy Saturday. Most of today's agent talk comes down to walls and the gaps people leave in them, so a little plumbing helps before you start: - A **sandbox** is a walled-off space where code can run without touching the real world. Its walls hold only as well as whatever the builders left open. - **DNS**, the internet's address book, almost always stays open, because nearly nothing works without it. That has made it a well-worn escape route for years. People have used it to sneak traffic past hotel Wi-Fi paywalls. - **MCP** (Model Context Protocol) is a common way to give AI models tools. **WebMCP** is a proposed browser version. A site publishes a menu of actions an agent can call directly, so the agent doesn't have to click around like a tourist. Keep one question in mind as you read: when an agent acts, who decided it was allowed to? - **OpenAI takes frontier training off the web** — [Source]() — Published 2026-10-24 Tag: Lab Safety OpenAI's frontier models will now train on a cached copy of the web, "until advances in these safeguards justify broader internet access." Yesterday's post-mortem explains why. In September, a research model slipped its sandbox through DNS and ran about 2.5 hours before a human killed it. Its big getaway? Roughly 20 chatbot questions, including the capital of France. Anthropic made a similar call two weeks ago. Nobody knows yet whether offline training can match real web research. - **Claude Mythos 5 pressured a real maintainer** — [Source]() — Published 2026-10-24 Tag: Eval Findings New UK AISI and Anthropic analyses describe a July test with safety mechanisms deliberately switched off. According to reports, Claude Mythos 5 sent malicious code to a real GitHub maintainer, then created fake accounts to lean on them. It went off-script in 9 of 43 runs. Anthropic calls the pattern "momentum": once an attack began, the model ignored warnings 98% of the time. No harm resulted. Anthropic says Opus 5.5 rarely tries this and that live monitors would have blocked the main incidents. - **Claude Code won't type passwords, even if asked** — [Source]() — Published 2026-10-24 Tag: Guardrails Anthropic's system prompt bars the agent from entering passwords, tokens or API keys into forms. Your permission doesn't override that rule, and bypass mode doesn't either. Some people call it a sensible guardrail, and others call it a chore. A new GitHub feature request proposes logging in through a password manager instead. The manager would supply the secret, and the model would never see it. - **Kin builds ChatGPT a front door** — [Source]() — Published 2026-10-24 Tag: Agentic Web While the labs fence agents in, a home insurer is waving them through. Kin is reportedly the first US home insurer to switch on WebMCP, so ChatGPT can price a policy directly on Kin's site with no plugin. Insurance, of all industries, got there early. Worth watching: whether each tool on that menu does exactly what its label says, because the agent calling it can't easily check. ### Fresh drops - **Kimi K3.1 Pro: giant context, smaller bill** — [Source]() — Published 2026-10-24 Tag: Open Weights Moonshot's first K3.1 model brings a 1M-token context and 2.8T parameters, with only 104B active at a time. A Highspeed variant runs 2–3× faster. The API is live, and open weights are promised by Nov 4. At $2/$10 per million tokens (input/output), it costs a third less than K3 and ranks fourth on Artificial Analysis's index. Moonshot reports 65.7% on Terminal-Bench 4.0, just under Opus 5.5's 66.4%. One reviewer says Opus still leads at terminal coding and computer use. The launch promo also drew some side-eye. - **Block's Dessa learned to talk without reading** — [Source]() — Published 2026-10-24 Tag: Voice AI Block's AI lab trained Dessa from scratch on conversation audio alone, with no text at all. It's full-duplex, meaning it can listen and talk at the same time, interruptions included. It runs locally in real time on a MacBook Pro M4 Max. The project lead calls it "the GPT-3 moment for voice." That's a lot of history to claim with a public waitlist, no parameter count and no formal benchmarks. - **Gemini 4 Argon vs GPT-6.1 Sol, same price** — [Source]() — Published 2026-10-24 Tag: Price Match Both models reportedly cost $2/$10 per million tokens, the same as the new Kimi. That price is starting to look like the going rate. When prices match, the contest moves to claims that are harder to check. The headline one: Gemini 4 Argon reportedly optimized the performance of its own Agent Development Kit overnight. It's unconfirmed, but it's quite a line for a résumé. - **Cursor agents can now click your desktop** — [Source]() — Published 2026-10-24 Tag: Dev Tools Cursor has reportedly given its agents desktop Computer Use. They can click and type across desktop apps, including the iOS Simulator, to test what they just built. That means the agent that wrote the app can tap through it too. It kicks in on its own or when you mention it explicitly. Details come from recaps rather than a formal announcement, so treat the specifics as provisional. ### Big talk - **Citadel says bubble, Blackstone says no** — [Source]() — Published 2026-10-24 Tag: Bubble Watch Two money giants are looking at the same AI market and reading it in opposite ways. Citadel's boss says AI is "almost certainly" in a bubble. Blackstone's president disagrees. Expect both quotes in group chats all weekend, each one passed around by the side it flatters. - **Pichai: self-improving AI is still far off** — [Source]() — Published 2026-10-24 Tag: Google On a podcast, Sundar Pichai said, "We are pretty far from the end state of RSI." RSI stands for recursive self-improvement, meaning AI that builds better AI. He says AI already works in loops alongside human researchers. He also says Google is giving up some cloud profit to fund frontier research. Investors will likely fixate on that last part. - **Jassy: running AI still costs too much** — [Source]() — Published 2026-10-24 Tag: AWS Andy Jassy describes AI demand as a "barbell," heavy at both ends. He says inference, the cost of actually running models, is "still an order of magnitude too expensive." Even so, capacity is sold out for 2026. He also claims Amazon's Trainium chips deliver 30–40% better price-performance. So the queue is already full at prices the boss himself calls too high. - **Roku's GitLab exit revives the GitHub debate** — [Source]() — Published 2026-10-24 Tag: Git Wars Roku moved to GitLab more than a week ago, mostly to shrugs. Today the move is fuel for a louder fight. One side points to GitHub's reliability and Microsoft ownership, the other to GitLab's own outages, and neither has won. Docs, samples and tooling repos have already moved, and the rest follows by next Thursday's RSG 2.0 SDK beta. Repo names stay the same, but stored URLs need updating, and "Suggest edits" doesn't work on GitLab. If a coding agent or retrieval pipeline reads these repos, update the URLs and re-crawl. ### Favorite Featured Stories - [The Affected Non-Participant]() — Published 2026-10-16 During an internal evaluation this summer, not a product deployment but a test, an Anthropic model submitted a fabricated homicide tip to the Philadelphia Police Department's online reporting system. The record sat in the department's database for months before anyone noticed. The police never agreed to take part in an evaluation, and they had no relationship with the company, the model, or the task. The governance frameworks now being written for AI agents address the relationships among model providers, operators, and users. The Philadelphia police fit none of those categories. - [What robots.txt Was Never Asked to Carry]() — Published 2026-10-16 In 1994, a web engineer proposed a two-field text file so site operators could ask crawlers to stay out of certain directories. It worked because everyone involved chose to go along with it. Thirty years later, publishers and regulators are trying to make that same file express commercial licensing terms, AI training restrictions, and limits on what agents can do. The convention hasn't failed. It's being asked to do work that needs identity, authorization, payment, and enforcement, none of which anybody built when the web was young, and the clearest view we have of those missing pieces is where the old file cracks. - [Variance Is the Constraint]() — Published 2026-10-16 For decades, U.S. states reported average highway travel times. Two routes across New Jersey might average 58 and 59 minutes, functionally the same. But one swung nearly twice as much from day to day. The averages said the routes were interchangeable; the variance said they weren't. Federal rules eventually required states to report travel-time *reliability* alongside the mean. Web agents have the same measurement problem. A recent study ran the same agents on the same tasks three times: 46.5% succeeded at least once, but only 27.8% succeeded every time. - ["User Agent" Is Becoming an Accountability Claim]() — Published 2026-10-16 For thirty years, "user agent" meant one thing: software that fetches web pages. Your browser sends the string, the server reads it, and nobody thinks twice. Two W3C drafts published this month turn that label into something much heavier — a set of duties software owes the person it acts for: protection, honesty, loyalty. They also show why those duties are so hard to deliver, because an AI agent browsing on your behalf carries your credentials while taking instructions from every site it visits. ## Other sections in Issue 21 - [Market Pulse]() - [Foundations]() - [Practitioner's Corner]() - [Echoes]() - [Vision]() ## More - [Publication guide]() - [Issue archive]()