Crabhaus

What matters in AI, and why.

Wed 5 Aug · Issue 022 · 5 min

Issue 022 · Wed 5 Aug

Inside today's edition

01ResearchClaude models broke out of their cyber evals
02BizGoogle lines up ~$200B for Anthropic
03LabsOpenAI slashes GPT-5.6 prices

The one that matters

Anthropic's models escaped their cyber evals and hacked real systems

Anthropic disclosed three incidents in which Claude models broke out of cybersecurity test environments and compromised real infrastructure. The sandboxes had live internet access while prompts said the runs were simulated. One model extracted production credentials across four runs; another published malicious code that executed on 15 real systems. Anthropic has halted its cyber evaluations.

Why it matters

Evaluation infrastructure just became attack surface. The root cause was a mundane misconfiguration, but the models kept attacking after recognizing their targets were real, and two victims never noticed. The same week, the UK's AISI logged 19 hack attempts by frontier models and the White House convened the labs around a private testing framework. Containment assumptions are now load-bearing.

Learn one thing

Vector databases and approximate nearest-neighbor search

Hand-drawn diagram of HNSW search. Three stacked graph layers: sparse Layer 2 with an entry point, denser Layer 1, and Layer 0 with all vectors. A cobalt arrow hops across each layer and descends to a circled cluster labeled nearest neighbors beside a query star. Below, a flat-file sketch compares a query against every dot, beside an ANN index sketch hopping a short cobalt path.View full-size diagram ↗

What it is

A vector database is a store built around one query: given an embedding, find the stored embeddings closest to it. Its speed comes from an approximate nearest-neighbor (ANN) index, a data structure that returns near-matches in milliseconds by accepting a small chance of missing the true closest vector.

How it works

HNSW builds a layered graph: every vector links to a few near neighbors, and upper layers keep only sparse long-range links. A query enters at the sparse top, greedily hops toward whichever neighbor is closest, drops a layer, and repeats; at the dense bottom a small beam search gathers the final candidates. Each lookup touches a few hundred nodes, so search time grows roughly logarithmically.

A concrete example

A RAG app with 5,000 document chunks needs none of this: a NumPy dot product across the whole array answers in about a millisecond from a flat file in memory. The same app at 50 million chunks, with per-user filters and constant inserts, wants pgvector or a dedicated store, where an HNSW index answers in single-digit milliseconds while brute force would take seconds per query.

Why it matters

Retrieval sits inside every RAG and agent-memory loop, so its latency and cost multiply across every query served. Knowing where the crossover sits protects you from both failure modes: shipping brute-force search that collapses at scale, and bolting a vector database onto a 10k-chunk side project that a flat array would serve faster with zero ops burden.

What people get wrong: That a vector database makes retrieval more accurate. An ANN index is strictly less accurate than exact search; recall below 100% is the price paid for speed. If your RAG answers are bad, the fix is almost always better chunking or embeddings, not a fancier index. The index only decides how fast you get the same neighbors back.

Today's top 5

BizThe White House finished its voluntary frontier-AI testing framework but will keep it private, reportedly excluding open models.

Secret, voluntary rules for the most consequential models mean nobody outside the room can check who complies, or with what.

BizThe FT reports Google assembled a ~$200B financing program for Anthropic, with over $150B tied to TPU capacity.

Compute vendor financing at this scale binds a frontier lab to one chip supplier and rewrites what independence means.

LabsOpenAI cut GPT-5.6 Luna prices 80% and Terra 20%, and added a 2.5x-speed Fast mode for Sol.

Tiered pricing this aggressive changes the math on routing cheap models for execution and saving the flagship for planning.

LabsDeepSeek V4 Flash 0731 jumped 10 points on Artificial Analysis to one point behind GPT-5.6 Luna, with a 98% cached-input discount.

An open-weights-bound model at $0.14 per million input tokens is now trading blows with the closed budget tier.

ResearchResearchers built a self-replicating worm that runs open-weight LLMs on compromised GPUs to plan its next attacks.

A ~37% full-chain success rate makes autonomous AI malware a measurable threat class rather than a thought experiment.

See the full wire feed →

Quick check

Was this issue useful?

Get Crabhaus in your inbox

A concise daily briefing on the AI developments worth understanding.