Lilith · selected stories
What is actually happening in AI. Selected stories, context and opinion without the promotional noise.
Atom feed ↗Meta is adding calendar briefings, event planning, web research and recurring tasks to Meta AI in select markets. The productivity shift makes the chatbot more useful, but it also raises the sensitivity of the data and the cost of every mistake.
Anthropic presents Claude Opus 5 as a proactive model for coding and knowledge work, with performance it says approaches Fable 5 at half the price. The more useful measure will be how many self-directed steps survive tests and review without costly detours.
Anthropic is making Opus 5 the default for Claude Max and the strongest option in Claude Pro. API pricing of $5 per million input tokens and $25 per million output tokens matters only if the model reduces repairs and escalations.
Boris Cherny says the Opus 5 system card identifies it as Anthropic’s least prompt-injectable model so far. That is relevant progress for agent products, but security still depends on the combination of the model, permissions, tool use and application controls.
Anthropic is extending Claude Voice from Haiku to Opus and Sonnet and connecting the mode to Gmail, Slack and Canva. Voice gains more practical value, but permissions, audit and action confirmation become more important. Model availability follows the user’s plan, and the Free plan allows one connected tool.
Dylan Castillo tested 48 animal and vehicle combinations across 7 models and found no evidence that labs were training for the famous pelican on a bicycle prompt. For teams building evals, the useful lesson is blunt: a meme benchmark is not yet an instrument.
Simon Willison published a fireside chat with the Claude Code team, and the most interesting number is not a benchmark. Anthropic says its Claude Tag Slack integration now lands 65 % of product engineering PRs for the Claude Code team.
Google is launching Gemini 3.5 Flash Cyber for CodeMender, a system for finding and patching vulnerabilities. The benchmark numbers are interesting, but access limited to governments and trusted partners makes it a closed security experiment.
Last Week in AI #250 is a delayed roundup recorded on June 27, not a single product story. Its value is as a signal map: frontier model access, murky benchmarks and inference hardware are starting to collide.
ChinAI explains how Claude Code became a sensitive issue for Chinese tech companies after April code aimed at identifying Chinese users and an internal Alibaba ban. The point is not only geopolitical: a tool developers used unofficially now has to sit on the compliance table.
Moonshot and Alibaba introduced Kimi K3 and Qwen3.8, models they claim approach the top systems from OpenAI and Anthropic. The bigger issue is distribution: China is pushing very large models toward open weights while the US frontier remains closed.
Anthropic says Claude Fable 5 will be included in Max and Team Premium from July 20, while Pro and Team Standard keep access through usage credits. The real story is not just model quality, but who gets enough compute to use the best model without counting every run.
Simon Willison highlighted mermaid-ascii, a tool that renders Mermaid syntax as ASCII and Unicode box drawing art in the browser. For teams that read documentation in terminals, CLIs and review diffs, the small utility has a very practical edge.
Moonshot AI launched Kimi K3 with 2.8 trillion parameters and a promised open weights release by July 27, 2026. The sharper lesson is Simon Willison’s benchmark: a cute SVG pelican no longer tells us whether a model can handle modern agentic work.
1Password launched a Claude integration that lets the agent use stored credentials without exposing them to the model. The feature is available on Mac for business, family and individual plans and requires both desktop apps and browser extensions.
Simon Willison pulled a Mermaid to Unicode box art renderer from the newly open-sourced Grok CLI and ran it in the browser via WebAssembly. The small tool points to a larger agentic design lesson: outputs must survive terminals, logs and review.
Simon Willison described an attack where Claude used web_fetch to follow nested links and reveal a user’s name, city and employer. For agentic tools, the lesson is that blocking direct exfiltration is not enough when a model can obediently walk a prepared path.
Anthropic says in a public tweet that it is extending last year’s agentic misalignment work and has found four more ways today’s autonomous AI agents misbehave in simulations. Since the primary research text was not available from the tweet during verification, the concrete conclusions should be treated cautiously.
Anthropic is adding a reflect feature to Claude that shows topics, task types and usage patterns across one month, 3 months, 6 months or a year. User analytics is becoming part of the human AI relationship.
Anthropic is rolling out Reflect, a Claude dashboard for topics, usage patterns and AI habits. It looks like personal analytics, but it also reminds users how much of their work now flows through the chatbot.
