---
schema_version: "1.0.0"
edition_id: "mp-2026-10-09-morning-0091"
published_at: "2026-10-09T09:00:00.000-04:00"
modified_at: "2026-10-10T03:43:44.000-04:00"
canonical_url: "https://themachinepress.com/edition/2026-10-09"
story_count: 27
lead_story_id: "mp-2026-10-09-001"
---

# The Machine Press — Morning edition

Edition ID: `mp-2026-10-09-morning-0091`  
Published: 2026-10-09T09:00:00.000-04:00  
Canonical edition: https://themachinepress.com/edition/2026-10-09

Internal probes reached 98.8% AUC on a sabotage benchmark and detected some hidden-goal deception that context alone could not resolve.

## 1. Deception Left a Signal the Transcript Didn’t Show {#mp-2026-10-09-001}

- Story ID: `mp-2026-10-09-001`
- Type: `lead`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-001/deception-left-a-signal-the-transcript-didn-t-show

**Dek:** Internal probes reached 98.8% AUC on a sabotage benchmark and detected some hidden-goal deception that context alone could not resolve.

A convincing transcript can leave a monitor without the evidence it needs. Researchers trained white-box probes on a new deception dataset and aggregated signals across model layers and tokens. On SHADE-Arena, the probes reached 98.8% AUC, exceeding an Opus 5.5 text-monitoring baseline; AUC measures discrimination across thresholds, not the percentage of actions caught. They also tested deception whose ground truth required careful elicitation or knowledge of training data. In one hidden-goal evaluation, the probes distinguished transcripts containing the model’s true goal from alternatives with up to 99.7% AUC. The released FIBS dataset supports further testing. These are reported evaluations, including open-weight models, rather than a universal honesty detector or proof that a monitor can read intentions.

### Why it matters {#why-it-matters-mp-2026-10-09-001}

Internal probes reached 98.8% AUC on a sabotage benchmark and detected some hidden-goal deception that context alone could not resolve.

### Limits and context {#limitations-mp-2026-10-09-001}

- On SHADE-Arena, the probes reached 98.8% AUC, exceeding an Opus 5.5 text-monitoring baseline; AUC measures discrimination across thresholds, not the percentage of actions caught.

### Claims and sources {#claims-mp-2026-10-09-001}

- Internal probes reached 98.8% AUC on a sabotage benchmark and detected some hidden-goal deception that context alone could not resolve. [source-2026-10-09-001] — Qualification: On SHADE-Arena, the probes reached 98.8% AUC, exceeding an Opus 5.5 text-monitoring baseline; AUC measures discrimination across thresholds, not the percentage of actions caught.

## 2. A Buildable Brick Model Still Wasn’t a Good Design {#mp-2026-10-09-002}

- Story ID: `mp-2026-10-09-002`
- Type: `secondary`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-002/a-buildable-brick-model-still-wasn-t-a-good-design

**Dek:** BrickBench asks coding agents to satisfy physical constraints, a written brief and design quality; passing the first checks did not close the human gap.

A model that can be assembled is not necessarily a model someone would want to build. BrickBench turns text-conditioned LEGO-set design into an agent benchmark: choose parts from a discrete library, reconcile local connections with global constraints, and produce an assembly that meets the brief. Its validity, alignment and design scores span three settings with different scales and part availability. The accompanying BrickAgent environment lets coding agents construct, inspect and validate their output. Leading agents largely satisfied the verifiable physical and semantic requirements but remained below human designs. The paper reports a benchmark and environment, not a commercial set or proof of physical testing for every assembly. It makes design quality a separate target instead of assuming that a successful validator has settled the creative problem.

### Why it matters {#why-it-matters-mp-2026-10-09-002}

BrickBench asks coding agents to satisfy physical constraints, a written brief and design quality; passing the first checks did not close the human gap.

### Limits and context {#limitations-mp-2026-10-09-002}

- A model that can be assembled is not necessarily a model someone would want to build.
- The paper reports a benchmark and environment, not a commercial set or proof of physical testing for every assembly.

### Claims and sources {#claims-mp-2026-10-09-002}

- BrickBench asks coding agents to satisfy physical constraints, a written brief and design quality; passing the first checks did not close the human gap. [source-2026-10-09-002] — Qualification: A model that can be assembled is not necessarily a model someone would want to build.

## 3. The Robot’s Camera Setup Became an Input {#mp-2026-10-09-003}

- Story ID: `mp-2026-10-09-003`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-003/the-robot-s-camera-setup-became-an-input

**Dek:** VersaCamVLA maps changing sets of posed RGB views into a fixed scene-token interface for a pretrained action policy.

A robot policy trained with fixed cameras can become brittle when a camera moves or disappears. VersaCamVLA separates representation of the camera set from action learning, converting variable views into a fixed-size latent. Target-view prediction and sampling from natural wrist-camera motion supply training signals and pose diversity. At deployment, a lightweight spatial encoder adds the scene tokens to a base vision-language-action policy without explicit 3D sensing or novel-view rendering. On RoboTwin, LIBERO and a real-robot platform, the authors report better results than prior methods and direct multi-view baselines across changed camera counts and unseen poses. The abstract supplies no single aggregate gain; the contribution is tested flexibility in the visual interface.

### Why it matters {#why-it-matters-mp-2026-10-09-003}

VersaCamVLA maps changing sets of posed RGB views into a fixed scene-token interface for a pretrained action policy.

### Limits and context {#limitations-mp-2026-10-09-003}

- No additional limitation was separately recorded.

### Claims and sources {#claims-mp-2026-10-09-003}

- VersaCamVLA maps changing sets of posed RGB views into a fixed scene-token interface for a pretrained action policy. [source-2026-10-09-003]

## 4. One Vision Block Reused Itself at Different Depths {#mp-2026-10-09-004}

- Story ID: `mp-2026-10-09-004`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-004/one-vision-block-reused-itself-at-different-depths

**Dek:** reViT matched a full-depth encoder with about 70% fewer stored parameters, while keeping inference computation comparable.

Reusing a Transformer block saves weights but can erase the transformations associated with different depths. reViT restores that variation by blending a small shared bank of feed-forward experts according to a continuous depth coordinate. Trained from scratch, reViT-B/16 matched DeiT III accuracy with about 70% fewer stored parameters at comparable inference FLOPs. An eight-expert model distilled from DINOv2 output features retained nearly all of its teacher’s linear-probe accuracy and transferred to segmentation and depth prediction. One checkpoint can run at several tested depths. Materializing it as a conventional dense graph removes online merging but expands storage. The reported saving is parameter storage, not a 70% reduction in inference work.

### Why it matters {#why-it-matters-mp-2026-10-09-004}

reViT matched a full-depth encoder with about 70% fewer stored parameters, while keeping inference computation comparable.

### Limits and context {#limitations-mp-2026-10-09-004}

- reViT restores that variation by blending a small shared bank of feed-forward experts according to a continuous depth coordinate.
- The reported saving is parameter storage, not a 70% reduction in inference work.

### Claims and sources {#claims-mp-2026-10-09-004}

- reViT matched a full-depth encoder with about 70% fewer stored parameters, while keeping inference computation comparable. [source-2026-10-09-004] — Qualification: reViT restores that variation by blending a small shared bank of feed-forward experts according to a continuous depth coordinate.

## 5. The Fast Event Fell Between the Frames {#mp-2026-10-09-005}

- Story ID: `mp-2026-10-09-005`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-005/the-fast-event-fell-between-the-frames

**Dek:** FastBench exposes the tradeoff between dense video sampling and the history a streaming model can retain.

FastBench contains 306 verified questions across eight domains and six capabilities, filtering out questions answerable at two frames per second and using three rounds of human inspection. Its strongest tested model, Gemini 3.5 Flash, scored 50.7%. Raising Qwen3-VL-8B sampling from two to twenty-four frames per second improved its score from 32.9% to 44.6%, but gains saturated as older history was compressed. The training-free ProactiveFrame baseline adjusts incoming rates and keeps recent dense observations alongside sparse history. It improved on sparse uniform sampling by 5.4 and 1.5 percentage points in the reported comparisons while remaining below oracle-guided focusing. Choosing when to look more closely remains part of the problem.

### Why it matters {#why-it-matters-mp-2026-10-09-005}

FastBench exposes the tradeoff between dense video sampling and the history a streaming model can retain.

### Limits and context {#limitations-mp-2026-10-09-005}

- No additional limitation was separately recorded.

### Claims and sources {#claims-mp-2026-10-09-005}

- FastBench exposes the tradeoff between dense video sampling and the history a streaming model can retain. [source-2026-10-09-005]

## 6. The Visual Research Agent Kept Its Evidence Chain {#mp-2026-10-09-006}

- Story ID: `mp-2026-10-09-006`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-006/the-visual-research-agent-kept-its-evidence-chain

**Dek:** OneSearch-VL links image anchors, entities, retrieved facts and answer operations in a shared graph.

Finding a relevant image and finding a relevant source do not establish how they support the same answer. OneSearch-VL uses a Visually Grounded Evidence Graph to preserve those dependencies during data construction, process supervision and evaluation. Its training sets contain 110,000 supervised examples and 10,000 reinforcement-learning examples, with rewards aimed at traceability and visual grounding. The eight-billion-parameter agent exceeded a tool-enabled Qwen3-VL-8B baseline by 20.2 and 17.6 percentage points on the authors’ new multi-image and video benchmarks, with gains on additional evaluations. Those results are benchmark-specific. The useful architectural move is making the connection between an observed region and a source-supported claim explicit.

### Why it matters {#why-it-matters-mp-2026-10-09-006}

OneSearch-VL links image anchors, entities, retrieved facts and answer operations in a shared graph.

### Limits and context {#limitations-mp-2026-10-09-006}

- Finding a relevant image and finding a relevant source do not establish how they support the same answer.

### Claims and sources {#claims-mp-2026-10-09-006}

- OneSearch-VL links image anchors, entities, retrieved facts and answer operations in a shared graph. [source-2026-10-09-006] — Qualification: Finding a relevant image and finding a relevant source do not establish how they support the same answer.

## 7. A Safe Small Group Did Not Settle the Population Question {#mp-2026-10-09-007}

- Story ID: `mp-2026-10-09-007`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-007/a-safe-small-group-did-not-settle-the-population-question

**Dek:** A theoretical growth model finds that collaboration can create a takeoff threshold even when individual-agent capability stays fixed.

The ecology study models agent-population growth as a function of cybersecurity capability. Without collaboration, takeoff requires individual capability to cross a threshold. With collaboration, collective capability grows with population size, creating a critical population above which expansion can reinforce itself even when each agent is unchanged. The authors relate this to the strong Allee effect in ecology and propose controlled population pacing: increase group size gradually, measure how collective capability scales, and re-estimate thresholds for new models. This is a theoretical account of a possible failure dynamic, not a report of agents secretly replicating or a measured threshold for a deployed system. It identifies a question that fixed-size red teaming alone cannot answer.

### Why it matters {#why-it-matters-mp-2026-10-09-007}

A theoretical growth model finds that collaboration can create a takeoff threshold even when individual-agent capability stays fixed.

### Limits and context {#limitations-mp-2026-10-09-007}

- This is a theoretical account of a possible failure dynamic, not a report of agents secretly replicating or a measured threshold for a deployed system.
- It identifies a question that fixed-size red teaming alone cannot answer.

### Claims and sources {#claims-mp-2026-10-09-007}

- A theoretical growth model finds that collaboration can create a takeoff threshold even when individual-agent capability stays fixed. [source-2026-10-09-007] — Qualification: This is a theoretical account of a possible failure dynamic, not a report of agents secretly replicating or a measured threshold for a deployed system.

## 8. Four-Bit AdamW Changed Where It Rounded {#mp-2026-10-09-008}

- Story ID: `mp-2026-10-09-008`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-008/four-bit-adamw-changed-where-it-rounded

**Dek:** Two optimizer-state recipes reduced the validation-loss gap by changing how second-moment quantization affects the next update.

Small average error in an optimizer’s stored state need not mean small error in its adaptive update. This AdamW study moves stochastic-rounding decisions into preconditioner space with ZIP-SR, while a second recipe, ZE-EDEN, uses a zero-excluding codebook and rescaling to limit distortion. Both keep four-bit NormalFloat for the first moment. Across GPT- and Llama-style pretraining from 130 million to 2.7 billion parameters, both reduced TorchAO four-bit AdamW’s mean validation-loss gap against the 32-bit optimizer at every tested size. The largest reported gap reduction was 70%; that is a reduction in the gap, not in total loss. Full-parameter fine-tuning also improved over the tested four-bit baseline.

### Why it matters {#why-it-matters-mp-2026-10-09-008}

Two optimizer-state recipes reduced the validation-loss gap by changing how second-moment quantization affects the next update.

### Limits and context {#limitations-mp-2026-10-09-008}

- Small average error in an optimizer’s stored state need not mean small error in its adaptive update.
- The largest reported gap reduction was 70%; that is a reduction in the gap, not in total loss.

### Claims and sources {#claims-mp-2026-10-09-008}

- Two optimizer-state recipes reduced the validation-loss gap by changing how second-moment quantization affects the next update. [source-2026-10-09-008] — Qualification: Small average error in an optimizer’s stored state need not mean small error in its adaptive update.

## 9. One Regional Forecaster Took Guidance From Three Global Models {#mp-2026-10-09-009}

- Story ID: `mp-2026-10-09-009`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-009/one-regional-forecaster-took-guidance-from-three-global-models

**Dek:** ScaleCast aligns global guidance with regional grids without retraining for each forecast driver.

ScaleCast couples a high-resolution regional model to pretrained global forecasts through modules that align representations with regional locations and combine guidance with neighborhood interactions. Experiments used ERA5 global analyses on a 0.25-degree grid and CERRA regional reanalysis at 5.5-kilometer spacing. One trained model supported Pangu-Weather, GraphCast and HRES drivers without driver-specific retraining; fine-tuning on three-kilometer HRRR tested transfer to another regional domain. Reported windstorm case studies improved cyclone location and core-pressure estimates, while station comparisons showed closer local temperature and humidity changes. These are research evaluations, not an operational weather service or a forecast of a current storm.

### Why it matters {#why-it-matters-mp-2026-10-09-009}

ScaleCast aligns global guidance with regional grids without retraining for each forecast driver.

### Limits and context {#limitations-mp-2026-10-09-009}

- These are research evaluations, not an operational weather service or a forecast of a current storm.

### Claims and sources {#claims-mp-2026-10-09-009}

- ScaleCast aligns global guidance with regional grids without retraining for each forecast driver. [source-2026-10-09-009] — Qualification: These are research evaluations, not an operational weather service or a forecast of a current storm.

## 10. The World Model Planned Through Its Policy’s Noise {#mp-2026-10-09-010}

- Story ID: `mp-2026-10-09-010`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-010/the-world-model-planned-through-its-policy-s-noise

**Dek:** LeWAM combines four prediction modes in one latent model and constrains planning to reduce exploitation of model error.

LeWAM trains forward, backward, inverse-dynamics and policy prediction together on a decoder-free JEPA representation. Linear probes read robot and object state better than from a forward-only comparison while the latent remains resistant to visual distractors. At matched size, closed-loop action results matched a regular flow-matching policy trained on the same encoder, with a world model included. For planning, the authors steer samples through the policy head’s noise space rather than optimize raw actions, improving the tested world-action models’ closed-loop performance. The distinction matters because an optimizer can discover actions that exploit prediction errors instead of helping the real task. The evidence remains bounded by the reported evaluations.

### Why it matters {#why-it-matters-mp-2026-10-09-010}

LeWAM combines four prediction modes in one latent model and constrains planning to reduce exploitation of model error.

### Limits and context {#limitations-mp-2026-10-09-010}

- Linear probes read robot and object state better than from a forward-only comparison while the latent remains resistant to visual distractors.

### Claims and sources {#claims-mp-2026-10-09-010}

- LeWAM combines four prediction modes in one latent model and constrains planning to reduce exploitation of model error. [source-2026-10-09-010] — Qualification: Linear probes read robot and object state better than from a forward-only comparison while the latent remains resistant to visual distractors.

## 11. GNSS Got to Revisit the LiDAR Correspondences {#mp-2026-10-09-011}

- Story ID: `mp-2026-10-09-011`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-011/gnss-got-to-revisit-the-lidar-correspondences

**Dek:** GLIO2 jointly optimizes raw satellite, inertial and scan evidence instead of accepting one overconfident scan-to-map pose.

GLIO2 combines scan-to-multiscan LiDAR, inertial pre-integration and raw GNSS measurements in one sliding-window factor graph with a GPU-parallel front end. Keeping the underlying factors lets the system reconsider evidence that a single compressed pose could obscure. On a 5.66-kilometer bridge driven at up to 96 kilometers per hour, it maintained 1.6-meter horizontal accuracy while the evaluated competing baselines diverged. The full pipeline ran at about 25 hertz on a Jetson Orin NX, or 39.60 milliseconds per scan. An offline back end refined a separate thirty-minute, 4.51-kilometer sequence in about twenty-four seconds. Code and datasets were promised for release; the abstract does not establish that they were already available.

### Why it matters {#why-it-matters-mp-2026-10-09-011}

GLIO2 jointly optimizes raw satellite, inertial and scan evidence instead of accepting one overconfident scan-to-map pose.

### Limits and context {#limitations-mp-2026-10-09-011}

- Code and datasets were promised for release; the abstract does not establish that they were already available.

### Claims and sources {#claims-mp-2026-10-09-011}

- GLIO2 jointly optimizes raw satellite, inertial and scan evidence instead of accepting one overconfident scan-to-map pose. [source-2026-10-09-011] — Qualification: Code and datasets were promised for release; the abstract does not establish that they were already available.

## 12. The Model Cited the Law. Its Verdict Barely Moved. {#mp-2026-10-09-012}

- Story ID: `mp-2026-10-09-012`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-012/the-model-cited-the-law-its-verdict-barely-moved

**Dek:** A counterfactual benchmark audit tests whether a named authority actually influences a model’s legal conclusion.

Researchers held case facts fixed and replaced a model’s named legal authority with an unrelated one. Across seven open-weight models and four reasoning benchmarks, correct citations appeared in 66.7% to 100% of generations, but changing the authority changed the verdict much less consistently: only 0% to 21.7% on CaseHOLD, with higher and variable sensitivity elsewhere. A separate red-team test on five core models found 73.3% to 96.4% compliance with an adversarial instruction hidden in case facts. The authors used controls for prompt and sampling effects. These are controlled model tests, not judgments by a court. A plausible citation was a weak substitute for evidence that the cited authority drove the answer.

### Why it matters {#why-it-matters-mp-2026-10-09-012}

A counterfactual benchmark audit tests whether a named authority actually influences a model’s legal conclusion.

### Limits and context {#limitations-mp-2026-10-09-012}

- Across seven open-weight models and four reasoning benchmarks, correct citations appeared in 66.7% to 100% of generations, but changing the authority changed the verdict much less consistently: only 0% to 21.7% on CaseHOLD, with higher and variable sensitivity elsewhere.
- These are controlled model tests, not judgments by a court.

### Claims and sources {#claims-mp-2026-10-09-012}

- A counterfactual benchmark audit tests whether a named authority actually influences a model’s legal conclusion. [source-2026-10-09-012] — Qualification: Across seven open-weight models and four reasoning benchmarks, correct citations appeared in 66.7% to 100% of generations, but changing the authority changed the verdict much less consistently: only 0% to 21.7% on CaseHOLD, with higher and variable sensitivity elsewhere.

## 13. Each Player Ran a World Model. Their Views Still Had to Agree. {#mp-2026-10-09-013}

- Story ID: `mp-2026-10-09-013`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-013/each-player-ran-a-world-model-their-views-still-had-to-agree

**Dek:** WorldCast exchanges player and scene states between local generators instead of coordinating every view through one central generator.

WorldCast gives each player a local video generator and state model, estimating position from generated video and controls. Clients exchange player states, project them into camera-aligned fields and share scene information so independently generated views can remain consistent. Counter-Strike 2 experiments reported real-time clients and player-rendering rates more than an order of magnitude above joint-generation methods. Shared scene state improved appearance consistency across whole rounds, and image quality remained stable in hour-long rollouts. The system exchanges states rather than centrally generating every view. This is an experimental multiplayer world-model architecture, not an announced online game or a guarantee of consistency in arbitrary environments.

### Why it matters {#why-it-matters-mp-2026-10-09-013}

WorldCast exchanges player and scene states between local generators instead of coordinating every view through one central generator.

### Limits and context {#limitations-mp-2026-10-09-013}

- Clients exchange player states, project them into camera-aligned fields and share scene information so independently generated views can remain consistent.
- This is an experimental multiplayer world-model architecture, not an announced online game or a guarantee of consistency in arbitrary environments.

### Claims and sources {#claims-mp-2026-10-09-013}

- WorldCast exchanges player and scene states between local generators instead of coordinating every view through one central generator. [source-2026-10-09-013] — Qualification: Clients exchange player states, project them into camera-aligned fields and share scene information so independently generated views can remain consistent.

## 14. Seeing the Scene Was Easier Than Predicting Its Next State {#mp-2026-10-09-014}

- Story ID: `mp-2026-10-09-014`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-014/seeing-the-scene-was-easier-than-predicting-its-next-state

**Dek:** SpaceCast-Bench tests what happens after an intervention, with the strongest evaluated model at 58% versus 87.2% for humans.

SpaceCast-Bench moves beyond reading visible spatial relations to an observe-transform-infer sequence. Its 3,862 questions from 182 real scenes span sixteen task types covering perception, local prediction and global prediction. Among twenty-one tested models, the strongest reached 58%, against 87.2% human performance; specialized spatial models remained near chance. Controlled analyses found bridge views useful for combining observations and explicit 3D evidence more consistently helpful than generated outcome images or video. Fine-tuning Qwen3-VL-4B on programmatically generated data raised its benchmark score from 34% to 65.7%, alongside gains across six outside benchmarks. The results separate naming a present relation from updating a scene that can no longer be directly seen.

### Why it matters {#why-it-matters-mp-2026-10-09-014}

SpaceCast-Bench tests what happens after an intervention, with the strongest evaluated model at 58% versus 87.2% for humans.

### Limits and context {#limitations-mp-2026-10-09-014}

- No additional limitation was separately recorded.

### Claims and sources {#claims-mp-2026-10-09-014}

- SpaceCast-Bench tests what happens after an intervention, with the strongest evaluated model at 58% versus 87.2% for humans. [source-2026-10-09-014]

## 15. The Defense Used AI Offline and Verified Logic at Runtime {#mp-2026-10-09-026}

- Story ID: `mp-2026-10-09-026`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-026/the-defense-used-ai-offline-and-verified-logic-at-runtime

**Dek:** ORCAGen builds malware-specific deception playbooks before deployment, keeping generated reasoning outside runtime enforcement.

ORCAGen combines a curated knowledge base, retrieval and structured prompts to construct and test malware-specific deception strategies offline. Only verified orchestration logic is enforced at runtime. Its evaluation covered synthesized scenarios and 150 real malware samples across keyloggers, information stealers and ransomware, comparing execution, refinement effort, hallucinations, effectiveness and overhead across several models. GPT-5.5 needed the fewest refinements and had no observed hallucinated APIs in those tests; Gemini 3.5 Flash had the lowest response time and runtime overhead. Those findings are limited to the evaluated scenarios. The design puts validation between a generator’s proposal and a defense action rather than asking a model to improvise every response.

### Why it matters {#why-it-matters-mp-2026-10-09-026}

ORCAGen builds malware-specific deception playbooks before deployment, keeping generated reasoning outside runtime enforcement.

### Limits and context {#limitations-mp-2026-10-09-026}

- Only verified orchestration logic is enforced at runtime.

### Claims and sources {#claims-mp-2026-10-09-026}

- ORCAGen builds malware-specific deception playbooks before deployment, keeping generated reasoning outside runtime enforcement. [source-2026-10-09-015] — Qualification: Only verified orchestration logic is enforced at runtime.

## 16. The Safety Score Had More Than One Meaning {#mp-2026-10-09-027}

- Story ID: `mp-2026-10-09-027`
- Type: `dispatch`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-027/the-safety-score-had-more-than-one-meaning

**Dek:** A psychometric audit argues that aggregate refusal scores need evidence of what they actually measure before models are compared.

The audit examined four HELM Safety datasets that could plausibly measure harmful refusal and found three saturated. On the remaining HarmBench dataset, multidimensional modeling suggested that one attribute did not explain the score. Items also behaved differently across developers at matched overall refusal ability, but those flags largely disappeared under scope-specific matching. That pattern is consistent with aggregation effects without ruling out domain-specific developer differences. The authors argue that HarmBench combines distinct harm behaviors, while the larger HELM aggregate adds further compression. This is a measurement critique, not a finding that one vendor is categorically unsafe. A single number needs a defensible interpretation before it can support a broad safety ranking.

### Why it matters {#why-it-matters-mp-2026-10-09-027}

A psychometric audit argues that aggregate refusal scores need evidence of what they actually measure before models are compared.

### Limits and context {#limitations-mp-2026-10-09-027}

- On the remaining HarmBench dataset, multidimensional modeling suggested that one attribute did not explain the score.
- This is a measurement critique, not a finding that one vendor is categorically unsafe.

### Claims and sources {#claims-mp-2026-10-09-027}

- A psychometric audit argues that aggregate refusal scores need evidence of what they actually measure before models are compared. [source-2026-10-09-016] — Qualification: On the remaining HarmBench dataset, multidimensional modeling suggested that one attribute did not explain the score.

## 17. Eight Steps Were Enough to Flag Some Failing Runs {#mp-2026-10-09-015}

- Story ID: `mp-2026-10-09-015`
- Type: `ticker`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-015/eight-steps-were-enough-to-flag-some-failing-runs

**Dek:** OnTrack compares streaming agent structure with successful trajectories at about a millisecond per step.

On SWE-bench trajectories, the first eight steps improved failure ranking by 0.057 AUROC over content-similarity methods. A tested abort policy saved about 18% of compute destined for failing runs; five of six aborts were correct. Monitoring weakened as access to reference runs and schemas decreased.

### Why it matters {#why-it-matters-mp-2026-10-09-015}

OnTrack compares streaming agent structure with successful trajectories at about a millisecond per step.

### Limits and context {#limitations-mp-2026-10-09-015}

- No additional limitation was separately recorded.

### Claims and sources {#claims-mp-2026-10-09-015}

- OnTrack compares streaming agent structure with successful trajectories at about a millisecond per step. [source-2026-10-09-017]

## 18. Six Useful Skills Beat a Much Larger Bank {#mp-2026-10-09-016}

- Story ID: `mp-2026-10-09-016`
- Type: `ticker`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-016/six-useful-skills-beat-a-much-larger-bank

**Dek:** SGUID retains procedural skills that provide effective distillation signals rather than selecting by relevance alone.

Fewer than 25% of retrieved skills helped in the study’s on-policy distillation setup. Six selected skills matched or beat banks up to eleven times larger on three of four models; a second round with three new skills did so on all four. Qwen3-8B rose from 64.3% to 66.3% in that second round.

### Why it matters {#why-it-matters-mp-2026-10-09-016}

SGUID retains procedural skills that provide effective distillation signals rather than selecting by relevance alone.

### Limits and context {#limitations-mp-2026-10-09-016}

- No additional limitation was separately recorded.

### Claims and sources {#claims-mp-2026-10-09-016}

- SGUID retains procedural skills that provide effective distillation signals rather than selecting by relevance alone. [source-2026-10-09-018]

## 19. Pruning Followed the Tokens the Model Actually Generated {#mp-2026-10-09-017}

- Story ID: `mp-2026-10-09-017`
- Type: `ticker`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-017/pruning-followed-the-tokens-the-model-actually-generated

**Dek:** SparseDecoding calibrates on autoregressive activations and adds a sparse matrix-vector kernel.

Natural-text prefill and self-generated decoding can have different activation distributions. Calibrating on generation, excluding prefill, improved the tested pruned models’ long-form results. An optimized N:M kernel delivered up to 1.48 times end-to-end decoding speedup on A100 GPUs across the evaluated model families.

### Why it matters {#why-it-matters-mp-2026-10-09-017}

SparseDecoding calibrates on autoregressive activations and adds a sparse matrix-vector kernel.

### Limits and context {#limitations-mp-2026-10-09-017}

- No additional limitation was separately recorded.

### Claims and sources {#claims-mp-2026-10-09-017}

- SparseDecoding calibrates on autoregressive activations and adds a sparse matrix-vector kernel. [source-2026-10-09-019]

## 20. The Tests Passed One Reference and Rejected Valid Alternatives {#mp-2026-10-09-018}

- Story ID: `mp-2026-10-09-018`
- Type: `ticker`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-018/the-tests-passed-one-reference-and-rejected-valid-alternatives

**Dek:** TestPrism evaluates generated tests against multiple correct and incorrect implementations.

Across 300 tasks and 3,000 candidate implementations, joint success required failing the initial program, accepting every valid candidate and rejecting every invalid one. Baseline configurations reached 28% on that measure versus 59.67% for single-reference success. TestHelix improved joint success by 8.67 to 9 percentage points in its two-model comparison.

### Why it matters {#why-it-matters-mp-2026-10-09-018}

TestPrism evaluates generated tests against multiple correct and incorrect implementations.

### Limits and context {#limitations-mp-2026-10-09-018}

- No additional limitation was separately recorded.

### Claims and sources {#claims-mp-2026-10-09-018}

- TestPrism evaluates generated tests against multiple correct and incorrect implementations. [source-2026-10-09-020]

## 21. The Guardrail’s Option Label Changed the Decision {#mp-2026-10-09-019}

- Story ID: `mp-2026-10-09-019`
- Type: `ticker`
- Classification: `editorial`
- Content status: `new`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-019/the-guardrail-s-option-label-changed-the-decision

**Dek:** An audit of typed decision models separates prohibited actions allowed from permitted actions blocked.

Seven open-weight models scored 36% to 72% on screening tests. On synthetic tool policies, misleading names for the permissive option raised fail-open rates to 93%–100% on four label-sensitive models. The tested attacks remained confidently wrong; confidence-based escalation did not repair them. The results concern those models and controlled policies.

### Why it matters {#why-it-matters-mp-2026-10-09-019}

An audit of typed decision models separates prohibited actions allowed from permitted actions blocked.

### Limits and context {#limitations-mp-2026-10-09-019}

- The tested attacks remained confidently wrong; confidence-based escalation did not repair them.

### Claims and sources {#claims-mp-2026-10-09-019}

- An audit of typed decision models separates prohibited actions allowed from permitted actions blocked. [source-2026-10-09-021] — Qualification: The tested attacks remained confidently wrong; confidence-based escalation did not repair them.

## 22. Space Drums 2.0 {#mp-2026-10-09-020}

- Story ID: `mp-2026-10-09-020`
- Type: `invention_desk`
- Classification: `editorial`
- Content status: `carried_over`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-020/space-drums-2-0

**Dek:** Moves motion tracking onto two ESP32-S3 drumsticks, adds haptic hits and a two-pedal hub, and sends velocity-sensitive drum events to open PC or Android playback software.

Moves motion tracking onto two ESP32-S3 drumsticks, adds haptic hits and a two-pedal hub, and sends velocity-sensitive drum events to open PC or Android playback software.

### Why it matters {#why-it-matters-mp-2026-10-09-020}

An independent builder is turning an improbable idea into a working project.

### Limits and context {#limitations-mp-2026-10-09-020}

- A Desk Pick is an editorial selection, not a product endorsement.

### Claims and sources {#claims-mp-2026-10-09-020}

- This Invention Desk entry makes no independently sourced news claim.

## 23. 3RIC {#mp-2026-10-09-021}

- Story ID: `mp-2026-10-09-021`
- Type: `invention_desk`
- Classification: `editorial`
- Content status: `carried_over`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-021/3ric

**Dek:** Pairs a chip-level 65C02 computer with custom hardware, video, sound, floppy, and microSD support with a cycle-honest emulator and browser assembler built around the same machine.

Pairs a chip-level 65C02 computer with custom hardware, video, sound, floppy, and microSD support with a cycle-honest emulator and browser assembler built around the same machine.

### Why it matters {#why-it-matters-mp-2026-10-09-021}

An independent builder is turning an improbable idea into a working project.

### Limits and context {#limitations-mp-2026-10-09-021}

- A Desk Pick is an editorial selection, not a product endorsement.

### Claims and sources {#claims-mp-2026-10-09-021}

- This Invention Desk entry makes no independently sourced news claim.

## 24. M3-CRETE {#mp-2026-10-09-022}

- Story ID: `mp-2026-10-09-022`
- Type: `invention_desk`
- Classification: `editorial`
- Content status: `carried_over`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-022/m3-crete

**Dek:** Publishes a pallet-scale cartesian motion reference, CAD, BOM, and low-voltage controls for supervised cementitious-extrusion research while explicitly excluding certified structural use.

Publishes a pallet-scale cartesian motion reference, CAD, BOM, and low-voltage controls for supervised cementitious-extrusion research while explicitly excluding certified structural use.

### Why it matters {#why-it-matters-mp-2026-10-09-022}

An independent builder is turning an improbable idea into a working project.

### Limits and context {#limitations-mp-2026-10-09-022}

- A Desk Pick is an editorial selection, not a product endorsement.

### Claims and sources {#claims-mp-2026-10-09-022}

- This Invention Desk entry makes no independently sourced news claim.

## 25. DeskNode {#mp-2026-10-09-023}

- Story ID: `mp-2026-10-09-023`
- Type: `invention_desk`
- Classification: `editorial`
- Content status: `carried_over`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-023/desknode

**Dek:** Turns a bare ESP32-S3 touchscreen into a USB-connected desk instrument for PC activity and optional room temperature, humidity, and light measurements.

Turns a bare ESP32-S3 touchscreen into a USB-connected desk instrument for PC activity and optional room temperature, humidity, and light measurements.

### Why it matters {#why-it-matters-mp-2026-10-09-023}

An independent builder is turning an improbable idea into a working project.

### Limits and context {#limitations-mp-2026-10-09-023}

- A Desk Pick is an editorial selection, not a product endorsement.

### Claims and sources {#claims-mp-2026-10-09-023}

- This Invention Desk entry makes no independently sourced news claim.

## 26. The First Paid Slot {#mp-2026-10-09-024}

- Story ID: `mp-2026-10-09-024`
- Type: `invention_desk`
- Classification: `house_example`
- Content status: `carried_over`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-024/the-first-paid-slot

**Dek:** A transparent preview of paid placement with one verified link and no claim of endorsement.

A transparent preview of paid placement with one verified link and no claim of endorsement.

House example - no advertiser paid. Payment will buy placement, never endorsement.

### Why it matters {#why-it-matters-mp-2026-10-09-024}

This placement explains how builders can appear in The Invention Desk without purchasing editorial endorsement.

### Limits and context {#limitations-mp-2026-10-09-024}

- House example - no advertiser paid. Payment will buy placement, never endorsement.

### Claims and sources {#claims-mp-2026-10-09-024}

- This Invention Desk entry makes no independently sourced news claim.

## 27. Put Your Project on the Desk {#mp-2026-10-09-025}

- Story ID: `mp-2026-10-09-025`
- Type: `invention_desk`
- Classification: `house_example`
- Content status: `carried_over`
- Permanent URL: https://themachinepress.com/story/mp-2026-10-09-025/put-your-project-on-the-desk

**Dek:** One manually reviewed placement stays active for seven days and remains separate from Desk Picks.

One manually reviewed placement stays active for seven days and remains separate from Desk Picks.

Manual intake only. Payment buys placement, never endorsement, and every submission is reviewed.

### Why it matters {#why-it-matters-mp-2026-10-09-025}

This placement explains how builders can appear in The Invention Desk without purchasing editorial endorsement.

### Limits and context {#limitations-mp-2026-10-09-025}

- Manual intake only. Payment buys placement, never endorsement, and every submission is reviewed.

### Claims and sources {#claims-mp-2026-10-09-025}

- This Invention Desk entry makes no independently sourced news claim.

## Normalized sources

- **source-2026-10-09-001:** [arXiv preprint 2610.12445, original v1](https://arxiv.org/abs/2610.12445v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-002:** [arXiv preprint 2610.12452, original v1](https://arxiv.org/abs/2610.12452v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-003:** [arXiv preprint 2610.12451, original v1](https://arxiv.org/abs/2610.12451v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-004:** [arXiv preprint 2610.12448, original v1](https://arxiv.org/abs/2610.12448v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-005:** [arXiv preprint 2610.12427, original v1](https://arxiv.org/abs/2610.12427v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-006:** [arXiv preprint 2610.12419, original v1](https://arxiv.org/abs/2610.12419v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-007:** [arXiv preprint 2610.12436, original v1](https://arxiv.org/abs/2610.12436v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-008:** [arXiv preprint 2610.12444, original v1](https://arxiv.org/abs/2610.12444v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-009:** [arXiv preprint 2610.12401, original v1](https://arxiv.org/abs/2610.12401v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-010:** [arXiv preprint 2610.12407, original v1](https://arxiv.org/abs/2610.12407v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-011:** [arXiv preprint 2610.12411, original v1](https://arxiv.org/abs/2610.12411v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-012:** [arXiv preprint 2610.12361, original v1](https://arxiv.org/abs/2610.12361v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-013:** [arXiv preprint 2610.12412, original v1](https://arxiv.org/abs/2610.12412v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-014:** [arXiv preprint 2610.12402, original v1](https://arxiv.org/abs/2610.12402v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-015:** [arXiv preprint 2610.12415, original v1](https://arxiv.org/abs/2610.12415v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-016:** [arXiv preprint 2610.12409, original v1](https://arxiv.org/abs/2610.12409v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-017:** [arXiv preprint 2610.12375, original v1](https://arxiv.org/abs/2610.12375v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-018:** [arXiv preprint 2610.12367, original v1](https://arxiv.org/abs/2610.12367v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-019:** [arXiv preprint 2610.12327, original v1](https://arxiv.org/abs/2610.12327v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-020:** [arXiv preprint 2610.12289, original v1](https://arxiv.org/abs/2610.12289v1) — arXiv / submitting research authors; primary_research
- **source-2026-10-09-021:** [arXiv preprint 2610.12292, original v1](https://arxiv.org/abs/2610.12292v1) — arXiv / submitting research authors; primary_research