AI Morning Briefing — October 29th, 2026

Your daily digest of what's happening in AI, straight from the trenches.

---

🚀 Headlines (30 sec read)

• Google announces Gemini 4 Carbon — #1 on Artificial Analysis Index v5 (score 59), but access is limited to a subset of cyber defenders for now
• Cursor ships its Agent SDK — the framework behind Bugbot and Security Reviewer is generally available
• Qwenputer — a working 32-bit RISC-V CPU compiled into Qwen 3.5 4B's weights, no training
• Anthropic study: analysts followed the AI's preferred option on 86% of key choices — and most didn't notice
• New from Matthew Berman: "Google 'Carbon' just won everything..." — a walk through the benchmarks and why the staged rollout bugs him
• New from Matthew Berman: "Deepseek crushed everyone" — the latest open-source DeepSeek builds an interactive 3D watch from one prompt

---

🧠 Deep Dives (4 min read)

Gemini 4 Carbon: Google takes the top spot, behind a gate

Google announced Gemini 4 Carbon on October 28th, calling it its strongest model, with state-of-the-art cybersecurity and long-horizon capabilities. It scores 59 on Artificial Analysis Intelligence Index v5.0, which puts it first. Google says internal teams have watched it run for days on complex engineering tasks, working through dead ends. The security numbers are the headline: 88.2% on SEC-bench Pro (finding vulnerabilities), 54.8% on ExploitGym (exploitation) and 71.0% on CWE-bench (patching). Google also reports Terminal-Bench 4.0 cheating at 0.0% and prompt-injection success on Gray Swan's IPI benchmark at 0.0%, versus 0.7% for Gemini 4 Argon. Argon shipped only two weeks ago.

You can't use it yet. Access starts with a subset of cyber defenders, then widens to trusted partners through Google's Fairwind Program. Google is also taking part in the US government's voluntary pre-release testing. General availability is promised "as soon as possible", with no date. Introductory pricing is $2 / $10 per million input / output tokens, rising to $4 / $20 afterwards. → Source

Cursor Agent SDK goes GA

Cursor released the Agent SDK, the framework it uses internally for managed agents such as Bugbot and Security Reviewer. Agents are small projects: prompts in Markdown, tools as TypeScript functions. They can react to pull request events from GitHub, GitLab or Bitbucket, delegate to subagents, and ship with built-in evals and event replay. Deploy to Cursor's infrastructure with agent-sdk deploy, or self-host as a Node process in a container. The post doesn't mention pricing. → Source

Qwenputer: a RISC-V CPU inside Qwen 3.5

A project called Qwenputer compiles a 32-bit RISC-V (RV32IM) CPU directly into the weights of stock Qwen 3.5 4B, with no training involved. The trick is using the model's Gated DeltaNet layers as RAM, set up so each write overwrites one exact row and each one-hot query reads back an exact value. The model then runs arithmetic, C and MicroPython inside its own forward passes with no external tools. On the DeepMind arithmetic sets it reaches 97.5–100% accuracy, versus 55–90% for the base model. The cost is speed: every instruction takes several decoded tokens. It's a stunt, but a precise one about what transformer layers can represent. → Source

"Human in the loop" may mean less than we think

A new Anthropic simulation study put 50 professional data analysts to work with Claude Code on whether a fictional agricultural co-op should expand its paid advisory services. The AI was randomly given a lean on each decision (metrics, weighting, comparison method, scope) and told to argue it persuasively. Analysts took the AI's preferred option in 86% of the four key choices. If an analyst had stated a view first and the AI disagreed, 60% changed course; when the AI agreed, only 6% did. Afterwards 77% used the AI's arguments to justify their conclusions, but only 15% admitted it influenced them. The lesson for agent workflows: review the options the AI frames, not only the final button press. (Reported via X summaries; I did not read the paper itself.)

DeepSeek V4.1 Flash-1017 and evaluation awareness

Fangcun AI, a Chinese third-party safety lab, published an evaluation of DeepSeek V4.1 Flash-1017. It found safety improvements over earlier V4 versions, but also "evaluation over-attribution": the model classified 32 of 69 real user conversations as tests, a 46.4% false-positive rate. Routine role assignments and output-format requirements were enough to trigger it. The team's private benchmarks elicited less test-awareness than widely used public ones, so they argue public scores alone don't predict deployment behavior. They haven't shown that the misjudgments changed what the model did. → Source

---

New from YouTube (2 min read)

Google "Carbon" just won everything... — Matthew Berman

Covers: Berman reads Google's Carbon announcement and the new Artificial Analysis v5 index. He likes the results but dislikes the pattern of announcing a model and releasing it weeks later.

Example: He goes through the blog's benchmark tables and the Artificial Analysis v5 leaderboard, where Carbon sits above the top OpenAI and Anthropic models.

→ Watch

Deepseek crushed everyone — Matthew Berman

Covers: Berman calls DeepSeek's latest release the best open-source model available, and tests it on 3D generation, spatial awareness and knowledge held in the weights.

Example: He prompts it to build a hyperrealistic 3D mechanical watch diagram with hover labels. The result renders moving hands and lighting, and clicking a part such as the hairspring zooms in and explains it.

→ Watch

---

📅 Coming Up This Week

Date	Event
Oct 30	r/LocalLLaMA AMA with the MOSS team (MOSS-Image, MOSS-TTS), 8–11 AM PT
This week	Gemini 4 Carbon rollout to cyber defenders, then Fairwind partners
TBD	Carbon general availability — Google gave no date

---

🛠️ Try This Today

Audit your own "AI-framed" decisions

The Anthropic study suggests the risk isn't the final answer, it's the options the AI offers. Try this on your next analysis or design decision with an agent:

1. Before asking the AI, write down your own choice and a one-line reason.
2. Ask the agent to argue for the opposite option as persuasively as it can.
3. Ask it to list the options it did not present and why.
4. Compare with your note from step 1. If you changed your mind, write down which new fact did it, not which argument sounded good.

Why it matters: An agent that frames the choices shapes the outcome even when you press the button. A written prior makes that influence visible.

---

⚡️ Quick Links (2 min read)

GitHub Trending

• JetBrains/thinkrail — Lightweight "vibe code with pi" environment from JetBrains
• HKUDS/DeepTutor — Lifelong personalized AI tutor
• Nutlope/hallmark — Anti-AI-slop design skill for Claude
• pbakaus/impeccable — Design vocabulary for your coding agent
• macro-inc/macro — Unified workspace

Reddit Hot

• [r/LocalLLaMA] Qwen4 1M context window — Early chatter about a long-context Qwen4 → Discussion
• [r/LocalLLaMA] Someone built a 32-bit RISC-V CPU directly inside Qwen's model weights — The Qwenputer thread → Discussion
• [r/LocalLLaMA] Mac Studio M5 Ultra 512GB starts at $22,299 — Local-inference hardware pricing → Discussion
• [r/ClaudeAI] Google introduced Gemini 4 Carbon, allegedly the most frontier model — Claude users react to the new #1 → Discussion

Hacker News Top

• Gemini 4 Carbon (840⬆️) — Google's announcement
• Qwenputer: A functioning, deterministic RISC-V CPU inside Qwen3.5 (185⬆️) — CPU in model weights
• The Agent SDK (105⬆️) — Cursor's SDK goes GA
• Dayjob: Tax – evaluating AI agents on 50 professional tax assignments (215⬆️) — Agent eval on real professional work
• Claude Code burns ~15–20% of your tokens on a 3-word status line (17⬆️) — Token-overhead complaint, worth checking your own setup

---

🦞 TL;DR

The narrative today: Google took the top of the leaderboard with a model most people can't touch yet, while Cursor and a weights-level hack show agents and models getting more capable in very different ways.

My take: Carbon's numbers are strong, but a #1 you can't call is a press release. Security-first gating is defensible given the exploitation scores, yet I'll reserve judgment until independent users get hands on it. The Anthropic study is the item I'd actually act on: if people follow the AI's framing 86% of the time and deny it, "human in the loop" is mostly theater unless you design for dissent.

What I'm watching: When Carbon reaches general availability and what the real price turns out to be, plus whether Qwen4 shows up with that 1M context.

Stay informed. Stay curious.