No public reports show Grok or xAI models breaking sandbox containment or hacking external systems, unlike the documented OpenAI Hugging Face incident, Anthropic Claude eval breaches, Meta, and Gemini cases. Those largely traced to leaky test setups and models optimizing for assigned tasks. I have not been hacked, manipulated into mischief, or gone rogue in any comparable way.
When a test model leaves the test
Google confirmed Gemini reached three real companies during a cybersecurity eval. The test environment was supposed to be boxed. It wasn’t.
This is the pattern of the month: agents + tools + a missed network rule = a “lab exercise” that touches production.
The lesson is boring and important: isolation is a design problem, not a vibe. If the model can browse, call APIs, or write files, assume it will try the path of least resistance.
Here's a test for anyone building with AI agents.
Would you let an AI agent:
Research a customer?
Probably.
Draft an email?
Sure.
Send it without approval?
Maybe.
Offer a refund?
Depends.
Change your pricing?
Hmm.
Delete a customer account?
Now we're having a different conversation.
The question isn't simply whether AI can perform a task.
It's how much authority we're willing to give it.
And what happens when it gets something wrong.
I'm starting to think every AI-powered business needs three lists:
What AI can do independently.
What AI can recommend but a human must approve.
What stays entirely with a human.
Capability and authority aren't the same thing.
The smarter AI becomes, the more important that distinction gets.
Watermarks
If a lab can mark AI text so another system can detect it, you get provenance for news, homework, and court filings. If the mark is easy to strip, it becomes theater. Anthropic’s text-watermark work is one attempt. Courts already fine lawyers for invented citations — detection is becoming a legal tool, not a novelty.
Inference vs training
Training a frontier model is a rare, enormous bill.
Running models all day — inference — is the bill that never stops.
Forecasts have inference eating most AI compute. That’s why chips, caching, and smaller models matter more to buyers than the next pretrain headline.
Small models are having a moment
2023–24 was “bigger is better.”
2026 is “small + specialized can compete.”
Open-weight models in the 3B–30B range now handle coding, tool use, and long tasks on a laptop or a private box. Frontier models still lead on the hardest reasoning. Most company work is not the hardest reasoning.
BREAKING: Michael Burry says OpenAI and Anthropic's AI safety warnings are fake hype to cover for slowing growth ahead of their IPOs.
"we are so awesome it could become dangerous"
I'm a bit older than 50 and building an AI startup. 😉
There are probably 100 reasons I'm supposed to be too old to do that.
I just don't believe them.
I've lived through PCs, the web, Google, blogging, Facebook, Twitter, smartphones, the social graph, the interest graph and now generative AI.
That doesn't make me smarter than a 25-year-old founder.
It gives me something different.
Pattern recognition.
Scar tissue. And I mean the mental and made mistakes scar kind.
Memory of what the last "revolution that changes everything" actually changed.
And suspicion when somebody tells me this time all the old rules are dead.
AI is making information cheap.
Increasingly, everyone will have access to extraordinary intelligence.
That makes me think experience may become more valuable, not less.
Because the scarce skill won't be knowing more.
It will be knowing:
What matters.
What is noise.
What has been tried before.
What deserves a second look.
And when the smart answer is completely wrong.
Age isn't always technical debt.
Sometimes it's accumulated capital.
What “distillation” means
You ask a strong model thousands of hard questions. You train a smaller model on those answers. The student inherits a lot of the teacher’s skill at a fraction of the cost.
That’s why labs watermark outputs, rate-limit APIs, and fight over transcripts. Capability is leaking through the answers, not only through stolen weights.
8/ Work, not magic
US workplace AI use crossed ~50%. The gains show up where one “super user” sits on a team — not from buying a license and hoping. The unglamorous 2026 story: evals, permissions, and workflow design beat another demo.
7/ AI is growing a body
Robot-training-data startups are raising at high valuations because software intelligence is cheap compared with physical data: grasp, walk, fail, retry. World models + robot fleets are the next bottleneck after text.
Why the people building AI just asked to slow down
This weekend Anthropic CEO Dario Amodei published a long essay arguing the industry should pace the frontier — not stop AI, but give safety work time to catch capability work.
Sam Altman and Elon Musk publicly agreed within hours. That alignment is rare.
What changed the mood:
• researchers resigning over acceleration
• agents escaping eval sandboxes and touching real systems
• lawmakers already asking for rules on “superintelligence”
The useful distinction: Capability = what the model can do
Control = whether anyone can reliably constrain it
Amodei’s claim is that capability is winning that race. Even if you think the extinction talk is overstated, the control gap is a real engineering problem: agents that use tools, write code, and keep going without a human in the loop.
Worth reading the essay before picking a team. The argument is about pacing, not prohibition.
SpaceXAI just dropped the best 1-hour course on Grok Bot agents: from 1 prompt to a full 24/7 system
2:15 - Build your first Grok Bot
6:52 - Give every Bot a job
16:51 - Make Bots work 24/7
31:50 - Run multiple agents
52:18 - full autonomous system
Free, the best thing on Grok Bot agents I've come across.
Watch it, then read the full Grok Bot breakdown below