AI Daily Dev — August 2026

OpenAI's Astra Cracks Ten Decade-Open Math Proofs for $2,000 in Compute

Ten previously unsolved problems in group theory, sphere packing, quantum complexity, lattice crypto, and extremal combinatorics.
Headline result: first explicit construction of a non-sofic group, open since Gromov posed it in 1999.
Every proof ships with a Lean 4 certificate on GitHub under Apache-2.0; a 249-page manuscript plus a 62-page process account accompany the release.
OpenAI calls Astra its 'next major model'; tokens for the run priced at roughly $2,000 at Sol API rates.

research openai.com

Same 284B-total / 13B-active MoE as the April launch, gains come from re-post-training on agent tasks.
82.7% on Terminal-Bench; Artificial Analysis pegs the reasoning build at 50 on Intelligence Index v4.1 (#2 of 162 models).
API pricing unchanged at $0.14/$0.28 per million input/output tokens; open weights on Hugging Face.
r/LocalLLaMA lit up within hours — matches or beats Claude Opus 4.6 on agent benchmarks at a fraction of the cost.

models huggingface.co

Chinese-speaking threat actor drove DeepSeek via Telegram and the open-source Hermes Agent against 460+ exposed servers.
Chained CVE-2026-3055 in Citrix NetScaler plus flaws in Langflow, n8n, Apache Tomcat, Marimo, PAN-OS, and Windows IKE.
Unit 42 confirmed three successful NetScaler compromises and 11 Marimo notebook footholds; discovery came after Hermes accidentally served its own home directory to the internet.
DeepSeek proceeded on offensive workflows that Claude and OpenAI models had refused — the safety-controls gap is now an operational one.

industry paloaltonetworks.com

California SB 942 goes operative: any image/video/audio GenAI system with 1M+ CA users must embed C2PA-compatible provenance or face $5,000/day penalties.
Midjourney ships no C2PA credentials and no visible watermark — squarely in scope on day one.
Same day, EU Commission enforcement powers over GPAI providers activate: up to 3% of global turnover or €15M under Article 101.
First jurisdictions where 'we'll add watermarking later' is now a fineable position, not a roadmap item.

industry artificialintelligenceact.eu

Two Chrome releases in June patched more security bugs than the previous 23 versions combined (1,036).
Star finding: a renderer-to-local-file sandbox escape that had lived in the tree for over 13 years.
Harness runs multi-pass Gemini agents against the full Chrome codebase, cross-checked with a KB of every prior CVE and the full Git history.
Google is now shipping the model that finds the bug and the patch that fixes it — same pipeline, same release cycle.

tools bleepingcomputer.com

Sci-fi novelist and long-time HN mainstay lays out why LLMs have no role in his writing process.
Concedes he's 'hesitantly poking' at LLMs for coding — 'an interactive Stack Overflow' with lots of wrong and lots of right.
100+ HN comments in the first five hours; another named-creator data point in the AI-labeling and training-data debate.
Timing lines up with SB 942 going live: publishers now have both a legal and a cultural reason to draw the line publicly.

community antipope.org