Sam: The US government pulled Anthropic's two newest models off the market over national security concerns, and nobody — including the government — can articulate what law was actually broken. That's the kind of precedent that reshapes how every frontier lab thinks about deployment.

Priya: Welcome to AI Revolution's Saturday Week in Review. I'm Priya Nair, here with Sam Kim. This is where we step back from the daily news cycle and try to figure out what actually moved the field forward this week. And this was a dense one. We're going to organize around four themes. First, the Anthropic model ban and the broader question of ad hoc AI regulation in the US. Second, a talent earthquake at Google DeepMind that has three of their most prominent researchers walking out the door within months. Third, the infrastructure and money story — from OpenAI's financials to Nvidia's bond deal to what's happening at the inference layer. And fourth, a set of developments around AI security and safety that are more connected than they might appear at first glance.

Sam: Let's start with the Anthropic situation because it really is the most consequential thing that happened this week. So here's the timeline: Anthropic launches Fable 5 and Mythos 5. Amazon researchers discover guardrail bypasses in Fable 5. The US government steps in and forces Anthropic to pull both models, citing national security and export control concerns. Three days after launch on Bedrock, Anthropic asks AWS to revoke access, citing export control compliance. And as of now, Anthropic still cannot distribute either model.

Priya: And here's what makes this genuinely alarming for the industry: Wired reported that no administration official could specify exactly which rule or statute Anthropic violated. This is ad hoc rulemaking. You have the government exercising what amounts to a product ban on a private company's flagship models without pointing to a specific legal authority.

Sam: Right. And the cybersecurity research community noticed this immediately. There's an open letter signed by a significant number of security researchers calling the ban dangerous, and their core argument is straightforward — the same jailbreak techniques that work on Fable 5 work on competing models. This isn't an Anthropic-specific vulnerability. It's a property of the current generation of large language models.

Priya: Wired drew a comparison to the PGP crypto export battles of the 1990s, and I think that's actually a useful parallel. Back then, the government treated strong encryption as a munition and tried to control its export without a clear statutory framework. It took years of legal challenges and eventual legislative action to sort that out. We might be at the beginning of a similar cycle with frontier models.

Sam: There's a fascinating subplot here too. TechCrunch raised the question of whether the ban is actually helping Anthropic's brand — the idea that government concern signals that your models are genuinely powerful. It's the Streisand effect applied to capability signaling.

Priya: And then there's the data sharing angle, which got less attention but matters enormously for enterprise deployments. When Fable 5 launched on Bedrock, it required opting into a new provider_data_share parameter. That means your prompts and outputs get sent to Anthropic for thirty-day retention with possible human review. Previous Bedrock models kept everything inside the AWS boundary. For any organization that chose Bedrock specifically for data residency guarantees, this fundamentally changes the trust model.

Sam: Which compounds the regulatory chaos. You've got a model that breaks the data isolation model enterprises relied on, and then gets pulled by the government under unclear authority. If you're a CISO trying to plan a deployment strategy around frontier models, the ground is moving under your feet.

Priya: Let's shift to our second theme — the talent exodus at Google DeepMind, because what happened this week is pretty striking. John Jumper, who won the Nobel Prize for AlphaFold, left Google DeepMind after nearly nine years. He's going to Anthropic. Days before that, Noam Shazeer — co-inventor of the Transformer architecture and co-lead on Gemini — left for OpenAI. And just weeks before that, David Silver, who led the AlphaGo work, left to start his own company.

Sam: Three departures of that magnitude in that short a window is not normal attrition. Shazeer co-authored the "Attention Is All You Need" paper. Jumper's AlphaFold work is arguably the most impactful single application of deep learning in science. Silver's reinforcement learning research is foundational. Losing all three in a matter of months — that's a concentration of talent flowing away from one organization and toward its direct competitors.

Priya: And the destinations tell a story. OpenAI picks up Shazeer right before its anticipated IPO, alongside Dean Ball, who was a Trump administration AI policy official. That's a very deliberate move — you're acquiring both technical credibility and regulatory access in the same week. Meanwhile Anthropic gets Jumper, which gives them serious scientific research depth beyond just language models.

Sam: For Google, the question is whether this reflects something structural. DeepMind has historically been the place where you could do long-horizon research — AlphaFold took years. If the people who benefited most from that environment are leaving, it might signal that the internal dynamics have shifted, maybe toward more product-oriented pressure.

Priya: Now let's talk about money and infrastructure, because the numbers this week paint a really clear picture. OpenAI reported Q1 2026 revenue of $5.7 billion — triple year-over-year. But cash burn was $3.7 billion in the same quarter, also tripled. Stock-based compensation alone was $2.3 billion.

Sam: So they're growing fast and burning proportionally fast. They have $73 billion in reserves, which is an extraordinary war chest, but the burn rate matters. At $3.7 billion per quarter, that's roughly $15 billion a year. With $73 billion in reserves you have about five years of runway at current burn, but if a price war with Anthropic accelerates — and Anthropic has every incentive to compete aggressively on pricing — that runway compresses quickly.

Priya: And this is happening against a backdrop where the capital flowing into AI infrastructure is enormous and accelerating. Nvidia is raising over $25 billion in its first bond deal since 2021, specifically to fund manufacturing expansion for AI chips. Baseten, which does inference-as-a-service, is reportedly closing a $1.5 billion round at a $13 billion valuation just months after its last mega-round. FERC ordered grid operators to give AI data centers priority interconnection to the power grid.

Sam: The Baseten raise is particularly interesting because it validates a thesis about where durable value sits in the stack. The argument is that regardless of which foundation model wins, inference infrastructure is something everybody needs. It's the picks-and-shovels play for the deployment era. A $13 billion valuation for an inference company tells you that investors have internalized this.

Priya: On the power side, the FERC ruling is a signal of how seriously the government is treating AI infrastructure as strategic. But it's worth noting what it doesn't do — it gives data centers faster access to the interconnection queue, but it doesn't solve the underlying electricity supply shortage. You can get to the front of the line faster, but if there's not enough power at the end of the line, the bottleneck remains.

Sam: Right. Permitting was never the only constraint. Generation capacity is the binding one.

Priya: Our last theme ties together a few stories about AI security and safety that are worth looking at as a group. Sam, walk us through the Copilot vulnerability.

Sam: So researchers disclosed the SearchLeak exploit in GitHub Copilot. It allowed attackers to exfiltrate two-factor authentication codes from users. The important detail is that this isn't a traditional code bug — it exploits the fundamental way LLMs handle context. The attack manipulates the model's context window to extract sensitive information that the model has access to. The researchers explicitly framed it as illustrating a recurring, industry-wide failure in LLM security architecture.

Priya: And then you have Microsoft introducing the MXC SDK — Microsoft Execution Containers — for securing autonomous agents on Windows. The approach is containment, identity management, and auditability built into the OS layer rather than the application layer. Which is essentially Microsoft acknowledging that application-level guardrails aren't sufficient for agentic workloads.

Sam: These two stories are deeply related. SearchLeak shows that trying to secure LLMs at the application layer keeps failing. MXC says, okay, we'll push security down to the operating system. Meanwhile, OpenAI published research showing that small-scale reinforcement learning on behavioral traits like truthfulness improves safety across 44 of 53 benchmarks — and interestingly, training on health data improved deception detection in completely unrelated domains.

Priya: That generalization result is genuinely surprising. The idea that training a model to be truthful in one narrow domain makes it harder to manipulate across the board — that's a different kind of safety result than constitution-based approaches where you enumerate rules. It suggests there might be something more fundamental happening in the model's internal representations when you reinforce these traits.

Sam: And then as a reality check on all of this, there's a new benchmark for realistic knowledge work where the best available models fully solved only 3 percent of tasks. These are multi-step, context-dependent professional tasks — not trivia questions. Which is a useful corrective to the deployment expectations that have gotten ahead of demonstrated capability.

Priya: One more thing worth highlighting — Apple announced Core AI at WWDC 26, the official successor to Core ML. It's designed to run LLMs entirely on-device, optimized for Apple Silicon's neural engine and unified memory. This matters because it establishes on-device inference as a first-class platform capability, not an afterthought.

Sam: So stepping back — what does this week mean? I see two things. One, the regulatory environment for frontier AI models is being invented in real time, without clear legal foundations, and that creates genuine uncertainty for anyone building on these models. Two, the talent redistribution away from Google DeepMind toward OpenAI and Anthropic is accelerating at a pace that could shift the research frontier.

Priya: What I'm watching is the tension between how much money is flowing into AI infrastructure and how modest the actual performance is on real-world tasks. Five-point-seven billion in quarterly revenue, $25 billion bond deals, $13 billion inference startups — and the best models solve 3 percent of realistic knowledge work tasks. That gap between investment and demonstrated utility is either a sign that the market sees something coming that benchmarks don't capture yet, or it's a sign that expectations need to recalibrate. Probably some of both. Next week, I'm watching whether there's any legal clarity on the Anthropic ban and how Google responds to losing three of its most important researchers.

Sam: That's our Week in Review. We'll be back Monday with the daily show. Show notes and links to every story we discussed are at cleartext.fm. Thanks for listening, everyone. Have a good weekend.