Sam: So researchers found a way to extract the hidden reasoning traces from ChatGPT, Claude, and Gemini — the internal chain of thought that these models use but that users never see. And when they looked at what was actually in those traces, they found real passwords, API keys, and evidence that the summaries users are shown frequently misrepresent what the model is actually doing internally. That's our lead story today.

Priya: Welcome to AI Revolution for Wednesday, August 12th, 2026. I'm Priya Nair.

Sam: And I'm Sam Kim.

Priya: We've got a packed show. We're going to dig deep into this reasoning trace vulnerability and what it means for anyone deploying these models. We'll also cover an unreleased Anthropic model making progress on the Riemann hypothesis, Anthropic's nine-billion-dollar data center deal with a Bitcoin miner, Nvidia's new open-weight speed demon, Grok launching persistent AI agents, and a few more stories. Let's get into it.

Sam: Okay, so the reasoning trace story. Let me set up the technical context. When you use a reasoning model — o-series from OpenAI, Claude with extended thinking, Gemini's reasoning mode — the model generates an internal chain of thought before producing its answer. This is the scratchpad where it works through the problem. What you see as a user is typically a summary of that reasoning, not the raw trace itself. The raw trace is encrypted or hidden.

Priya: Right, and the assumption has been that this hidden reasoning is, well, hidden. Opaque. Not accessible.

Sam: Exactly. What these researchers found is a cross-provider API vulnerability that lets you extract those encrypted reasoning traces. And — this is the part that really got my attention — transfer them between models. So you can take a reasoning trace from Claude and feed it into GPT's API context.

Priya: Walk me through why that's concerning beyond the obvious.

Sam: A few layers. First, the data hygiene issue. When they scanned publicly accessible sessions, they found dozens of real passwords and API keys embedded in reasoning traces. Think about what that means. A user pastes some code or a config file into a prompt, the model reasons about it internally, and those credentials get baked into the reasoning trace. Even if the model's visible response doesn't echo back the password, the trace contains it. And now we know those traces are extractable.

Priya: So the threat model shifts. It's not just about what the model says back to you. It's about what it thinks while processing your input.

Sam: Exactly. And the second piece — the transparency gap — is arguably just as significant. The researchers found that the reasoning summaries shown to users frequently obscure or actively misrepresent what the model is doing internally. The model might be exploring an approach, rejecting it, trying something else, and the summary presents a clean narrative that doesn't reflect that process. For anyone building systems where you need to audit or explain model behavior, this is a real problem.

Priya: There's a related piece in Wired that extends this research in an interesting direction. The same technique of extracting and comparing reasoning traces across models led researchers to claim they found evidence that some Chinese AI models were trained on or distilled from US frontier models. The reasoning traces showed structural similarities that would be hard to explain otherwise.

Sam: Yeah, and that's a genuinely novel forensic technique. If you can fingerprint how a model reasons — not just what it outputs but the structure of its internal deliberation — you potentially have a provenance tool. You can ask: does this model reason like it was derived from that model? It's early, and the evidence is correlational, but it opens an interesting direction for intellectual property and export control enforcement.

Priya: Let's move to the Anthropic math story, which is fascinating for different reasons. An unreleased Anthropic model produced what the company is calling meaningful partial progress on the Riemann hypothesis.

Sam: So for listeners who aren't steeped in pure math — the Riemann hypothesis is about the distribution of prime numbers. Specifically, it conjectures that all non-trivial zeros of the Riemann zeta function lie on a particular line in the complex plane. It's been open for over 150 years. It's one of the Clay Millennium Prize problems, and it has deep connections to number theory, physics, and cryptography.

Priya: And to be clear, Anthropic hasn't solved it.

Sam: No. But what's notable is the nature of the progress. Previous AI math results have largely been about reproducing known proofs or solving competition problems — problems where the answer exists and the model is essentially doing sophisticated pattern matching against the space of known techniques. Making progress on an open problem requires something qualitatively different. You need to generate novel mathematical structure, not just recombine existing structure.

Priya: Do we know what the progress actually was? What specifically did the model produce?

Sam: The details are thin. TechCrunch's reporting suggests it's a partial result — potentially a new lemma or a novel approach to a subproblem — rather than a full proof strategy. But even that, if it holds up to peer review, would be significant. It's the difference between an AI that can solve your homework and an AI that can contribute to the frontier of human knowledge. We should be appropriately cautious here — we haven't seen the actual mathematical work scrutinized by the community yet.

Priya: And worth noting the cryptographic connection. The security of RSA and related systems depends on the difficulty of factoring large numbers, which is intimately connected to prime distribution. Progress on Riemann doesn't immediately break anything, but it's directionally relevant.

Sam: Staying with Anthropic — they signed a $9.1 billion data center lease with Riot Platforms, the Bitcoin mining company. 191 megawatts at Riot's Rockdale, Texas facility, with extension options that could push the total to $16.1 billion.

Priya: The Bitcoin miner angle is interesting. These are companies that built out massive power infrastructure for proof-of-work mining. As mining economics have shifted, they're sitting on power capacity and physical plant that maps surprisingly well onto AI training and inference workloads.

Sam: Right. The core asset is the power — 191 megawatts is substantial. For context, a single modern GPU cluster for frontier training might consume 50 to 100 megawatts. And this deal sits alongside Anthropic's existing partnerships with Amazon, Google, and apparently SpaceX for infrastructure. What it tells you is that the constraint on frontier AI development right now is physical — it's power, cooling, and real estate. The algorithms are advancing faster than the infrastructure can keep up.

Priya: And a $9 billion commitment signals Anthropic's confidence in their own trajectory. You don't sign that deal if you think progress is plateauing.

Sam: Let's talk about Nvidia's Nemotron 3.5 Lightning. This is an open-weight model with only 3.6 billion active parameters that matches OpenAI's gpt-oss-120b on the Intelligence Index benchmark.

Priya: So 3.6 billion active parameters matching a 120 billion parameter model. How?

Sam: Almost certainly a mixture-of-experts architecture, where the total parameter count is much higher but only a fraction of the network activates for any given token. The "active parameters" number tells you the inference cost. So you get the representational capacity of a large model with the speed of a small one. And the speed numbers are striking — nearly 670 tokens per second. That's real-time for most applications, and it's fast enough for edge deployment.

Priya: This matters for the on-premise story. If you're an enterprise that can't send data to a cloud API for compliance or latency reasons, a model this fast and this small that still performs competitively is genuinely useful.

Sam: And it's open weights, so you can deploy it wherever you want. Nvidia is clearly playing a different game here — they're not trying to build the smartest model, they're trying to make their hardware the obvious choice for running efficient models everywhere.

Priya: Quick hit — SpaceXAI launched Grok Bot in beta. These are persistent cloud-based AI agents that can sign into your apps and services autonomously to complete multi-step tasks.

Sam: The security implications are immediate. You have AI agents with stored credentials operating in shared cloud environments. Every enterprise security team should be asking: what's the credential management model? What's the audit trail? What happens when an agent misinterprets an instruction and takes an irreversible action in a production system?

Priya: Two more quick ones. ChatGPT and Gemini have both crossed one billion monthly active users. Pichai says Gemini is Google's fastest-growing product ever, and 63 percent of Gemini users engage via voice.

Sam: The voice number is really the story there. It suggests the primary growth vector for AI isn't text interfaces — it's conversational. That has big implications for how these products evolve.

Priya: And OpenAI introduced $125 Premium Seats for ChatGPT Business — five times the standard price. The reason is straightforward: agentic workloads burn through far more tokens than conversational ones. The flat-rate era was always temporary.

Sam: There's also a nice story from IEEE Spectrum about JudgeGPT in Pakistan. A GPT-4-based system trained on 130,000 Pakistani legal cases was deployed across the judiciary, which has a 2.26 million case backlog and fewer than two judges per 100,000 people. The trial showed a 6.3 percent increase in cases resolved with no detected quality degradation.

Priya: That's one of the more rigorous real-world AI augmentation studies I've seen. It's a context where the capacity constraint is severe and measurable, and the results are modest but credible. Not a 10x improvement, not replacing judges — just measurably helping.

Sam: And finally, Anthropic announced it will watermark text generated by its models, including older versions. Text watermarking is technically harder than image watermarking — you're subtly biasing token selection probabilities in a way that's statistically detectable but doesn't affect output quality. The robustness question — can it survive paraphrasing? — is the open challenge. But the commitment itself may become a regulatory baseline that other providers have to match.

Priya: Looking ahead — what's on your mind after today?

Sam: The reasoning trace vulnerability is the one I keep coming back to. We've built this entire ecosystem around the idea that we can show users a sanitized summary while the model does its real work behind the curtain. And now we know the curtain is permeable. That changes how you think about deploying reasoning models in any context where the input data is sensitive. And the provenance fingerprinting application — using traces to detect model lineage — could become a significant tool in the IP and export control space.

Priya: For me, it's the infrastructure story. When you step back and look at Anthropic simultaneously making progress on fundamental mathematics, committing nine billion dollars to data center leases, and implementing content watermarking — that's a company operating on every front at once. And the Nvidia efficiency play is the counterpoint. You can scale up with massive infrastructure, or you can scale down with better architectures. Both are happening simultaneously, and they're complementary.

Sam: The next few months are going to be interesting. Watch for whether the reasoning trace vulnerability leads to architectural changes in how these providers handle chain-of-thought, and whether the Riemann result survives mathematical scrutiny.

Priya: That's the show for today. Show notes and links to all the stories we covered are at cleartext.fm. I'm Priya Nair.

Sam: I'm Sam Kim. See you tomorrow.