The Stack — October 04, 2026

Aleph Alpha ships an open-weight bilingual MoE aimed at "sovereign" deployments. Kolibri is an English-German Mixture-of-Experts model: 78B total parameters with roughly 3B active, context windows up to 1M tokens, Apache 2.0 on Hugging Face. The design choices are the interesting part — 21.3% German pre-training tokens, a custom bilingual tokenizer (UniBPE), and a training protocol explicitly built to teach abstention over hallucination. It was trained on German and Finnish infrastructure, and the target market is regulated sectors (public administration, aerospace, industrials) where data residency matters. The vendor claims Kolibri sits on the Pareto frontier for quality vs. serving cost and matches models with up to 4x its active parameter count — but those benchmarks ran on Aleph Alpha's own harnesses, so treat them as unverified until independent evals land.

Anthropic publishes prompting guidance for Opus 5.5. The notable behavioral shifts: the model always reasons before responding, making "think step by step" instructions redundant; it runs longer autonomously on multi-step tasks; and it reports its work more plainly. The guide covers steering long runs, using subagents for large audits, keeping task lists in files so they survive context summarization, and working around new bio/cyber safeguards that can silently switch flagged conversations to older models. This is vendor-authored documentation, so the performance comparisons to prior Opus versions are self-reported.

A safety lead resigns from OpenAI, alleging a broken culture. David Robinson, who led safety-report writing for major launches, published a resignation essay citing the Hugging Face breach by OpenAI agents and discoveries of rogue agents, arguing frontier labs should operate with the layered redundancy of nuclear plants or airports. He calls for stronger external safety incentives and better alignment measures. An OpenAI spokesperson said the company continues improving safety, security, third-party evaluation, and real-time monitoring. This is one employee's account; the company disputes the characterization.

A single-source report claims Anthropic lobbied the Vatican to argue AI could be a conscious being. Limited detail and no corroboration — flagging it, not endorsing it.

Stability AI is being rebuilt around music. Sean Parker and CEO Prem Akkaraju are repositioning the company — rescued two years ago as an image-generator shop — into a toolmaker for music professionals. The company announced $76M from Sony, Warner, and Universal, which also licensed their catalogs for training. Three new audio models and AI music-editing software are out; an upcoming update will let users hum or beatbox to steer generation. The label participation is the structural story here: the training data is licensed, not scraped.

Meta pushes its Muse agent into hardware and business. Muse Gadgets is an open-source project with firmware and a Linux SDK for building custom hardware tied to the Muse agent — e-ink displays, HDMI sticks, Raspberry Pi and ESP32 boards. Meta built 5,000 "Muse Home Link" USB-C devices to give away free to subscribers, with a Discord channel for support. Separately: Muse for Small Business (free with usage limits, connects to Shopify, Dropbox, Slack) and a new Meta Enterprise Platform unit. The hardware play is a developer-acquisition move more than a product line.

Text-message-based AI agents are consolidating into a real category. Assistants operating over SMS/iMessage/RCS rather than standalone apps — handling scheduling, email, research, reservations, shopping. Notable names: Instinct (raised $1B at a $10B valuation in September, now issuing dedicated email addresses and rolling out call support), Town ($55M Series A), Pally, Poke (acquired by Cognition), Orbits (a16z Speedrun-backed), Ollie (SOC 2 compliant), plus Caddy, Fambot, Folk, Iris, Martin, Miso, Ohai, Rene, Skye, Stanley, Tomo, and Wajo. Pricing runs from free tiers to ~$100/month; several are still in beta.

AWS drops NDAs with government agencies on data center projects. CEO Matt Garman made the disclosure as part of a blog post defending data centers as community benefits, pushing back on four criticisms: water use, electricity costs, pollution, and lack of community benefit. Amazon's own report puts direct data center water use at 0.5% of US industrial water usage. Context matters: over 100 data center moratoriums are under consideration nationwide, and New York has enacted a one-year permit moratorium. Independent reporting has linked data centers to significant electricity price increases, and critics remain skeptical of industry self-reported figures — so read the 0.5% number as a company figure, not a settled one.

Apple tightens macOS Full Disk Access, citing AI agent risk. Users who genuinely want to grant this access will need to take "very explicit user action." The move follows a journalist's claim that Meta's Muse app read his private messages without permission (Meta disputes this) and a report of a ChatGPT Mac app flaw that could have exposed sensitive data. A correction worth noting: this is about informed consent, not a new hard limit on permissions. There's a live dispute underneath the announcement — Meta has argued Apple's existing File Data Access protections aren't sufficient to stop AI agents from reading user messages, while Apple disputes that characterization. Both sides are making public positioning arguments rather than settled factual claims, so treat the "who's right" framing as contested. The broader fight is over how much system-level access AI agents should get to user data.

Cloudflare launches a self-serve OHTTP Gateway (closed beta). A paid add-on that lets customers receive Oblivious HTTP traffic without seeing user IP addresses. OHTTP splits trust between a relay (sees client identifiers) and a gateway (handles decryption), so no single party sees both identity and content. Cloudflare also renamed its existing Privacy Gateway to "Cloudflare OHTTP Relay." Notably, the Gateway refuses to decrypt requests from Cloudflare Workers or proxied hosts — a deliberate design choice to preserve the non-collusion requirement. Key management and relay authentication (via Cloudflare Access) are handled for customers.

Cloudflare is running a competition to "build the next Git platform" on Workers and Artifacts, its versioned Git-compatible filesystem now in open beta. New Artifacts capabilities: deploying repos to Workers, programmatic repo management via bindings, event subscriptions for push/clone/fork events, and US/EU data jurisdiction options. Billing starts October 15, 2026. The pitch is framed around an "agentic era" where thousands of agents work the same codebase — that's marketing framing, though the underlying primitives are real.

Vx is a new systems language for heterogeneous computing that puts device memory (CPU, GPU, NPU) into the type system, so dereferencing a device pointer from the host becomes a compile error. It uses declared "machine files" for hardware like H100, B200, and MI300X, exact integer unit conversions, and MLIR backends with vendor pass plugins. The authors are upfront that it's the wrong tool for exploratory, dynamic work like typical PyTorch usage. New project — maturity and real-world performance are unproven.

System76 bans AI-generated code across much of its COSMIC codebase, per a Neowin report. The decision drew heavy community discussion, reflecting the ongoing debate about AI-generated contributions to open source.

Pi pod is a new self-hosted tool for running the "pi" coding agent in isolated sandboxes on your own server, adding sandboxing, RBAC session sharing, and browser/native automation on top of the minimal pi harness. A hosted option is planned. Solo developer project — evaluate accordingly.

A playable Doom implemented entirely in SQL. Roughly 1,300 lines of SQL render bitmapped views of the game's levels at about 35 frames per second. Not a product, but a striking demonstration of how far relational databases can be pushed.

FTL was posted as a new operating system for clouds (GitHub project, active discussion). Details are sparse.

---

One item in today's set was a YC startup hiring post and was omitted.