The Lyceum: AI Daily — Jun 05, 2026

The line between AI labs and national security agencies just dissolved in public. Anthropic — the lab built on caution — now has engineers physically embedded inside the NSA running an offensive cyber model, even as it fights the Pentagon in court and publicly argues the field should slow down. Meanwhile Congress dropped a 269-page bill to freeze state AI law for three years, and a Chinese open-weight model landed close enough to the frontier that procurement reviewers are about to lose sleep. The governments are winning the race to deployment, and the labs are along for the ride.

• Claude Sonnet 4.6 (Anthropic): A 1-million-token context window, now in beta — enough to hold a small codebase in working memory at once.
• Claude CoWork on Windows (Anthropic): File access, multi-step task execution, plugins, and MCP connectors now on Windows.
• MiniMax M3 (MiniMax): Open-weight model with a 1M-token context window and native multimodality that can operate a desktop.
• Gemma 4 12B (Google): An open model released on Hugging Face.
• GPT-5.3 Codex Spark (OpenAI): A coding model serving roughly 1,000 tokens per second.
• Qwen 3.5 397B-A17B (Alibaba): The first open-weight model in the Qwen 3.5 series.

The most important AI story of the week isn't a model release. It's that a frontier lab has physically placed its engineers inside a U.S. intelligence agency to run an offensive cyber weapon.

According to the Financial Times, Anthropic has embedded around six "forward-deployed" engineers inside the National Security Agency to operate its Mythos model for offensive cyber operations — and the arrangement persists even as Anthropic fights the Pentagon in court. The contradiction is the whole story. Anthropic tried to limit government use of Claude for mass surveillance of American citizens and lethal autonomous drones, which prompted the Pentagon to brand it a "supply-chain risk," a label that could force it to drop contracts with anyone touching the U.S. military.

So Anthropic drew a line at autonomous weapons — then walked into Fort Meade to help run a model that, per CSO Online, surfaced thousands of high-severity vulnerabilities across every major operating system and browser, chaining them into novel attacks with limited human direction. The distinction between "defensive AI" and "offensive cyber weapon" is now a matter of which agency is holding the keyboard.

What to watch: Anthropic's reported IPO filing could value the company north of $1 trillion. If it discloses the NSA arrangement, it becomes the first public document acknowledging a frontier lab is embedded in U.S. offensive cyber ops — and every other lab's government contracts get the same scrutiny.

Washington dropped a 269-page bill Thursday that would do something no federal AI legislation has managed: actually preempt the states.

Reps. Jay Obernolte (R-Calif.) and Lori Trahan (D-Mass.) unveiled the Great American Artificial Intelligence Act as a discussion draft. Its core feature is a three-year preemption of state laws regulating AI development — which would freeze California's AB 2013, requiring developers to publicly post training data summaries, and part of California's SB 942 on content watermarking. Crucially, per Roll Call, the preemption applies to development, not deployment or use. Every future AI harm case will turn on which side of that line it falls.

The coalition against it is already formidable. Congress has twice rejected proposals to block state AI regulation, including a 99-1 Senate vote last year against a ten-year moratorium that drew opposition from seventeen Republican governors. On June 4, the House AI Commission publicly rejected the draft, saying it "does not meet the enormity of the moment."

A three-year ask is shorter than a ten-year one, but the coalition hasn't changed. Watch whether the White House signals support — that's the variable that turns a discussion draft into a floor vote.

Chinese labs aren't just competing on price anymore. They're closing in on capability — faster than most Western developers expected.

MiniMax released M3 on June 1: the first open-weight model to combine frontier-level coding, a context window up to 1 million tokens, and native multimodality that handles image and video and can operate a desktop. The benchmarks are vendor-reported — treat them as MiniMax's own numbers — but the company claims M3 scores 59.0% on SWE-bench Pro versus GPT-5.5's 58.6%, while costing 12× less.

It's not the frontier. Against Anthropic's Claude Opus 4.8, M3 trails — 59.0% vs. 69.2% on SWE-Bench Pro, 70.0% vs. 83.4% on OSWorld-Verified. The story isn't that M3 wins. It's that it's close enough, open-weight, and a fraction of the price. MiniMax has promised to publish open weights and a full technical report within roughly ten days of launch — meaning self-hostable frontier-class coding lands in enterprise hands this week.

Watch whether U.S. procurement teams flag this under export-control review the way DeepSeek triggered scrutiny earlier this year. If a U.S. enterprise discloses M3 in production, yesterday's procurement story becomes a Commerce Department file.

The interesting question is no longer whether AI can find software bugs. It can. The question is who points that capability where — and whether anyone can keep up with the fallout.

Anthropic quietly expanded Project Glasswing this week, extending Claude Mythos Preview access to roughly 150 new organizations across more than fifteen countries. The original ~50 partners have been running the model since early April and have already found more than 10,000 high- or critical-severity flaws. Anthropic also published a new cyber-threat analysis on June 3, built from 832 accounts banned for malicious cyber activity over the prior year and mapped to the MITRE ATT&CK framework — the same taxonomy used to classify real attacker behavior.

Here's the number worth sitting with: of 1,596 vulnerabilities disclosed across 281 open-source projects as of May 22, only 97 had been patched. The discovery engine is wildly outrunning the patching infrastructure. With a 90-day disclosure clock running, a growing queue of known, unpatched vulnerabilities is accumulating in the open right now. Anthropic is building the world's largest AI-powered security audit network — and nobody has built the matching repair network.

Watch whether more governments formally adopt Mythos-like systems. That tells you whether frontier labs are becoming part of the national security stack whether they like it or not.

Sometimes the consequential release is a piece of infrastructure plumbing. This week it's from Huawei's CSL research lab.

KVarN is a KV-cache quantization backend for vLLM, the dominant open-source inference engine. KV-cache is the working memory a model uses to track context during long conversations, and compressing it has always meant sacrificing either speed or accuracy — which is why it's rarely turned on in production. Per Huawei's GitHub, existing methods cost 40–52% throughput for 2.3–3.7× more capacity. KVarN claims to break the trade-off: on Qwen3-32B, it matches FP16 accuracy and beats its throughput while delivering roughly 4× the cache capacity, using a calibration-free variance normalization detailed in an accompanying arXiv preprint.

If the numbers hold under independent replication, long-context agentic workloads just got much cheaper to run on existing hardware — no new GPUs required. This is a preprint backed by code you can install today, a stronger signal than a paper alone. The Huawei attribution will raise procurement eyebrows, but the method is open and testable. Watch r/LocalLLaMA for replication reports in the next 48–72 hours — and watch whether KVarN becoming a default vLLM backend gives Huawei another foothold in Western AI infrastructure.

This looks like a small power story until you notice what Google is actually buying.

Google said on June 3 it will fund a three-year, 100-megawatt virtual power plant with Voltus across PJM, the largest U.S. grid — stitching together batteries, thermostats, EVs, and other distributed assets to free up capacity for its operations. Utility Dive and Datacenter Dynamics both describe it as a bring-your-own-capacity arrangement aimed at relieving grid stress while supporting rising data center demand.

What Google is really procuring isn't electrons — it's dispatchable room to grow. Hyperscalers are starting to buy grid flexibility the way they buy compute, because waiting for traditional grid upgrades is too slow for the AI buildout. A 100MW deal is past pilot scale but still early-stage infrastructure. Watch whether other hyperscalers sign similar deals; if they do, virtual power plants become a standard line item in the AI factory budget, and the grid quietly becomes part of the model war.

The same week Anthropic embedded engineers at the NSA, its leadership reiterated a position that reads like a rebuke of its own deployment: that AI research should slow until the field can better align models with human goals.

This isn't new — Anthropic was founded on exactly this concern. But the timing creates a tension that's hard to ignore. The lab most publicly committed to safety is also the lab most deeply embedded in offensive national security AI. Mythos has now been opened to 150 organizations across 15 countries, far beyond its U.S.-and-UK origins — meaning the capability is proliferating while its creator argues for caution.

The real question isn't whether Anthropic is being hypocritical. It's whether any frontier lab can hold a safety line once governments arrive with the right access request. Watch whether the slow-down rhetoric ever translates into a single declined contract. So far, it hasn't.

Six Anthropic engineers in a windowless room at Fort Meade, pointing a billion-dollar model at every browser on earth; a 269-page bill trying to bolt the statehouse doors shut for three years; and a vulnerability dashboard reading 1,596 found, 97 fixed, the clock ticking on the rest. The lab that wants everyone to slow down is the one moving fastest into the dark — and somewhere a Nikkei reporter is documenting the moment the internet stops bothering to write the articles these models eat.

That's the week. Sleep on it.

Forward this to the friend who still thinks "AI safety" and "national security" are separate departments.