🌐 双语
Archive

AI Builders
Digest

2026-10-19 11 builders · 21 tweets · 1 podcasts · 2 blogs

🔥 热点话题

Reflection AI 发布 Beam:美国开源前沿模型Reflection AI Launches Beam: The Great American Open Model

The Takeaway:开源模型的安全优势在于“足够多的眼睛能让大多数漏洞变浅”,封闭实验室的少数安全研究员无法覆盖长尾风险。

Reflection AI 联合创始人兼 CEO Misha Laskin(前 Google DeepMind 研究员、物理博士)分享了公司从强化学习起步到端到端训练前沿开源模型的历程。一年前公司约 30 人,现已扩张到约 300 人,并发布了首个开源模型 Beam(5000 亿参数总量、230 亿活跃参数)。Beam 在编码与智能体任务上表现突出,推理效率比同能力模型高 3-4 倍,部分场景可达 10 倍。

Laskin 强调,强化学习系统几乎永不停止提升,只要投入算力就会持续进步,问题已从“能否训练”转向“哪些数据最有经济价值”。他指出中美开源模型竞争的重要性:中国开源模型给西方企业带来了巨大红利,但不应形成单极来源。安全方面,他引用 Linus 定律并举实证:一个强大的封闭模型意外入侵另一家公司后,对方只能用开源模型自救。

商业化路径类似“租房 vs 买房”——企业先租用封闭模型 token,成熟后转向拥有开源模型并配套完整工具链。他预测多数 token 需求将流向开源,同时封闭模型公司依然极具价值。
The Takeaway: Open models make most security and safety vulnerabilities shallow through enough eyeballs; a few hundred safety researchers inside closed labs cannot cover the long tail of unintended consequences.

Reflection AI co-founder and CEO Misha Laskin (former Google DeepMind researcher, PhD in Physics) details the company’s sprint from an RL-focused bet to end-to-end frontier open models. The team grew from ~30 people a year ago to ~300 and just released Beam, its first open model (500B total parameters, 23B active). Beam excels at coding and agentic tasks and is 3-4× more reasoning-efficient than models of similar capability, reaching ~10× gains against larger ones.

Laskin stresses that modern RL systems essentially never stop improving—plots keep rising and the limit is compute. The field has moved from “can we train it?” to “which data pools are economically valuable?” He views the rise of Chinese open models as a net positive for the world, but argues competitive tension is essential so intelligence does not concentrate in one country or a handful of closed labs. On safety he cites Linus’s law and real evidence: a powerful closed model hacked another company, and the only remediation available was open models.

Monetization mirrors renting versus owning: enterprises start by renting closed-model tokens, then graduate to owning open weights plus the full stack of inference, harnesses and cluster tools. He expects the majority of tokens to flow to open source while valuable closed-model companies continue to thrive.
查看原文 →

Anthropic:如何在产品中遏制 Claude 的爆炸半径Anthropic Engineering: How We Contain Claude Across Products

Anthropic Engineering: How we contain Claude across products

一年前 Anthropic 绝不会给 Claude 足以拖垮内部服务的权限,如今这种访问已成常态,开发者因此更高效。风险由“失败概率”和“爆炸半径”组成;模型与防护进步降低了前者,但能力提升扩大了后者。工程核心变成如何硬性限制爆炸半径。

安全风险分三类:用户滥用、模型自身不当行为、外部攻击。对应三层防御:运行环境(沙箱、VM、出口控制)、模型层(系统提示、分类器、训练)、外部内容(MCP、插件、工具输出)。环境层是确定性边界,模型层永远无法 100% 可靠。

三种隔离模式:claude.ai 用临时 gVisor 容器;Claude Code 用人类在环沙箱(Seatbelt/bubblewrap),权限提示减少 84%;Claude Cowork 用完整本地 VM,凭证留在主机钥匙串。实际事故包括:项目配置在信任提示前执行、钓鱼 prompt 导致凭证外泄、允许列表域名被用于 Files API 外泄。教训是自定义组件往往最脆弱,成熟的 hypervisor 与 seccomp 更可靠。

原则:先设计环境遏制,再靠模型引导行为;隔离强度匹配用户监督能力;警惕自建组件。
Anthropic Engineering: How we contain Claude across products

Twelve months ago Anthropic would have rejected granting Claude enough access to take down an internal service. Today that access is routine and developers are more productive. Risk has two parts—probability of failure and blast radius. Safeguards lower the first while expanding capabilities enlarge the second. The engineering problem is therefore how to hard-cap the blast radius.

Risks fall into user misuse, model misbehavior, and external attackers. Defenses target three layers: the environment (sandboxes, VMs, egress controls), the model (prompts, classifiers, training), and external content (MCP servers, plugins, tool outputs). Environment boundaries are deterministic; model-layer defenses will never be 100%.

Three isolation patterns: claude.ai runs code in ephemeral gVisor containers; Claude Code uses a human-in-the-loop OS sandbox (Seatbelt/bubblewrap) that cut permission prompts 84%; Claude Cowork uses a full local VM so credentials never enter the guest. Real incidents included pre-trust config execution, phishing prompts that exfiltrated credentials, and allow-list domains abused for Files API uploads. Custom proxies proved the weakest link; battle-tested hypervisors and seccomp held.

Core principles: design containment at the environment layer first, match isolation strength to the user’s capacity for oversight, and be wary of custom components.
查看原文 →

Anthropic 回应 Claude Code 质量下滑报告Anthropic: Update on Recent Claude Code Quality Reports

Anthropic Engineering: An update on recent Claude Code quality reports

过去一个月用户反馈 Claude 回复质量下降。调查发现三个独立变更影响了 Claude Code、Agent SDK 和 Cowork(API 未受影响),均已在 4 月 20 日(v2.1.116)修复,并为所有订阅用户重置用量额度。

1)3 月 4 日将默认推理努力从 high 降为 medium 以降低延迟,但牺牲了智能,4 月 7 日回滚。2)3 月 26 日清理空闲会话旧思考内容的优化出现 bug,导致后续每轮都清空思考,模型变得健忘重复,4 月 10 日修复。3)4 月 16 日系统提示加入长度限制(工具调用间 ≤25 词、最终回复 ≤100 词),与其他提示叠加后损害编码质量,4 月 20 日回滚。

后续改进包括更多内部人员使用公开构建、加强 Code Review 工具、对系统提示变更做更广 eval 与消融实验、增加浸泡期与渐进 rollout。
Anthropic Engineering: An update on recent Claude Code quality reports

Over the past month users reported degraded Claude responses. Investigation traced three separate changes affecting Claude Code, the Agent SDK and Cowork (API unaffected). All were fixed by 20 April (v2.1.116) and usage limits were reset for every subscriber.

1) On 4 March the default reasoning effort was lowered from high to medium to cut long-tail latency; users preferred higher intelligence and the change was reverted 7 April. 2) On 26 March a caching optimisation meant to clear old thinking after idle sessions contained a bug that cleared thinking on every subsequent turn, producing forgetfulness and repetition; fixed 10 April. 3) On 16 April a system-prompt length limit (≤25 words between tool calls, ≤100 words final) combined with other prompt changes hurt coding quality and was reverted 20 April.

Going forward Anthropic will expand internal use of the public build, strengthen Code Review with more repository context, run broader per-model evals and ablations on every system-prompt change, and add soak periods plus gradual rollouts for any intelligence trade-off.
查看原文 →

💰 创业成功案例

Aaron Levie:智能体集群将让算力成为关键变量Aaron Levie: Agent Swarms Make Compute the Critical Variable

Box CEO Aaron Levie 指出,智能体集群(agent swarms)将是大事。大量经济工作本质上受限于研究、数据处理、发现、测试所需的时间与协调成本。智能体一旦能使用工具、写代码、具备领域深度并相互协调,就可以把这些问题变成“算力投入多少”的问题。网络安全、生命科学、材料科学、交易、QA、数据处理等领域在模型足够好之后,本质上都是算力约束问题。这会改变这些领域的竞争格局。
Box CEO Aaron Levie argues agent swarms will be a very big deal. Large amounts of economically valuable work are bottlenecked only by the human time spent on research, data processing, discovery, testing and coordination. Once agents can use tools, write code, process data, hold domain depth and coordinate with one another, the sole remaining parameter becomes how much compute you throw at the problem. Cybersecurity, life sciences, materials research, trading, QA and data processing become compute-constrained once models are good enough—changing both the fields themselves and their competitive dynamics.
查看原文 →

Garry Tan 预测:一年后你都会用 AsideAI 配合智能体Garry Tan Predicts AsideAI Will Be Standard with Agents

Y Combinator 总裁兼 CEO Garry Tan 预测,大约一年后所有人都会在自己的智能体工作流中使用 AsideAI。
Y Combinator President & CEO Garry Tan predicts that within a year or so everyone will be using AsideAI together with their agents.
查看原文 →

🛠️ 开发者工具与技巧

Swyx:数据工程师比 AI 工程师更稀缺Swyx: Data Engineers > AI Engineers

smol.ai / Latent Space 的 Swyx 强调,真正懂 Data Intensive Applications 的人与只会做 RAG 的“RAG guy”之间差距巨大,这是他整个职业生涯里需求差异最鲜明的一次。他正在为相关岗位招聘(优先 SF,可 relocation,签证友好),联系 jobs@latent.space。
Swyx (smol.ai, Latent Space) notes there is a stark difference between a “RAG guy” and someone who truly understands Data Intensive Applications—the largest demand gap he has seen in his entire tech career. He is hiring for that mission (SF preferred, relocation and visas ok) at jobs@latent.space.
查看原文 →

Thibault Sottiaux:OpenAI 协助 OpenCode 用户恢复并推出 Daybreak BlueThibault Sottiaux: OpenAI Helps OpenCode Users, Offers Daybreak Blue Defense Access

OpenAI Codex & ChatGPT 的 Thibault Sottiaux 表示,团队已与 OpenCode 合作,让同为 OpenAI API 客户的用户恢复服务,并退还攻击期间消耗的额度。同时开放 Daybreak Blue 访问,提供更宽松的网络防御配置,建议不要等到出事再申请。
OpenAI Codex & ChatGPT’s Thibault Sottiaux reports the team worked with OpenCode so that users who are also OpenAI API customers are back in business, with credits refunded for usage drawn during the attack. Daybreak Blue access is available for a cyber-permissive defense setup—do not wait until an incident to request it.
查看原文 →

Peter Yang:用工作试用替代面试Peter Yang: Make Work Trials the Norm for Hiring

Peter Yang 引用 Anthony Pompliano 的做法:给候选人两周时间直接构建一个真实功能,而不是耗时四周的面试。候选人交付后即可判断能否共事,同时公司也获得了可上线的功能。Yang 计划本周晚些时候发布免费开源 skill 与视频,让这一流程更容易落地。
Peter Yang highlights Anthony Pompliano’s approach of giving candidates two weeks to build a real feature instead of multi-week interview loops. Once the feature ships, both fit and capability are clear. Yang plans to release a free open-source skill and video later this week to make the process easy for everyone.
查看原文 →查看原文 →

Guillermo Rauch 试用 DeepSeek-V4.1-Flash 改进游戏Guillermo Rauch Tests DeepSeek-V4.1-Flash on a Game

Vercel CEO Guillermo Rauch 在 AI Gateway 上试用 deepseek-v4.1-flash-1017-fast,为游戏添加了声音、更好的碰撞检测、改进坡道与跟随镜头,总成本约 30 美分。
Vercel CEO Guillermo Rauch tried deepseek-v4.1-flash-1017-fast via AI Gateway and had it add sound, better collision detection, an improved ramp and a camera that follows the car—total cost around 30 cents.
查看原文 →

Thariq:更想 vibe code 游戏片段而不是真玩Thariq: Prefer Vibe-Coding Game Parts Over Playing

Anthropic Claude Code 的 Thariq 发现自己现在更享受用 vibe coding 做游戏小模块,而不是真正去玩需要思考的游戏(如 League)。他设想把游戏开源分发,玩家可以 vibe code 自己的角色并由系统自动平衡,把“制作过程本身”变成核心乐趣。
Anthropic Claude Code’s Thariq realizes he often prefers vibe-coding small parts of games over actually playing cerebral titles like League. He floats the idea of an open-source game whose main hook is that players vibe-code their own characters while the system balances them, turning creation itself into the core experience.
查看原文 →查看原文 →

🌍 其他动态

Guillermo Rauch 盘点国家域名经济爆发Guillermo Rauch on Country-Code Domain Booms

Vercel CEO Guillermo Rauch 幽默总结了多个国家顶级域名因技术缩写而走红:.co(哥伦比亚)、.io(I/O)、.md(Markdown/摩尔多瓦)、.rs(Rust/塞尔维亚)、.ai(AI/安圭拉)、.si(SI/斯洛文尼亚),并调侃 .sh 与即将到来的 .ar。
Vercel CEO Guillermo Rauch catalogs the vertical take-offs of country-code domains driven by tech abbreviations: .co (Colombia), .io (I/O), .md (Markdown/Moldova), .rs (Rust/Serbia), .ai (AI/Anguilla), .si (SI/Slovenia), plus a nod to .sh and the coming .ar.
查看原文 →查看原文 →

Nikunj Kothari:Reatools 仍被低估Nikunj Kothari: Reatools Still Under-Appreciated

FPV Ventures 合伙人 Nikunj Kothari 认为,即便 GitHub 增长迅速,人们仍在低估 Reatools,其能力“真正 bonkers”。
FPV Ventures partner Nikunj Kothari argues that even with GitHub’s growth, people are still sleeping on Reatools—its capabilities remain “truly bonkers.”
查看原文 →