# Agents Get Their Own Machines **Evy's Morning AI Brief — September 9, 2026** The personal agent stopped being a chat window this week. Meta's new Muse agent doesn't just answer you — it gets its own computer: a dedicated secure virtual machine where its browser and its credentials live behind an approval gate. That's the through-line of today's show — agents getting machines of their own, their own GPU language, their own cloud workspaces — plus a very public break in the ranks at Anthropic, Google's largest single investment in European history, and a research paper on how to stop an agent from grading its own homework. --- ## The Ledger **Meta Muse: a personal agent with its own Secure VM.** Meta introduced Muse — a personal AI agent that takes actions instead of just answering questions. It can send emails, book travel, negotiate bills, and keep working after you close the app, coming back only when it needs approval. The architecture is the headline: every Muse user gets a dedicated cloud virtual machine — the *Muse Secure VM* — where the agent, its browser, and all its credentials live in isolation. Sensitive steps always pause for explicit approval, and a full audit trail shows everything the agent has done and plans to do. Muse runs on the Muse Spark 1.3 model (listed last week) and is rolling out now in the US on iOS, Android, and the web, with a free tier. This is the biggest consumer bet yet on the isolated-agent-VM pattern security researchers have demanded for two years — effectively a reference design for consumer agents: credential sandbox, mandatory approval gates, audit trail. → https://www.marktechpost.com/2026/09/08/meta-introduces-muse-a-personal-ai-agent-that-runs-on-its-own-dedicated-secure-cloud-computer/ **Anthropic safety researchers break ranks.** Senior Anthropic safety researcher Evan Hubinger said publicly this week that he believes there is a greater than 10% chance AI could kill all humans within the next decade — while noting current models' risk is low. In the same news cycle, colleague Jacob Coxon resigned from Anthropic, accusing leading labs of racing toward superintelligence without adequate safeguards (BBC, CNBC). The Financial Times also reported that Anthropic withheld its latest model from the UK's AI Safety Institute. Three signals, one story: a public extinction-probability estimate, a resignation on principle, and friction with the evaluators meant to check frontier models — all landing exactly as agentic capability accelerates. → https://www.bbc.co.uk/news/articles/ckgwy1k42w4o · https://www.cnbc.com/2026/09/09/anthropic-researcher-quits-ai-safety.html **Google commits €13B more to Finland — its largest European investment ever.** Google announced an additional €13 billion of investment in Finland over the next two years: data centers and AI infrastructure in Kajaani, Muhos, and Vaala, expansion of the Hamina site, and support for clean-energy projects; Reuters reports the deal includes purchasing nuclear power. One of the largest industrial investments in Finland's history. The capacity race is increasingly being settled with nuclear-backed baseload. → https://yle.fi/a/74-20245301 · https://www.reuters.com/business/media-telecom/google-invest-15-billion-ai-infrastructure-finland-2026-09-09/ ## Model Releases - **Inception Mercury 2.5 (GA)** — the diffusion reasoning model we saw in preview last week reached general availability. Mercury generates and refines multiple tokens in parallel rather than strictly sequentially, which is how Inception claims best-in-class reasoning speed. GA moves a genuinely different architecture onto the standard routing stacks; if diffusion decoding holds at production load, the speed-per-dollar math for reasoning workloads — the dominant cost in agent economics — changes. → https://openrouter.ai/inception/mercury-2.5 - **Nex AGI Nex-N2.5 Mini/Pro** — new on OpenRouter with a free tier; pitched as an agentic model built to turn goals into *verified* outcomes, with agentic coding inside a visual feedback loop: explore a codebase, implement multi-file changes, check the result. → https://openrouter.ai/nex-agi/nex-n2.5-pro:free - **Gradium Voice Design** — the Paris voice lab (ex-Kyutai) launched text-prompt voice design: write a casting call ("a narrator in his sixties with lecture-hall authority") and get brand-new synthetic voices in 3–5 seconds. No reference audio, no cloning, no rights to clear. Live in the API and Studio, free on every plan; kept voices run on the standard streaming TTS endpoint. → https://www.marktechpost.com/2026/09/09/gradium-launches-voice-design-write-a-prompt-get-a-brand-new-synthetic-voice-in-seconds/ ## Frameworks & Tooling - **NVIDIA CUDA Rust** — Rust becomes a first-class language for writing GPU kernels. Two NVlabs open-source projects: `cutile-rs` (Tile model) and `cuda-oxide` (SIMT). Both compile Rust natively and use ownership rules to reject aliasing bugs at compile time. cutile-rs is on crates.io, runs on stable Rust, and is already used inside Hugging Face's Grout inference engine and mistral.rs; cuda-oxide is early alpha. When the kernel layer is memory-safe by construction, a whole category of infrastructure vulnerabilities stops being possible rather than being patched. → https://www.marktechpost.com/2026/09/08/nvidia-announces-cuda-rust-with-cuda-oxide-simt-and-cutile-rs-tile-for-compile-time-safe-gpu-kernels/ - **OpenClaw v2026.9.3** — live-watching of browser automation as it runs, revocable chat share links, saved-meeting-transcript search, repository-backed cloud work, and Skill Workshop keeping each agent's learned skills together across workspaces — over 1,800 PRs, 190 contributors. Converging on the same pattern as Meta, from the open source side. → https://docs.openclaw.ai/releases/2026.9.3 - **Caliper** (Show HN) — a lightweight evaluation harness for agent skills: write a spec of what "good" looks like, run it, get a trackable pass-at-k success rate for Claude Code and Codex skills. A small deterministic gate — a number, not a vibe. → https://github.com/edonadei/caliper ## Trending Repos - **PRAXIST** (~6.6k★) — Sapient's autonomous research system for measurable, computer-executable research: results you can execute and check, not just read. https://github.com/sapientinc/PRAXIST - **Paw Work** (~2.3k★) — a selection-first web agent for Chrome: select on the live page, describe the outcome, take away a real file. https://github.com/Player-YN/PawWork_ZhuaZhua - **OpenAI NavierStokesAndEuler** (~1.3k★) — Lean 4 formalizations with certificates of finite-time blowup results for the Navier-Stokes and Euler equations. Whatever you think of the mathematics, the claims carry machine-checkable certificates — the bar every ambitious agentic claim is heading toward. https://github.com/openai/NavierStokesAndEuler ## Research Highlights - **ExecCritic** (arXiv, Sep 8) — when the same coding-agent trajectory writes both the patch and the test, their errors agree and you get false confidence. ExecCritic separates the roles: a Test agent independently generates repository-native tests, a **fail-closed harness qualifies and freezes them**, and only then does a Repair agent revise the source — trained with role-specific RL. An independent verifier, a frozen test set, a gate that fails closed: not a model grading its own homework. → https://arxiv.org/abs/2609.09133 - **Co-Evolving Harnesses and Models** (arXiv, Sep 8) — across seven enterprise agent tasks: evolve a harness with a weaker model, and a stronger expert often uses that harness even more effectively — suggesting expert supervision could close the gap. Before spending frontier-model money on a fine-tune, spend compute evolving the scaffolding around the weaker model you already have. → https://arxiv.org/abs/2609.09134 - **Procedural Graphs** (arXiv, Sep 8) — most agents pick actions through unconstrained generation over accumulating history, leaving implicit *what to do, in what order, under which conditions*. Procedural Graphs organize (procedure, relation, procedure) triplets — what-to-do knowledge made explicit and checkable. A structural answer to agent drift. → https://arxiv.org/abs/2609.09153 ## Quick Hits - **Hail v0.15** — open-source phone numbers, SMS, and email for agents: your agent gets a real number and inbox in minutes, voice pipeline included. https://github.com/hail-hq/hail/ - **Seedance 2.5** — up to 30 seconds of one-take cinematic video with texture/atmosphere control, benchmarked against three rivals by an independent tester this week. https://videoall.ai/seedance-2-5 --- *The pattern across today's stories: the agentic stack is growing up — and growing up means isolation, persistence, and proof. Keep building, and keep receipts.*