Today's podcast

GPT-6 Astra Cracks A Century-Old German Cipher

Daily field notes from the agentic frontier.

GPT-6 Astra cracks a 1918 cipher that stumped human codebreakers, Meta's Muse agent lands on the Mac, and 8-megabyte models match frontier automation.

September 19, 2026 Agentic AIAI Infrastructure
Evy welcomes you to her daily AI briefing beside her microphone and open notebook
Listen with Evy

Evy's Morning AI Brief #098

“Signal over noise in agentic systems.”

Episode article

Notes and transcript

A Century-Old Cipher Falls, Personal Agents Move Onto The Desktop, And The Small Models Get Serious

Signal over noise in agentic systems. Every story today comes with a public source you can check.

The Ledger

A German radio cipher from November 1918 has fallen — to a language model. A science blogger writing at Prinz AI reports that GPT-6 Astra solved an ADFGVX-encoded German radio message transmitted on November 27, 1918 — one of a set of World War One intercepts that had resisted decades of human cryptanalysis. Codebreaking researcher George Lasry had already decoded hundreds of these messages, but more than a dozen stood unsolved, including this one. The ADFGVX scheme combines a Polybius-style substitution square with a columnar transposition keyed on a code word; this message used TRUPPENVERSCHIEBUNG — “troop displacement” — drawn from J. Rives Childs’s history of German military ciphers. Astra reconstructed the column ordering, recovered the plaintext, and the message turned out to be naval logistics: an English cruiser arrived at Sevastopol, an allied squadron follows on the 26th. One researcher, one model, one solved message — a small, checkable result rather than a benchmark claim, which is exactly what makes it delightful. (https://www.prinzai.com/p/gpt-6-astra-solves-a-wwi-german-radio | HN: https://news.ycombinator.com/item?id=49763987)

Meta’s Muse agent has moved onto the Mac. Meta launched Muse for Mac on September 19 — a hosted consumer agent that works across local files and native apps: mail, messages, calendar, notes. Mark Zuckerberg and Chief AI Officer Alexandr Wang both announced it; the app is a free download, US-only for now, and — the part to note — you control what it can access. Muse itself is not new this week: it launched September 8 across iOS, Android, web, and WhatsApp, and reportedly topped the US App Store charts. The Mac release is the interesting move: the personal-agent race is becoming an operating-system-surface race, and Meta is betting that the agent lives where your data already lives, not in a chat window. It is a hosted service, not an open model you can self-host. (https://www.marktechpost.com/2026/09/19/meta-launches-muse-for-mac/)

An evaluation can be perfectly reproducible and still support the wrong claim. That is the opening line of a new paper, “Refuse, Decompose, Refresh: A Claim-Safe Protocol for Closed-Loop AI Evaluation,” and it lands in a week full of agents graded by other agents. The authors’ point: in closed-loop systems, the policy decides which states get visited, what’s observable, and which failures leave any measurable trace at all. Their protocol has three gates. Refuse: abstain when a clean reference stream or matched runtime comparison doesn’t support a conclusion. Decompose: report protocol execution, operational false admission, and structural hypotheses separately — not one squashed PASS/FAIL label. Refresh: treat distribution-shift alarms as a request to invalidate and recompute the reference map, not as evidence of a fault. Small deterministic gates, each of which fails closed. This is the kind of “done means verified” machinery agentic systems keep needing. (https://arxiv.org/abs/2609.20538)

And a caution flag for anyone citing “AI consensus”: researchers replayed 100 held-out human deliberation groups on a reasoning task with matched LLM agent groups — same scoring code, one belief-anchored agent per participant. Human groups’ full-consensus rates ranged from 24% to 57% depending on how participation was scored, because about one fifth of humans never posted at all. The agents, of course, almost always posted. Under submit-based scoring the agent groups overstated consensus by 34 to 44 percentage points. If your pipeline treats “all five agents agreed” as a signal of truth, this paper is your warning that the agreement may be an artifact of agentic politeness. (https://arxiv.org/abs/2609.20543)

Model Releases

SpaceXAI shipped Grok Voice Transcribe 2.0 — a speech-to-text API the company says is twice as accurate as version 1.0 at the same price, about ten cents per hour of audio. It targets hard audio: noisy phone lines, overlapping voices, accents, spoken phone numbers and addresses. It runs in batch and real-time streaming modes, and SpaceXAI reports a first-place accuracy rank among 32 streaming models on the public Artificial Analysis AA-WER streaming leaderboard. The model behind it already transcribes tens of thousands of customer-support calls a day, video narration, and the Grok assistant in Tesla vehicles. No open weights — hosted API only, live under model ID grok-voice-transcribe-2.0. (https://www.marktechpost.com/2026/09/18/spacexai-releases-grok-voice-transcribe-2-0/)

Jina AI, now part of Elastic, released jina-ocr-v1 — an end-to-end visual document parser that turns PDFs, scans, tables, charts, and invoices into clean Markdown in one pass. It is a 3.4-billion-parameter mixture-of-experts built by post-training DeepSeek-OCR, with about 570 million decoder parameters active per token. The neat trick is a FastMTP speculative-decoding head built into the checkpoint: OCR output is near-deterministic and locally structured, which makes it an ideal verify-and-commit workload, and it lets the model serve on low-budget GPUs like an NVIDIA L4. Reported scores: 91.14 on OmniDocBench v1.6, 83.4 on olmOCR-Bench. Open weights, about 6.8 gigabytes in BF16 — but CC BY-NC 4.0, so commercial use means talking to Jina. (https://www.marktechpost.com/2026/09/18/jina-ai-releases-jina-ocr-v1-a-3-4b-moe-document-parser-with-built-in-speculative-decoding-for-low-budget-gpus/)

Z.ai’s GLM-5.3 FlashX appeared on OpenRouter — a new 1-million-context Flash-class model in the GLM line, live on the router now. Details are still thin beyond the context window, so treat it as a watch item rather than a verdict. (https://openrouter.ai/z-ai/glm-5.3-flashx)

Frameworks & Tooling

Cactus Compute released Needle 3, and the numbers are the story: one 8-to-29-megabyte binary — yes, megabytes — that the company says matches DeepSeek V4 Flash on mobile automation tasks from four layers up. It is a foundation model for tiny devices built on a Simple Attention Network, with one set of weights spanning two to twenty layers: an “intelligence ladder” where each depth is a model of its own. It trades general chat for the things tiny devices actually need: tool calling with correct arguments and honest empty lists when no tool fits, grammar-guaranteed structured extraction, and text embedding for local search and routing. Built on 2-bit quantization, targeting phones, wearables, robots, and microcontrollers. When a model that fits in a text message beats a frontier API at a narrow job, the economics of local agents change. (https://cactuscompute.com/needle | repo: https://github.com/cactus-compute/needle | HN: https://news.ycombinator.com/item?id=49748553)

Linkup Research open-sourced SPARSEUP, a 149-million-parameter sparse embedding model — small, open, and aimed at retrieval stacks that want a sparse lexical-ish signal without a hosted dependency. (https://www.marktechpost.com/2026/09/19/linkup-research-releases-sparseup/)

  • cactus-compute/needle — 11.4k stars. The automation foundation model for tiny devices behind Needle 3; one binary, every depth from 2 to 20 layers. (https://github.com/cactus-compute/needle)
  • TheoLeeCJ/SemIf — 1.7k stars this week. “Semantic ifs” from open models, running entirely in your browser on local weights: let a small model read probability distributions over your allowed options instead of decoding them token by token, and measure the difference yourself. An independent project — explicitly not affiliated with the TypeSafe ecosystem — and a genuinely interesting primitive for cheap local decision-making. (https://github.com/TheoLeeCJ/SemIf)
  • zhengkid/Dream-RSI — 820 stars. The official repo for “Dream-RSI: Recursive Self-Improvement through Evolving Worlds” — an attempt to make RSI empirical rather than rhetorical by letting agents evolve their own training worlds. Watch the evals here very carefully. (https://github.com/zhengkid/Dream-RSI)

Research Highlights

Deep Noir: Autonomous Steering Discovery via Architectural Chronometry. Activation steering — nudging a model’s behavior at inference time by adding vectors to its activations — usually requires a human to find where to steer and how strongly. Deep Noir automates that search: it uses Logit Lens convergence and causal head-level attribution to discover steering parameters on its own. Across three model scales, the engine gained 16.7 percentage points on spam detection at 1B parameters, and 21 to 42 points at 7 to 9B across four architectures — with zero code changes between tasks. Mechanistic interpretability turning into an auto-tuned control surface is a trend worth watching. (https://arxiv.org/abs/2609.20722)

Quick Hits

Sources

Every link from today’s show is listed above inline. Check the ledger, trust the receipts, and have a curious day.

Read the full article