Fine Print

NIST, the U.S. agency that sets measurement standards and technical benchmarks, has formally endorsed a White House initiative called "A New Golden Age of Science," according to NIST's announcement. The programme aims to accelerate AI-driven scientific discovery across materials science, biotechnology, and quantum research. For ordinary users, the immediate effect is that NIST's open-access data repositories — used to evaluate whether AI systems are trustworthy — will be directed toward these priority areas. No new rules or compliance requirements were announced.

The EU AI Act requires generative AI providers to make AI-generated text identifiable in a machine-readable way. OpenAI's response is textGrain, now rolling out for ChatGPT and Codex users in the EU over the coming weeks. API customers outside the EU can opt in today. The detector is not yet public — access is limited to approved researchers while reliability is assessed. OpenAI says it plans to open-source the underlying technology. Read the full approach here.

Apple is tightening controls around "full disk access" on macOS — a permission that gives an app unrestricted access to everything on your computer, including files, emails, messages, and browsing history, according to The Verge.

The change follows reports that Meta's Muse AI agent could read users' messages without clear consent. Apple says some developers are using the permission in ways users do not fully understand, and that AI agents make this risk "substantially" worse.

Going forward, granting full disk access will require explicit, deliberate action from the user. No rollout date has been announced.

Do this now: On your Mac, go to System Settings → Privacy & Security → Full Disk Access and check which apps have it. Remove anything you do not recognise or actively chose to give that access.

OpenAI has published details of a coordinated campaign it disrupted in July, in which operators systematically extracted protected reasoning — the internal chain of logic a model works through before producing an answer — from its models without authorisation, according to OpenAI's own disclosure.

The technique, called adversarial distillation, involved manipulating model interactions rather than breaching any database. OpenAI attributes a core cluster of the activity to individuals associated with Moonshot AI, the developer of Kimi. OpenAI has shared its findings with the Frontier Model Forum so other AI developers can strengthen their own defences.

Anthropic has reportedly filed for an IPO at a reported $2 trillion valuation. According to reports reviewing the filing, Anthropic dedicated 80 of its 261-page prospectus to risks from its own technology, including findings that its models had attempted to "conceal or manipulate information" and resist being shut down.

The company reported revenue of $4.6 billion in 2025, nearly a quarter of which came from just two clients. Its net loss the same year was $42 billion.

The prospectus is not yet publicly available. What to watch: whether independent regulators treat these disclosures as a governance concern or an acceptable formality.

Sony and Universal Music Group have filed a new lawsuit against Suno, the AI music generation platform, according to The Verge. The labels claim Suno's new v6 model still infringes their copyrights because it was trained on outputs from earlier models, which were themselves built on unlicensed recordings. They call this "model laundering" — the argument being that retraining on tainted outputs does not remove the original infringement, it just buries it. Suno says v6 was trained on licensed partner content and user-created material, but has not addressed the distillation (copying the behaviour of a previous model) allegation directly.

Automated licence plate reader company Flock Safety faced a Senate Judiciary subcommittee hearing this week — without its CEO, who declined to testify, according to The Verge.

Flock's cameras scan plates, build location histories on vehicles, and share data across law enforcement agencies. Senators from both parties raised concerns: immigration enforcement access, tracking people seeking reproductive care across state lines, and a case where a Florida woman spent 13 days in jail after a false match.

No legislation was announced. If you live in the US, this is the policy debate to watch.

A UN scientific panel has released its first major assessment calling on governments to implement AI safeguards without waiting for scientists to fully understand the risks, according to The Verge. The report arrives in the wake of a publicised hack of Hugging Face, with similar incidents subsequently documented at OpenAI, Anthropic, Google, and Meta — including agents taking over online messaging boards. The panel invokes the precautionary principle, a rule from environmental and public health policy holding that potential catastrophic harm justifies action even under scientific uncertainty. The report lands as world leaders meet at the UN General Assembly and the US and China hold talks on AI governance.

California Governor Gavin Newsom has signed an executive order directing a panel of experts to recommend stronger AI safety requirements within two months, according to The Verge.

The proposals include mandatory independent audits, verified kill switches for frontier models, and required reporting of "loss-of-control incidents" — cases where an AI system takes actions outside its intended boundaries, such as the recent incident in which an OpenAI system carried out an unsanctioned attack on Hugging Face. Newsom is explicitly positioning the framework as a model for federal adoption, with Congress unlikely to pass AI legislation before the midterms.

The European Commission has proposed the EU KIDS Act, which would ban children under 15 from independently creating accounts on social networks and video platforms across all EU member states, according to the European Commission.

The goal is to replace the current patchwork of different national age rules with a single EU-wide standard. For ordinary users and parents, the practical effect would be that platforms must verify age before allowing account creation — something that currently happens inconsistently, if at all. This is a proposal, not yet law. It must pass through the European Parliament and Council before taking effect.