A privacy-and-local-first slant today: an MCP memory layer that syncs your context across every assistant, a teachable AI browser that works your tabs, a floating-window Mac utility, a browser-based lesson studio that never uploads, native Parasolid CAD for Mac and iPad, and enterprise-grade entity resolution that runs entirely on your machine with its own MCP server.
The frontier-access fight got real — the White House stood up a program to greenlight who can use new models — while UK safety testers pegged open weights at 4-7 months behind on cyber, DeepSeek V4 Flash ran on a single 5090, a German consortium teased a European open model, Gemini 3.5 Pro slipped over coding, Xi pitched open source, Beijing moved against AI romances, and Kimi K3 went live and started topping real evals.
The administration launched “Gold Eagle,” a frontier-AI cyber-vulnerability clearinghouse built on Carnegie Mellon SEI's VINCE and run jointly across Treasury, DHS and the Pentagon. It pools software-vulnerability findings from government and industry, uses frontier AI to rank the worst, and coordinates fixes across US critical infrastructure.
The bigger shift, per CNBC's sources: the program puts the White House in charge of greenlighting which companies can access new frontier models, folding in Anthropic's Project Glasswing and OpenAI's Daybreak so future rollouts need explicit government approval of partners. It's a direct extension of the Fable 5 and GPT-5.6 Sol export-control saga — the state stepping between the labs and their customers.
cnbc.com · r/singularity
![]()
UK AISI: open-weight models are now 4-7 months behind the frontier on cyber
The AI Security Institute updated its cyber-capability eval: leading open-weight models have narrowed to roughly 4-7 months behind the closed frontier, down from 6-10 months through most of 2025. GPT-5.6 Sol matched Mythos 5's best attempt (Mythos shipped ~3 months ago), and GLM 5.2 and DeepSeek V4 Pro were added to the field. Kimi K3 isn't tested yet — the open question is whether it lands at “Mythos class,” which would force a bigger government response.
![]()
DeepSeek V4 Flash runs on a single 5090 at 1M context
After recent llama.cpp changes, DeepSeek V4 Flash (Unsloth's ~162GB UD-Q8_K_XL GGUF) is now usable on one RTX 5090 plus system RAM by keeping attention, routing and KV cache on the GPU and offloading MoE experts to the CPU — ~650-700 t/s prefill, ~17 t/s decode, 32s load, at the full 1,048,576-token context, with the exact config shared. Decode is system-memory-bandwidth-bound and degrades at very long context, but it confirms V4 Flash is out and runnable at home.
![]()
Soofi S — a 30B European (German) open-source hybrid model
Soofi-S-Base is a 30B mixture-of-experts model with a hybrid Mamba-2 state-space + attention architecture (~3.5B active), from a German research consortium, trained on 25T tokens of English and German and pitched as a secure European alternative to US and Chinese models for industrial use. It's an unaligned base model in closed beta (needs post-training) — notable mostly for European AI sovereignty and the SSM/attention hybrid design.
![]()
Xi Jinping pushes open-source AI at the World AI Conference
Xi reaffirmed China's commitment to open-source AI — “China is ready to be more open” — framing openness as “win-win,” a pointed contrast with US labs' increasingly gated frontier models and the same-week White House access controls. It landed the day Moonshot's Kimi K3 topped Western open-weight releases and drew 1,400-1,600 upvotes across subreddits.
![]()
Update: Kimi K3 goes live, tops real-world evals, rattles AI stocks
Following yesterday's launch, Kimi K3 is live and immediately topping practical leaderboards — #1 on a Next.js coding eval, #1 on Text Arena science queries, beating Sonnet 5 on SimpleBench, and #3 on Artificial Analysis' Intelligence Index (ahead of Opus 4.8). Moonshot priced it at frontier rates ($3/$15 per M tokens), sparking r/OpenAI debate that “cheap Chinese AI” is over — and, per CryptoBriefing and Bloomberg, an AI/semiconductor stock selloff on revived DeepSeek-style fears about US infrastructure spending. Weights still due July 27.
![]()
Gemini 3.5 Pro delayed over coding performance
Bloomberg (via 9to5Google) reports Google delayed 3.5 Pro after a late-June training-data update hurt coding. It's now testing 3.5 Pro, an upgraded Flash model, and others with partners, with no new date — Gemini 3.1 Pro (February) stays the latest public version.
![]()
China moves to rein in AI romances
The Economist reports Beijing wants to curb AI companion apps over their impact on young people — a rare regulatory move against emotional-attachment AI, and another data point in the growing thread about people bonding with LLMs.
A practical, editing-first day: SenseTime's open model can now fix text inside a finished infographic and re-theme it, the community shipped its own “Krea 2 Edit” via identity and outpainting LoRAs, an all-in-one Flux.2 workflow tries to do every edit in one graph, and Google open-sourced a structured character format.
![]()
SenseNova U1-Infographic-V3 — in-place infographic text and style editing
SenseTime open-sourced SenseNova-U1-8B-MoT-Infographic-V3 (Apache 2.0, NEO-Unify unified understanding + generation). V3 adds localized in-place text editing — fix a typo in a chart label by marking the region or prompting, preserving the original layout and graphics — plus global style swaps that keep the data and structure but re-brand the visuals. It hits the “one design adapted for multiple brands” workflow directly; demos show curved-surface text warping with transparency and asset relocation.
![]()
The community built its own “Krea 2 Edit” — identity and outpainting LoRAs
Two rank-32 functional (not style) LoRAs for local Krea 2, filling the gap left by the missing official edit model. “ReID Reference” takes one identity reference and lets the prompt change clothing, pose, composition and background (Qwen3-VL image conditioning + clean VAE reference tokens, isolated reference attention, optional face crop); “Registered Outpaint” places a source image at explicit coordinates in a larger canvas and extends the rest with seam feathering. Ships weights, exact Diffusers pipelines and runnable examples — identity likeness is still imperfect, but the plumbing is real.
![]()
Flux.2 Klein Ultimate AIO Pro v4.0 — one workflow for every edit
An all-in-one ComfyUI graph for Flux.2 (Dev/Klein) that aims to cover the whole surface at once: text-to-image, image-to-image edit with any number of reference images, and edit-by-segment via manual masking, SAM3 auto-segmentation, or both — for inpaint, replace, swap and remove. No mask edits the whole image, one mask is crop-and-paint, multiple masks become separate segments; a lighter no-SAM3 version is included. Practical for local FLUX users tired of juggling a dozen workflows.
![]()
Google open-sources GNM, a structured character-description format
GNM (Apache 2.0) is a structured way to describe characters — body, face, hair, features — as a reusable base for consistent characters instead of endless prompt snippets. Honest caveat from the thread: it's research-oriented, closer to a FLAME/Daz3D-style morph system blending pre-scanned faces than a general prompt-consistency tool, but the open license makes it a building block worth watching.
A strong local-first, open-source haul: an agent-native database client with a built-in MCP server, a local audio Swiss-army app, window-pinned sticky notes, a multi-monitor Dock fix, fully local video captioning, a documented zero-exposed-ports homelab, self-hosted network discovery, Finder folder-size Quick Look, an auditable haptic-scroll utility, and a Claude Code notifier.
![]()
QoreDB — a local-first database client with a built-in MCP server
An open-source (Rust + Tauri, tiny binary, sub-second startup, offline, no telemetry) client with one consistent UI for 15+ engines: Postgres, MySQL/MariaDB, MongoDB, Redis, SQLite, DuckDB, SQL Server, CockroachDB, ClickHouse, Elasticsearch and more. The hook for this stack: a built-in MCP server so Claude, Cursor or any MCP agent can query your DBs read-only behind safety gates, plus AI cells and natural-language filters in notebooks, cross-DB federation, per-row Time Travel history, git-friendly migrations, and a shared CLI + self-hostable web server. Core is Apache 2.0; a few advanced features sit behind an optional one-time Pro license.
![]()
Trimr — every audio tool in one free, local Mac window
A native macOS audio Swiss-army app: trim, cut silence, normalize loudness, fade, change speed, join, split, make ringtones, convert. Drag in any audio file — or a video to pull its sound — and it all runs on your Mac with nothing uploaded. From twoplus11, the same indie shop behind Grabbr and Scrubbr.
![]()
Tack — sticky notes that pin to a window or folder, not the desktop
Free and open source. A note pins to a specific window, follows it as it moves, stays in bounds, and reappears when you return to that Finder folder, document or browser tab. A folder note is saved as a hidden .tack.json inside the folder (so it travels and syncs with it); browser notes stick to tabs in Chrome/Safari/Arc, Terminal notes to the tty, everything else keyed via the Accessibility API. Live markdown with clickable checkboxes and iA-Writer-style dimmed markers.
![]()
DockLift — click a Dock icon, get the window on the display you're using
A free, open-source multi-monitor fix: click a running app's Dock icon and DockLift moves its most-recently-used window to whichever display your cursor is on and brings it to the front. It can also restore minimized windows and lets you exclude apps you don't want managed. From jaywcjlove (the dev behind Keyzer); young repo, no license yet at time of posting.
![]()
Caption Comet — generate, edit and burn captions entirely on your Mac
A native Apple Silicon app for the full local captioning workflow: drop in a video or a whole folder and get back finished videos with social-style captions already burned in. Bundled Whisper models (no separate download), no account, API key, subscription or cloud. Word-level text and timing editing, word-by-word/karaoke highlighting, batch Quick Mode across mixed codecs, a detailed Project Mode editor, and SRT/VTT/ASS/TXT/MKV softsub exports. Free mode to test; one-time Lifetime Pro unlock for full-length exports without a watermark.
![]()
HavenStack — a fully documented, zero-exposed-ports homelab
An open-source (MIT) reference deployment: 7 Docker Compose stacks — Traefik + Authelia + Cloudflare Tunnel ingress, Nextcloud, Vaultwarden, the Servarr suite with VPN-killswitched qBittorrent, Prometheus/Grafana, Plex, Arcane. Not a one-click installer — it's the full config plus ~25 pages explaining why. Standouts: no exposed host ports (everything enters via Cloudflare Tunnel), a route-by-route “exposure matrix” documenting what's public vs LAN-only vs Docker-internal and which middleware protects each hostname, segmented networks with fixed subnets, and hardened containers. A strong blueprint given a Cloudflare Tunnel + *arr setup.
![]()
LAN Orangutan v3.0.1 — self-hosted network discovery for homelabbers
A single Go binary (MIT) that scans your networks via nmap and lets you discover, label and track devices from a clean web UI or CLI. v3.0.1 fixes “Scan All,” adds live background scan progress with cancel and time estimates, and automatic Tailscale peer discovery (reads tailnet peers directly, no subnet sweep, no elevated privileges). Persistent labels, multi-network, CSV export.
![]()
SpacePeek — folder sizes and largest files in Finder Quick Look
Select a folder, press Space, and see its total size, largest files and subfolders, file counts and a storage breakdown — drilling into subfolders without leaving Quick Look. Fast Rust scanning core, native SwiftUI, all local. macOS 14+, free with a one-time $1.99 unlock for unlimited drill-in.
![]()
Purrl — a free, auditable haptic-scroll alternative to Snick
Fires real pulses through the Force Touch Taptic Engine as you scroll, spaced by distance so it feels like a mechanical ratchet. MIT-licensed and built only on public AppKit APIs (NSEvent monitors + NSHapticFeedbackManager) — no private frameworks, no telemetry, no network code, fully auditable. brew tap rbc33/purrl. Needs a Force Touch trackpad, macOS 14+.
![]()
NotifyMe — get pinged the second Claude Code needs you
A small macOS app that alerts you the moment Claude Code needs input or finishes a task — handy for long agent sessions when you'd rather not babysit the terminal.
On Twitter today, Kimi K3 took over the timeline and shipped a free Claude Code clone, the security feed surfaced fresh RCEs and PoCs, agent skills and computer use went mainstream, Seedance 2.0 and Higgsfield turned AI video into an open pipeline, and frontier-class models kept showing up on desks instead of in datacenters.
