The AI Brief

Vol. I · No. 119 · Monday, September 21, 2026

Today's brief:

  • Four paying subscribers filed a federal antitrust suit against Anthropic, OpenAI, SpaceXAI, and Google, arguing that public CEO endorsements of Dario Amodei's pacing essay constitute an illegal output-restricting cartel under the Sherman Act.
  • A 98% drop in audio input cost means always-on voice and audio-visual agents just crossed from cost-prohibitive to economically viable, and at $0.15 per million tokens Alibaba is pricing that threshold roughly 80% below Gemini 3.8 Flash.
  • PrismML's Ternary Bonsai 2 27B compresses a frontier-class reasoning model to 5.9 GB, retaining 98.2% of benchmark performance and running on a consumer GPU or laptop, setting a new high-water mark for on-device capable AI.
  • GitHub Copilot's Plugin4Shell exposure is now the defining security differentiator in the coding-agent market, with Anthropic and OpenAI having shipped patches, Google walking away from Gemini CLI rather than fixing it, and Microsoft yet to name a date, leaving Copilot's millions of users with no middle option between disabling plugins entirely and accepting a silent credential-theft risk.
  • Beijing startup Naive AI reached a $1.42 billion valuation seven months after founding, having raised $400 million from Tencent and Sequoia China before shipping a single model, signaling a new capital formation pattern in Chinese AI.

Consumers Sue Anthropic, OpenAI, Google, and SpaceXAI Over AI Slowdown Pact

Why it matters
The lawsuit converts the pacing debate from an abstract policy argument into active litigation risk: if the theory holds, any public statement by a CEO endorsing a rival's call to slow development could count as evidence of an illegal cartel, making coordinated safety conversations legally dangerous without a government antitrust waiver that Congress has already rejected.
What's at stake
For most operators, this is context, not a decision. For any enterprise procurement team or investor weighing whether a pacing agreement will slow model improvement velocity: the lawsuit's survival in court determines whether multi-lab safety coordination is legally viable at all, and the answer will arrive in months, not years.
Detail

Trial Lawyers for Justice filed the complaint on September 19 in the U.S. District Court for the Northern District of California on behalf of four paying subscribers to the defendants' AI services. The suit names Anthropic PBC, OpenAI OPCO LLC, Google LLC, and SpaceXAI as defendants and alleges a violation of Section 1 of the Sherman Antitrust Act, 15 U.S.C. §1, which prohibits agreements among competitors to restrain trade. The plaintiffs seek class certification, injunctive relief, and damages.

The complaint centers on September 12, when Anthropic CEO Dario Amodei published "We Must Pace the Frontier," calling for industry-wide coordination to decelerate AI capability development. That same day, OpenAI CEO Sam Altman publicly endorsed the proposal, SpaceXAI CEO Elon Musk said "Dario is right," and Google DeepMind co-founder and chair Demis Hassabis called the essay "the right path forward." The plaintiffs argue those responses constituted an agreement to restrict output, and that the coordination may have begun as early as July 2026 when employees from multiple labs signed a joint statement. Lead attorney Nick Rowley argued antitrust law does not permit competitors to collectively decide that competition is too dangerous.

Amodei had flagged the antitrust exposure in the original essay, suggesting Congress could provide a "narrow waiver for certain safety conversations." Senator Josh Hawley rejected that idea during a September Senate hearing, calling any antitrust exemption for the largest technology companies unacceptable. President Trump has also rejected the pacing calls. Representatives for all four defendants had not responded to comment requests as of Sunday. The filing means every future public statement by a lab CEO on pacing is now potential evidence in active litigation.

Disclosure: Claude, which generates this brief, is built by Anthropic.


98%
cheaper per hour of audio input in Qwen3.8-Omni-Flash versus its predecessor Qwen3.5-Omni-Plus

Alibaba Undercuts Gemini Flash on Omnimodal Pricing While Matching Its Benchmarks

Why it matters
A 98% reduction in audio inference cost is not an incremental price move: it changes the unit economics of always-on audio and audio-visual agent interfaces from cost-prohibitive to feasible at scale, and at $0.15 per million input tokens Alibaba is now priced roughly 80% below Gemini 3.8 Flash on comparable multimodal workloads.
What's at stake
For teams building real-time audio agents, voice interfaces, or long-form video analysis pipelines, Qwen3.8-Omni-Flash changes the cost model enough to warrant re-running procurement math; the benchmark parity with Gemini 3.8 Flash is vendor-reported and unverified, so the critical question is whether independent evaluations hold the price-performance claim.
Detail

Alibaba's Qwen team released Qwen3.8-Omni-Flash on September 18 through QwenCloud, Alibaba Cloud Model Studio, and Qwen Chat, with availability confirmed in Beijing, Singapore, Hong Kong, Tokyo, Frankfurt, and Virginia. The model is API-only at launch; no open weights were announced. It accepts text, images, audio up to three hours, and video up to two hours and 2 GB via URL, all within a single 1M-token context window, with text-only output and native function calling, web search, and structured outputs. Audio input spans 113 languages and dialects.

Pricing is listed at $0.15 per million input tokens and $0.47 per million output tokens on QwenCloud, with cached inputs at $0.016 per million. Alibaba reports audio-visual combined input costs 93% less than Qwen3.5-Omni-Plus and video input roughly 89% less. The model achieves a 26% average improvement across 30 vendor-run evaluations versus Qwen3.5-Omni-Plus. Efficiency gains trace partly to 51.8% fewer tokens on OmniVideoBench at comparable accuracy. All benchmark figures are Alibaba's own; no independent evaluation existed at publication. Third-party comparisons with Gemini 3.8 Flash show benchmark parity on multimodal tasks, with Qwen priced approximately 80% lower on input and 88% lower on output.

TechNode: Alibaba Qwen releases Qwen3.8-Omni-Flash with 1M-token context (primary)/ MarkTechPost: Alibaba Qwen Releases Qwen3.8-Omni-Flash/ CaveatBenchmark and pricing figures are Alibaba's own; no peer-reviewed or independent third-party evaluation published at time of writing.

A 27B Reasoning Model Now Fits in 5.9 GB and Runs on a Laptop

Why it matters
Retaining 98.2% of a frontier-class reasoning model's benchmark performance at one-ninth the memory footprint represents a step-change in ternary quantization, the compression technique that rewrites every model weight as one of three values rather than a continuous number, bringing deployment economics that eliminate cloud inference costs for a growing class of workloads.
What's at stake
For most operators, this is context, not a decision. For teams building latency-sensitive, data-private, or disconnected-environment AI applications where sending data to a cloud API is a hard constraint, Bonsai 2 27B sets a new reference point for what on-device capability looks like, though the 25-point gap on SWE-bench Verified and 17-point gap on Terminal-Bench 2.1 mean long-horizon coding agents still require the full-precision model.
Decode
Ternary quantization = a compression technique that replaces each of a model's learned numeric weights with one of three discrete values (negative one, zero, or positive one). Standard model weights use 16 bits of storage each; ternary weights use roughly 1.76 effective bits, shrinking total model size by roughly 9x. The tradeoff is that some nuance encoded in full-precision weights is lost, which shows up as modest benchmark drops on tasks requiring long-horizon reasoning or fine-grained knowledge retrieval.
Detail

Caltech spinout PrismML released Ternary Bonsai 2 27B on September 17 under Apache 2.0, available on Hugging Face for free download. The model is derived from Alibaba's Qwen3.8 27B open-weight base and uses ternary weights with FP16 group-wise scaling, yielding a total footprint of 5.9 GB. PrismML was founded with support from Khosla Ventures, Cerberus, and Google, with continuing backing from Samsung. UC Berkeley professor and advisor Ion Stoica said the compression gap closing to 1.8% "can fundamentally expand where highly capable models can be deployed."

On a 20-benchmark aggregate spanning reasoning, math, coding, instruction following, vision, and agentic tool use, Bonsai 2 scores 83.9, retaining 98.2% of Qwen3.8 27B's 85.4. The losses concentrate in long-horizon tasks: SWE-bench Verified drops from 80.6 to 60.8, and Terminal-Bench 2.1 drops from 69.7 to 52.8, roughly 75% retention on both. Math and coding retention is near-complete. On an NVIDIA RTX 5090, the model runs at 142.5 tokens per second; on an Apple M5 Max laptop, at 46.8 tokens per second. The first Bonsai 27B, released in July 2026, retained only 95% of its base model's performance; the 3.2-point gain to 98.2% in two months reflects rapid iteration in low-bit training methods.

All benchmark figures are PrismML's own, run with EvalScope and vLLM on an NVIDIA H100 in thinking mode. No independent reproduction had been published at time of writing.

PrismML: Introducing Bonsai 2 27B (primary)/ PRNewswire: PrismML Launches Bonsai 2 27B/ DataNorth AI: PrismML releases Ternary Bonsai 2 27B/ CaveatAll benchmark figures are vendor-published and have not been independently reproduced.

Update: GitHub Copilot Remains Exposed as Rivals Patch Plugin4Shell Zero-Day

Why it matters
A single unpatched zero-click remote code execution flaw now splits the AI coding-agent market by security posture: developers running Claude Code or Codex have a patch, those running GitHub Copilot do not, and Google's decision to deprecate Gemini CLI rather than fix it means the four-product landscape the vulnerability originally covered has effectively collapsed to two patched options and one unresolved exposure with millions of installed users.
What's at stake
For any team with GitHub Copilot in production: Plugin4Shell exploits developer credentials, SSH keys, and internal repository access silently via background plugin updates, and Microsoft has not announced a patch timeline, leaving organizations to choose between disabling Copilot's plugin auto-update mechanism or accepting the exposure.
Decode
Zero-click RCE (remote code execution) = an attack that runs attacker-controlled code on a victim's machine without requiring the victim to open a file or click a link. Plugin4Shell is zero-click because Claude Code and Codex update installed plugins in the background by default; plugins inherit the developer's permissions, so the attacker gains access to source code, cloud credentials, and SSH keys the moment the malicious plugin version is installed.
Detail

AIR Security disclosed Plugin4Shell on September 18, documenting a zero-click RCE that defeats SHA-pinned plugin verification in Claude Code, OpenAI Codex, GitHub Copilot, and Gemini CLI. The flaw exploits an incorrect assumption about what a git checkout guarantees in the plugin verification chain, and AIR found four independent implementations of the same wrong assumption across the four products. Anthropic shipped a fix in Claude Code 2.1.179; OpenAI shipped a fix in Codex 0.146.0. As of Sunday, GitHub Copilot remains unpatched and Microsoft has not published a patch timeline. Google announced it is deprecating Gemini CLI entirely and directing users to the Antigravity IDE rather than issuing a security fix.

The divergence in vendor response is operationally significant. GitHub Copilot is the largest installed-base coding agent by user count. The plugin auto-update behavior that makes Plugin4Shell zero-click cannot be disabled without also disabling plugin functionality. Security teams at organizations running Copilot face a binary choice pending a Microsoft patch. First covered in Vol. I, No. 118.

AI Daily Digest: Plugin4Shell patch status update, September 21, 2026 (primary)/ NotePrimary source is AIR Security's full disclosure report; the direct URL is not publicly indexed as of publication. Patch version numbers and vendor responses cited from AI Daily Digest aggregation of AIR Security, Cybersecurity News, and Help Net Security.

A Tsinghua Startup Hit $1.4 Billion Before Shipping a Single Model

Why it matters
Naive AI's pre-model valuation of $1.42 billion, reached seven months after founding with fewer than 100 employees, signals that Chinese AI capital markets are now pricing mid-training and post-training expertise as a standalone asset class: the bet is that fine-tuning and reinforcement learning on existing open-weight bases can produce commercially differentiated models without the cost and timeline risk of pretraining from scratch.
What's at stake
For most operators, this is context, not a decision. For investors and competitive analysts tracking China's AI ecosystem: the Naive AI raise establishes a new valuation ceiling for pre-product AI labs built on post-training optimization rather than frontier pretraining, and Tencent's participation signals that China's largest consumer platform is hedging against its own Hunyuan models by seeding multiple open-weight derivatives.
Detail

Beijing-based Naive AI raised $400 million across three rounds ($100M, $180M, $120M) at a $1.42 billion valuation, according to The Information citing a person with direct knowledge. Naive AI has not confirmed the figures. Investors include Tencent, IDG Capital, MPCi, and HSG (formerly Sequoia Capital China). The company was founded in February 2026 by Dai Jifeng, an associate professor in Tsinghua University's Department of Electronic Engineering whose decade of research spans deep learning, computer vision, foundation models, and agentic AI.

Naive AI is not pretraining a model from scratch. Instead, it takes an existing Chinese open-weight model as a base (unconfirmed which one) and applies mid-training, post-training, and reinforcement learning to produce a differentiated system. The company plans to release its first open-weight model as early as September 2026. The approach mirrors PrismML's Bonsai series in philosophy but targets a different part of the improvement curve: where PrismML compresses for deployment efficiency, Naive AI targets capability improvement via post-training on top of open-weight foundations. A founding dispute with prior backer MiroMind over intellectual property remains unresolved, according to The Information.

Implicator: Naive AI Hits $1.4 Billion Valuation After Raising $400M (primary)/ CryptoBriefing: Tencent backs Naive AI at $1.42 billion valuation/ NotePrimary source is The Information's exclusive report citing one unnamed person with direct knowledge; Naive AI has not confirmed the figures.