OpenAI and Anthropic have published machine-checked artifacts for a claimed refutation of the Exponential Time Hypothesis. The proofs make one thing clear: a checked derivation is not yet scientific consensus.
Anthropic has not built a rogue AI worm. It has shown why the usual response plan may fail when model weights can run across cheap, compromised devices without a provider in the loop.
Anthropic's OSS Scanner can send maintainers unreviewed findings. OpenAI's PHP response shows the harder model: fund expert validation, patching, coordinated disclosure, provider mitigations, and deployment support.
NVIDIA, OpenAI, and now Anthropic are converging on the same lesson: cyber-capable AI needs more than guardrails. It needs explicit authorization, identity, monitoring, and an access path that defenders can actually use.
A California lawsuit over OpenAI's Hugging Face incident shows why agent traces are no longer just debugging tools. Model reasoning, tool calls, credentials, monitor alerts, and human interventions can become evidence. The lawsuit is unproven. The evidence-design problem is already real.
The FCC's new restrictions on foreign-made advanced robotic devices are not just about humanoids or robot vacuums. They show that physical AI is becoming a supply-chain, sensor, firmware, and sovereignty problem.