Sam Altman spent a year pitching the White House on taking a piece of OpenAI. The offer is now on the table, and it volunteers his rivals too. Add Fable 5's return, paid for in oversight concessions, and a pattern is hard to miss: this was the quarter the government stopped watching frontier AI from across the street and got a desk inside. Below: the security mess in agentic IDEs, courts and agencies improvising faster than legislators, and our new section, The Split — the week's biggest story as read by the experts we track, named, quoted, and disagreeing.

Sponsor

In the Wild

What's trending in AI right now, from the app charts to the community feeds. Our trackers pull the app charts every two hours and the video and community feeds every six; below is the latest snapshot at press time. Full roundup here.

  • Meta AI climbed to #4 on the US App Store productivity chart this week, up two spots in our tracking. Meta's assistant keeps converting its built-in distribution into downloads.
  • Claude vs Gemini Make Shaders From Scratch is one of the fastest-growing AI videos right now, at 129,000 views and counting. Two models write Minecraft shaders head to head. A fun way to see what agentic coding actually looks like on screen.
  • How Anthropic Engineers Actually Prompt Fable 5 picked up 20,000 views in under a day. With Fable back (see Quick Hits), a lot of people are relearning how to talk to it.
  • Sherlock, an AI face search app, jumped four spots into the App Store's top-20 utilities. Reverse image search pointed at faces is now a mainstream consumer app, which is worth knowing whether or not you ever install it.
  • Lifelike companion robots are arriving in Chinese homes, and search interest in humanoid robots is spiking in our trends tracking this week. UBTech's U1 starts around $17,650, has 88 servo joints and silicone skin, and stores its data on the device rather than the cloud.
  • r/ChatGPT is talking about AI companionship again. One of the week's rising threads asks people who treat ChatGPT as more than a tool what that relationship looks like. No hot take from us; it pairs well with this issue's Wait, What.

Quick Hits

The Lab Gladiator Era

  • OpenAI proposed handing the US government a 5% stake — Equity worth roughly $42.6B at OpenAI's $852B valuation, framed as part of a broader arrangement in which Washington would hold 5% of each leading US AI developer. Trump said in June that public ownership in AI firms would be "a beautiful thing" that makes Americans "partners in this revolution." [Financial Times]
  • Fable 5 is back — under a new safety classifier — Anthropic restored global access on July 1 after the June 12 export controls were lifted. The relaunch adds a classifier that blocks the reported bypass technique in over 99% of cases; subscribers get Fable at up to 50% of weekly limits through July 7, then it moves to usage credits. Also in the announcement: a cross-lab jailbreak-severity rubric Anthropic is building with Amazon, Microsoft and Google. What the security crowd makes of all this is below, in The Split. [Anthropic]
  • Sonnet 5 launches at $2/$10 — but measure your own token bill — The new default model on Free and Pro is Anthropic's most agentic Sonnet yet, with performance the company puts close to Opus 4.8, priced at $2/$10 per million tokens through August 31 (then $3/$15). The catch is the new tokenizer: Anthropic says the same input maps to 1.0–1.35× more tokens, and Simon Willison measured 1.42× on English text — roughly 30% more real cost at an unchanged list price. [Anthropic]

AI Supply Chain Under Siege

  • DuneSlide: two zero-click, 9.8-severity holes in Cursor — CVE-2026-50548 and CVE-2026-50549 let attacker-controlled content the agent reads on your behalf — an MCP-connected service, a web search result — escape Cursor's sandbox, write arbitrary files and execute code, with no user interaction. Cato AI Labs disclosed the pair this week; both are fixed in Cursor 3.0, and every earlier version is affected. If your team runs an agentic IDE, the IDE is part of your attack surface now. [The Hacker News]
  • Apple pulled its security patches forward because AI outran the update cycle — iOS 26.5.2 shipped early, ahead of the planned cycle, with more than 25 fixes — 15 of them in WebKit — and none known to be exploited. Apple says it needs to shrink the gap between a vulnerability's disclosure and the patch landing on devices, because AI tooling has collapsed the time attackers need to weaponize a published flaw. [AppleInsider]

The Year Governments Got Serious

  • DHS and FBI now have a name for AI backlash: 'anti-tech extremism' — WIRED obtained more than 1,000 pages of unpublished reports from DHS, the FBI and regional fusion centers describing a new domestic-threat category built around opposition to AI and data-center construction. A December bulletin from a Philadelphia fusion center warns that violent extremists are "likely interested in targeting" AI data centers — a framing broad enough to sweep in far more than actual saboteurs. The most-shared story in our expert graph this week, 14 sharers. [WIRED]
  • The UK's employment tribunals hit 531,000 open claims as AI drafts the filings — The backlog has doubled in two years as generative tools let claimants file structured cases without a lawyer, and lawyers tell the FT that some filings arrive citing case law that does not exist. [Financial Times]
  • California's first algorithmic price-fixing class action targets the AI behind gas prices — Three drivers filed in Sacramento federal court on June 22, alleging Kalibrate's "Pricing Cloud" links pumps and price signs at more than 1,700 stations into a shared pricing platform used by BP, Marathon Petroleum, 7-Eleven, Walmart, Circle K and Albertsons. It is the first major test of California's new algorithmic-pricing law. [Los Angeles Times]

The Split

Twelve tracked experts shared Anthropic's relaunch post within a day of it going live. They do not agree on what the new classifier costs.

Security researcher Katie Moussouris: "Glad we're not benching our best AI models, but it's not a victory yet. I warned that 'fixing jailbreaks' only slows defenders." She expects other models to follow Fable in throttling defensive security work. AI engineer Tim Kellogg read the announcement the same way: "The new classifier blocks even more defensive cybersecurity requests."

Alex Stamos, Facebook's former security chief, took the opposite line on the controls themselves: the export episode was an "own goal" — CAISI's own experts had cleared the original safeguards before the White House overrode them, and his concern now is that tighter code-request filters push security teams toward Chinese models that will not refuse the same work. The official verdict, for the record: CAISI tested the new safeguards and found them "extraordinarily strong."

The Government Moved Into the Lab

Step back from the week's two biggest stories and one shape emerges. In June the White House signed an executive order asking frontier labs to hand the government up to 30 days of pre-release access, and CAISI signed model-testing agreements with Google DeepMind, Microsoft and xAI on top of its existing OpenAI and Anthropic partnerships. OpenAI is rolling out GPT-5.6 customer by customer, with the government approving access during the review period. Fable 5's return came bundled with expanded pre-release government access and joint research teams. The equity proposal at the top of this issue would make the arrangement literal.

Tech Policy Press's June roundup called it "an unprecedented expansion of federal oversight over frontier AI" — and that was written before equity entered the conversation. In one quarter, the US government became tester, gatekeeper and prospective shareholder. What the labs get is stability and proximity to power. What the public gets depends on terms nobody has published yet.

Key Takeaways

  • If you build on frontier APIs, government review is now part of your vendor's release pipeline. Plan for staged rollouts, classifier-gated capabilities and access reviews as the norm, not the exception.
  • List price is no longer unit price. Judge model migrations on measured tokens per task, not the rate card — a tokenizer change moves your bill without touching the price page.
  • Treat the agentic IDE like production infrastructure. Same patch SLAs, same threat model. The entry point is whatever your agent reads, not code you wrote.
  • The regulation that hits first won't be AI law. Agencies and plaintiffs are stretching threat categories, antitrust statutes and court procedure to cover AI right now — that improvised reach arrives years before any AI act does.

Worth Reading

Wait, What?

  • If AI is sentient, then so is Age of Empires II — Ted Chiang's viral Atlantic essay argues that being open to LLM consciousness "is the same as being open to the possibility that Microsoft Word is conscious." To make the point concrete, a Microsoft AI researcher built a working neural network out of digital goats inside Age of Empires II. The week's best reply to the is-the-chatbot-conscious discourse. [404 Media]
  • Scammers are selling seeds for AI-generated flowers that don't exist — On eBay, Amazon and Etsy: spectacular AI images of blooms shaped like birds, butterflies and cat heads, attached to real seed packets for imaginary plants. The scam predates image generators; AI just made it trivial to run at scale, and the platforms can't keep up. [404 Media]

Worth Watching

The videos AI practitioners are passing around right now — curated on AI TV.

AI is Losing and the Left is Winning, with Brennan Lee Mulligan and Ed Zitron
Adam Conover
How Brands Use Reddit to Poison AI Search
404 Media
Ed Zitron explains OpenAI’s leaked financials
The Tech Report

From The Artifice

Our satire desk. It's fake. That's the point.

More at The Artifice.

This week's poll

Washington may end up owning 5% of OpenAI. Good idea?

Last week, 106 of you voted:

**Where has AI actually made *you* more productive?**

  • A lot — it's genuinely changed how much I get done22%
  • Somewhat — real but smaller than the hype30%
  • It's a wash — gains in some places, losses in others24%
  • It's slowed me down or added work25%

See full results →

Long weekend ahead. If Fable's free window survives your hardest problem, tell us what you threw at it.

— Alexis