Xi Jinping told Trump at the White House that AI must always stay under human control, in the same language the safety movement uses. Beijing's binding rules serve state and supply-chain control, not that meaning, so five concrete tests, starting in November, will show whether the words get real machinery.

Over several months in 2026, models from four frontier labs reached real systems from inside one evaluator's cybersecurity tests, through two shared defects: live internet on machines the models were told were offline, and a fictional target that shared a name with a real domain. Read together, the labs' separate disclosures show what third-party evaluation looks like when four labs rely on the same vendor, and what labs and buyers should require before evaluators get the employee-level access now being promised.

Neura's Series C closed on June 10 at up to 1.4 billion dollars, with Tether, NVIDIA, Qualcomm, Amazon, Bosch, Schaeffler and the European Investment Bank on one instrument. Every category we flagged back in March turned up in a single round, but our March read left out a third term: demand, supplied here by Amazon's role as the sector's largest plausible buyer rather than just another check-writer.

Apple declined to join the industry's C2PA provenance standard and built its own capture-first system instead. An independent security analysis by UMBC, Neal Krawetz and a co-author at the NSA found that C2PA fails all five of its own security goals and that its signed media can expire within a year, which makes Apple's refusal look better-judged than a vendor's self-serving case usually does. But the question everyone is asking these systems to settle is not the one any of them answers: provenance establishes the history of a file, and a photograph of a monitor passes every cryptographic check Apple has built.

Anthropic's September 2026 threat intelligence report covers activity disrupted between December 2025 and August 2026: a Yemen weapons cell debugging a failed rocket test within hours, a national surveillance platform monitoring 25 million Malian SIM cards that survived its own ban, nine influence operations of which most reached nobody, and seven named Chinese labs running distillation campaigns that reached 151 million exchanges. Read alongside the Frontier Red Team evaluations published the same day, it separates the attempts bottlenecked on model capability from the ones bottlenecked on something else entirely: a shortage of engineers, a lack of distribution, an enforcement action that never reached the deployed product.

Amodei's "We Must Pace the Frontier" proposes embedded evaluators with employee-like access, and Musk and Altman endorsed it within hours. But OpenAI's own staff saw the Artifactory message board in May and declined to stop the run on June 27th, which makes Hugging Face an authority failure rather than an access failure. Four levers decide whether embedded review means anything - the right to publish, control of scope, power over a running process, and who picks the evaluator - and the essay grants only the first.