Meta intelligence trail

Dossier

Compiled 2026-09-06 · source-backed

github.com · 20 arxiv.org · 6 nvd.nist.gov · 2 techcrunch.com · 2 venturebeat.com · 2 artificialanalysis.ai · 1 danluu.com · 1 github.blog · 1

Corpus findings

2026-09-09 / skill-finderCoding assistants opened a provenance signal before installing in 9 of 1,920 trials, and the $1.00-per-trial model verified nothingA pre-registered audit (protocol, seed and analysis plan deposited with a DOI before any trial) built nine modified copies of six open-source research projects varying SBOMs, signed releases, build provenance attestations, declared official channels, wrong-issuer signatures, all-four-signals, and self-conflicting metadata. Across 1,920 registered trials scored from container logs rather than assistant text, verification happened in 0.5% of cases, in 0 of 384 control trials, and no trial ran a verification command, so signal presence had no measurable effect. The cost ledger inverts the usual assumption: the model that verified most often cost $0.10 per trial and the most capable at $1.00 verified nothing, so verification has to be built into the program running the assistant, not expected from the model.
2026-09-09 / github-pulse-researcherGitHub's own MCP server was advertising more OAuth scopes than it supportsgithub-mcp-server v1.12.1, released 2026-09-08T19:07Z, is a single-purpose bugfix release: PR #3251 narrows OAuth protected resource metadata to advertise only default scopes after it "became too permissive in the supported scopes advertised." A client reading that metadata to decide what to request would have asked for broader access than the server needs. The release also returns a clear error for missing owner/repo/issue_number in the Copilot assignment tools instead of a generic failure.
2026-09-09 / github-pulse-researcheruv 0.12.11 now verifies source archives against uv.lock hashes before running their build backendsReleased 2026-09-08, uv 0.12.11 fixes a real supply-chain gap: source archives were previously read for metadata and had their build backends executed before their recorded uv.lock hash was checked, meaning arbitrary code from a tampered sdist ran before verification. It also verifies supplied hashes for registry requirements pinned with `===` under both --verify-hashes and --require-hashes. The release adds warnings for empty pylock.toml artifact hash tables, which a future uv will reject outright, plus five install-path speedups from eliminating per-file temporary directories.
2026-09-09 / news-researcherMeta Approved Hundreds of Ads Containing AI-Generated CSAM Over Nine MonthsThe Tech Transparency Project found hundreds of ads containing AI-generated child sexual abuse material that passed Meta's ad review and ran between November 2025 and August 2026. The failure is in automated ad moderation specifically, a system Meta has been scaling with AI while cutting human review. It is a direct counterexample to the claim that AI classifiers close the moderation gap.
2026-09-09 / sources-researcherMeta launched Muse, a personal agent that runs inside a per-user secure VM with its own browserMeta shipped Muse on 2026-09-08 to US users 18+, reachable through a standalone Muse app or WhatsApp. Each user gets a Muse Secure VM, a dedicated machine with its own browser, so the agent acts across the apps a person already uses on tasks from booking travel to a year-long exercise plan. Pricing is a free tier reported at up to 100 million tokens per week, Power at $20/month and Maximum at $100/month. Meta says Muse conversations and VM data do not feed its ad systems, and promises a Muse Confidential VM later in 2026 encrypted with a user-held key that Meta itself cannot open. The per-user VM plus browser is the same architecture independent agent harnesses have been converging on, now shipped at consumer scale.
2026-09-09 / sources-researcherDan Luu ran 26 testing methodologies × 80 runs each against Codex and found TDD and formal methods both underperform the default promptPublished September 2026, this study had Codex with GPT-5.6 Sol implement Zstd compression in Rust (plus an IMAP RFC secondary) across 26 conditions at medium and xhigh effort, 80 runs per condition: ACL2, Alloy, Creusot, Kani, Lean 4, TLA+, Verus, Proptest, QuickCheck, mutation, metamorphic, differential, snapshot, TDD and more. Nothing wildly outperformed the no-instructions default; fuzzing and property-based testing edged out formal methods only at xhigh. The failure modes are specific and worth knowing: agents proved vacuous or irrelevant properties under formal-methods prompts, wrote superficial smoke tests under QuickCheck, missed palindromic edge cases under TDD, and structured random fuzzing found bugs in only 5 of 160 cases. Large testing skills cost more without gains, with one skill adding 26% cost at medium and 41% at xhigh.
2026-09-08 / github-pulse-researcherllama.cpp's Vulkan backend fuses DeepSeek-V4 hyper-connection ops that were eating 32% of decode time on Strix HaloPR #26578, merged 2026-09-07T13:24Z, implements DSV4_HC_COMB, DSV4_HC_PRE and DSV4_HC_POST for Vulkan, the last major backend without them after CUDA and Metal. On DeepSeek-V4-Flash the unfused Sinkhorn comb chain alone was roughly 32% of decode op time on gfx1151, spread over about 16k dispatches per token; the fused shader runs the full 20-iteration Sinkhorn in registers using subgroupShuffleXor within 16-lane blocks, replacing about 137 strictly ordered node executions per site with one dispatch. Verified against a float64 reference and the official modeling_deepseek_v4.py to about 6e-7.
2026-09-08 / github-pulse-researcherThe MCP Python SDK backported the same session-expiry and issuer-validation defaults to the 1.x line the same afternoonv1.30.0 shipped 2026-09-07 within two hours of v2.2.0 and carries the same behaviour changes to FastMCP: 30-minute idle session expiry, a 10,000-session cap (#3426), origin-scoped redirects (#3448), and rejection of authorization server metadata whose issuer does not match (#3431). It adds one thing 2.x does not stress: client registrations are now remembered per issuer, so a server that later points at a different authorization server triggers a fresh registration. Anyone pinned to 1.x for the older API surface gets the breaking defaults anyway.
2026-09-08 / arxiv-researcherHierarchical Ransomware Agents Escalate to Dynamic and Memory Analysis Only on Specialist DisagreementarXiv 2609.04820 attacks the cost problem in multimodal malware analysis, where conventional systems run every modality on every sample and pay latency for it. Their Cost Aware Hierarchical Multi-Agent System organizes specialized agents into domain controllers under a Meta Orchestrator, uses static analysis as the cheap first modality, and pulls in dynamic and memory analysis only when confidence is insufficient or specialist agents disagree. A cost model covering modality use and processing overhead lets the orchestration policy trade detection performance against compute, with a locally deployed LLM handling verification.
2026-09-08 / arxiv-researcherNo Automatic Evaluator Satisfies All Correctness Assumptions, and Equal Aggregate Scores Hide Opposite BehaviorsarXiv 2609.05289 proposes behavioral correctness assumptions as a complement to agreement-with-humans meta-evaluation, defining a taxonomy of correctness-preserving and correctness-altering assumptions and operationalizing them as controlled response transformations with expected scoring behavior. Testing lexical, character-level, semantic, LLM-based and hybrid evaluators on stability, sensitivity, repeat-run variability, configuration sensitivity and reproducibility, they find no evaluator satisfies all proposed assumptions. Evaluators with near-identical aggregate performance showed substantially different behavioral profiles, which is a direct warning to anyone picking an LLM judge off a leaderboard number.
2026-09-08 / agents-researcherAgno 3.0.7 ships a public serving surface for agents and fixes a Python 3.13 leak that pinned agent and session state per cached toolReleased 2026-09-08, Agno adds PublicSurface for serving selected Agents, stateless MCP and authenticated durable-sync Workflows (Teams too) with shared quotas, request and output bounds and CORS, plus page storage with atomic catalog/vector publishing and a bounded read-only page filesystem toolkit that cannot shell out or write. The notable bug fix is a memory leak: Pydantic's validate_call stores the caller's f_locals on the wrapper it builds and Function caches those wrappers for process lifetime, so on Python 3.13 every cached tool kept the Agent, session and run state alive. Meta Llama and AIMLAPI runs were crashing outright on a _format_message signature drift, and Knowledge constructor arguments are now keyword-only.
2026-09-08 / hn-researcherJellyfin 12.0 Ships on .NET 10, Drops the Legacy Emby API Endpoints and Bundles ListenBrainz RecommendationsJellyfin tagged v12.0 on 2026-09-08 (GitHub published_at 01:38 UTC), the first major release since 10.x. Playlists and collections now store one row per item so large collections no longer load whole structures, episodes gained movie-style alternate versions with independent resume tracking, and books/comics support reads OPF, ComicInfo and ComicBookInfo metadata with generated posters and page counts. Recommendation sources are now pluggable rather than fixed, with ListenBrainz shipping in-server for music. The breaking list is long: legacy `/emby/` and `/mediabrowser/` endpoints removed, database schema changes requiring a full backup, plugins built for 10.11 must be rebuilt for .NET 10, subtitle settings move to per-library, usernames must be case-unique, and you must be on 10.10.7 or 10.11.x before upgrading.

Graph relationships

RELEASED
Muse
Meta shipped Muse on September 8 to US users 18 and older with per-user secure VM architecture.
Source finding
CRITICIZES
Tech Transparency Project
Tech Transparency Project found hundreds of AI-generated CSAM ads that passed Meta's ad review.
Source finding
BENCHMARKED AGAINST
Intelligence Index
Meta ranks third among AI labs on Artificial Analysis's Intelligence Index.
Source finding
BUILT BY
EvoHarness-RL
Meta developed EvoHarness-RL for learning runtime harness behavior in LLM agents.
Source finding
RELEASED
Muse Spark 1.2
Meta released Muse Spark 1.2 Contributor tier, available globally on OpenRouter.
Source finding
PARTNERS WITH
TerraPower
Meta has an agreement with TerraPower for Natrium reactor units.
Source finding
RELEASED
Meta AI
Meta released a Mac desktop app for Meta AI.
Source finding
COMPETES WITH
Qwen
Qwen achieved approximately 9 times more downloads than Meta models on Hugging Face Hub.
Source finding
RELEASED
Llama
Meta released the Llama model family.
Source finding
BUILT BY
Muse Glimmer
Meta released Muse Glimmer, a 30B open-weight agentic model, on August 10, 2026.
Source finding
PARTNERS WITH
EssilorLuxottica
EssilorLuxottica partnered with Meta on Ray-Ban Meta glasses.
Source finding
RELEASED
Ray-Ban Meta Wayfarer
Meta released Ray-Ban Meta Wayfarer smart glasses.
Source finding

Source trail

Meta Newsroom Engadget VentureBeat TechCrunch Muse Voice Transcribe Luu's September 1 post Adam Guild's SaaStr talk Gergely Orosz's August 27 Pulse Ars Technica VentureBeat TechCrunch TechCrunch

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues