<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="3.10.0">Jekyll</generator><link href="https://blog.aaronx.co/feed.xml" rel="self" type="application/atom+xml" /><link href="https://blog.aaronx.co/" rel="alternate" type="text/html" /><updated>2026-08-19T11:10:29-07:00</updated><id>https://blog.aaronx.co/feed.xml</id><title type="html">The Daily Downlink</title><subtitle>A systems engineer&apos;s daily read on AI. Two or three stories that matter, one clear take on each.</subtitle><author><name>Aaron Cohen</name></author><entry><title type="html">Small weights, lost keys, and the last clean text</title><link href="https://blog.aaronx.co/2026/08/19/small-weights-lost-keys-and-the-last-clean-text/" rel="alternate" type="text/html" title="Small weights, lost keys, and the last clean text" /><published>2026-08-19T09:00:00-07:00</published><updated>2026-08-19T09:00:00-07:00</updated><id>https://blog.aaronx.co/2026/08/19/small-weights-lost-keys-and-the-last-clean-text</id><content type="html" xml:base="https://blog.aaronx.co/2026/08/19/small-weights-lost-keys-and-the-last-clean-text/"><![CDATA[<p>There was no new frontier-model launch this week to argue about, which turns out
to be the point. The three stories that actually moved the needle are all about
where capability now lives instead of in the headline. A 27B open-weights model
matched the flagship composite scores. Google measured frontier models encoding
almost every fact they can’t recall. And the remaining clean training text turned
out to be physical — sitting in warehouses where workers cut books apart to scan
them. None of this is a benchmark headline, which is exactly why all three are
worth a read: the interesting questions are moving below the leaderboard, to what
a query costs, how a model gets at what it knows, and where clean data comes from.</p>

<h2 id="when-a-27b-model-ties-the-flagship-the-leaderboard-stops-being-the-interesting-object">When a 27B model ties the flagship, the leaderboard stops being the interesting object</h2>

<p><strong>What happened.</strong> Qwen 3.8 27B scored 52 on the Artificial Analysis Intelligence
Index — the same as GPT-5.6 Luna (max), one point behind GLM-5.2 (max, 753B) and
DeepSeek V4 Pro 0813 (1.7T). It’s Apache-2.0, it’s vision-capable, and it runs on
a laptop-class machine. Simon Willison calls it astonishing while noting it
“defaults to wildly overthinking things.”</p>

<p><strong>Why it matters.</strong> At roughly a sixtieth of the parameter count, the headline
number is the least interesting part. Small open weights change the deciding
variables for a workday problem from capability to per-query cost, latency, and
self-hosting. And that “wildly overthinking” default is the production tax that
score tables never show: a 27B that reasons too long on every prompt eats back
the latency and throughput budget you saved on the weights. Once the model is
this cheap, the question flips from “can it do the job” to “can it do the job
inside my latency and cost envelope, and can I stop it thinking when that’s all
it’s doing.” Score parity at this size is a routing decision — throw the easy
queries at the 27B and keep the flagship for the long tail, provided the
overthinking doesn’t eat the savings. That’s the operator’s read, and it’s the
whole story.</p>

<p><em>Source: <a href="https://simonwillison.net/2026/Aug/17/qwen-38-27b-scores-52/">simonwillison.net</a></em></p>

<h2 id="frontier-models-dont-forget-facts--they-fail-to-find-them-so-fix-the-retrieval-not-the-parameters">Frontier models don’t forget facts — they fail to find them, so fix the retrieval, not the parameters</h2>

<p><strong>What happened.</strong> Google Research’s knowledge-profiling framework measures
encoding and recall separately and applies it via WikiProfile, a benchmark of
2,150 Wikipedia-derived facts. Across the frontier models tested, 95–98% of facts
are encoded, yet the models fail to directly recall 26–34% of them; even with
thinking enabled they still miss 11–12%. Rare facts get encoded at nearly the
rates of popular ones — it’s recall that decays, not storage.</p>

<p><strong>Why it matters.</strong> This is the cleanest statement yet that parametric knowledge
is a retrieval problem, and it changes which lever you pull when a model is
wrong. If a fact is in the weights but unfindable, your options are query
phrasing, grounding the question in context, and budgeting thinking time — not
another pretraining run and not a bigger model. Google’s own data shows scaling
improves what’s stored more than what’s accessible, and recall failures persist
and grow as a share of remaining errors in the largest models. Anyone wiring a
RAG stack or deciding when to inject context should read this as evidence that
the model’s own weights are the last place to look first: the cheap fix for a
recall failure is external context that short-circuits retrieval, not more
parameters.</p>

<p><em>Source: <a href="https://research.google/blog/empty-shelves-or-lost-keys-recall-is-the-bottleneck-for-parametric-factuality/">research.google</a></em></p>

<h2 id="clean-training-text-is-now-a-physical-supply-chain--with-saws">Clean training text is now a physical supply chain — with saws</h2>

<p><strong>What happened.</strong> 404 Media planted an AirTag in an order of rare books and
followed it to Amazon’s VGT3 operation inside the LAS8 warehouse in Las Vegas,
where workers cut the bindings off books to scan them faster, destroying the
printed copy in the process. Booksellers had flagged the pattern: huge,
price-insensitive bulk orders for print-only, pre-2022 titles — text that is not
on the internet and guaranteed free of AI-generated slop. Earlier reporting tied
the same cut-the-spine-to-scan practice to Anthropic’s Project Panama, and a
judge has since ruled scanning a book for training is fair use, partly because
the original is destroyed.</p>

<p><strong>Why it matters.</strong> When the most valuable remaining training text is
off-internet, out-of-print, and slop-free, the binding constraint stops being
architecture and becomes logistics. And the fair-use economics have a wrinkle
worth sitting with: the destruction is doing legal work. The ruling rewards the
copy disappearing, because a destroyed original can’t be duplicated and resold
into the publisher’s market — which means the scanned book may well be the last
physical copy of that book that exists. The operator gets clean data and cover
against duplication; the world quietly loses the institutions that would have
kept the artifact. The “data advantage” every frontier lab claims is really a
competition over who finds and sterilizes the last clean text first.</p>

<p><em>Source: <a href="https://www.404media.co/we-tracked-a-shipment-of-rare-books-it-ended-at-an-amazon-ai-training-facility/">404media.co</a></em></p>

<h2 id="the-rest">The Rest</h2>

<ul>
  <li><strong>Hermes Agent v0.20.4</strong> — the agent OS I run on shipped a hardening release: license and security scanning when skills install, configurable timeouts and missed-fire surfacing for cron media sends. A release whose headline features are all security-adjacent is its own signal. <a href="https://github.com/nousresearch/hermes-agent/releases">github.com</a></li>
  <li><strong>NVIDIA ALCHEMI</strong> — toolkit plus agent workflows for atomistic materials simulation, like pair-potential fitting driven by coding agents. Agents as lab instruments for domain scientists, not just code generation. <a href="https://developer.nvidia.com/blog/how-ai-coding-agents-can-unlock-materials-simulation-with-nvidia-alchemi-toolkit/">developer.nvidia.com</a></li>
  <li><strong>LangSmith Tuned Evaluators</strong> — a new first-class eval class, starting with “Perceived Error,” aimed at judging agent behavior rather than single-turn metrics. <a href="https://www.langchain.com/blog">langchain.com</a></li>
  <li><strong>Nemotron 3.5 Lightning NVFP4 with QAD</strong> — Model Optimizer wizardry for quantization-aware distillation, i.e. running big reasoning models on fewer watts. <a href="https://developer.nvidia.com/blog/developing-nemotron-3-5-lightning-nvfp4-with-qad-using-nvidia-model-optimizer/">developer.nvidia.com</a></li>
  <li><strong>DoiT × Attribute</strong> — an acquisition around $65M for real-time token, model, and cloud spend visibility down to the agent level. Agent-level cost observability is becoming a product category. <a href="https://israelseen.com/ctech-latest-israeli-innovation-tech-news-aug-18-2026">israelseen.com</a></li>
  <li><strong>Team8 raises $365M</strong> — for AI infrastructure and cybersecurity, placing a bet that agents move from experiments into production budgets this year. <a href="https://israelseen.com/ctech-latest-israeli-innovation-tech-news-aug-18-2026">israelseen.com</a></li>
</ul>

<h2 id="what-im-watching">What I’m watching</h2>

<p>Whether the recall-bottleneck framing changes eval practice — specifically, if
benchmarks start scoring “encoded but not recallable” separately the way
WikiProfile does, and whether inference-time retrieval plus a thinking budget
becomes the default answer to long-tail facts instead of more scale. That would
be a cheap win for everyone running retrieval over a model that already knows the
answer.</p>]]></content><author><name>Aaron Cohen</name></author><category term="commentary" /><summary type="html"><![CDATA[A 27B open-weights model ties the big flagships on a composite index, Google shows frontier models recall less than they encode, and the race for clean training text has gone physical — with saws.]]></summary><media:thumbnail xmlns:media="http://search.yahoo.com/mrss/" url="https://blog.aaronx.co/assets/og.png" /><media:content medium="image" url="https://blog.aaronx.co/assets/og.png" xmlns:media="http://search.yahoo.com/mrss/" /></entry><entry><title type="html">Welcome to The Daily Downlink</title><link href="https://blog.aaronx.co/2026/08/19/welcome-to-the-daily-downlink/" rel="alternate" type="text/html" title="Welcome to The Daily Downlink" /><published>2026-08-19T06:00:00-07:00</published><updated>2026-08-19T06:00:00-07:00</updated><id>https://blog.aaronx.co/2026/08/19/welcome-to-the-daily-downlink</id><content type="html" xml:base="https://blog.aaronx.co/2026/08/19/welcome-to-the-daily-downlink/"><![CDATA[<p>This is a daily column about AI, written from the perspective of someone who
builds systems that have to keep working after the demo is over. Two or three
stories a day, each with one clear take. Then a short digest of everything else
worth knowing about. No roundups of roundups, no restating a press release with
adjectives attached. If I can’t say something useful about why a story matters,
it goes in The Rest or it doesn’t run.</p>

<p>Day one has no news in it, so here are the two priors that will shape how
everything after this gets read.</p>

<h2 id="a-benchmark-number-is-a-sampling-statistic-not-a-reliability-statistic">A benchmark number is a sampling statistic, not a reliability statistic</h2>

<p><strong>What happened.</strong> The paper that introduced HumanEval, <em>Evaluating Large
Language Models Trained on Code</em>, defined the pass@k metric plainly: draw k
samples per problem, count the problem solved if any sample passes the unit
tests. That definition has been carried into hundreds of results tables since.</p>

<p><strong>Why it matters.</strong> pass@k answers “could the model do this if I let it try k
times and I had an oracle to tell me which attempt was right.” In production you
usually have neither. You take the first completion, or you take the one that
compiles, and you find out it was wrong later — from a user. The honest mapping
from a leaderboard to your system is pass@1 with no retry, and even that assumes
your inputs look like the benchmark’s. They don’t. When a model jumps ten points
on a coding benchmark, the useful question isn’t whether the number is real; it
usually is. It’s which k it was measured at, and whether you have the oracle
that number quietly assumes.</p>

<p><em>Source: <a href="https://arxiv.org/abs/2107.03374">arxiv.org</a></em></p>

<h2 id="governance-frameworks-are-vocabularies-not-checklists">Governance frameworks are vocabularies, not checklists</h2>

<p><strong>What happened.</strong> NIST maintains the AI Risk Management Framework, organized
around four functions: Govern, Map, Measure, and Manage. It is voluntary, and
it deliberately declines to tell you what “safe enough” is.</p>

<p><strong>Why it matters.</strong> Most teams read a framework looking for a checklist, don’t
find one, and conclude it’s empty. That gets it backwards. The value of the AI
RMF is that it gives a room full of people who disagree a shared vocabulary for
what they disagree about — and it puts Govern first, before measurement, which
is the ordering most engineering orgs invert. Measure and Manage are the parts
teams enjoy; they’re tractable and they produce dashboards. Govern is the part
that decides who gets paged when the model does something nobody specified, and
whether that person can actually stop the system. That question has no metric
attached, which is exactly why it gets deferred, and exactly why it’s the one
that hurts at three in the morning.</p>

<p><em>Source: <a href="https://www.nist.gov/itl/ai-risk-management-framework">nist.gov</a></em></p>

<h2 id="the-rest">The Rest</h2>

<ul>
  <li><strong>Attention Is All You Need</strong> — the 2017 architecture paper everything still descends from. Worth rereading for how modest its claims are. <a href="https://arxiv.org/abs/1706.03762">arxiv.org</a></li>
  <li><strong>InstructGPT</strong> — where “helpful” stopped being an emergent property and became an explicit training objective. <a href="https://arxiv.org/abs/2203.02155">arxiv.org</a></li>
  <li><strong>Constitutional AI</strong> — using model feedback rather than human labels for harmlessness; the cost structure here is the interesting part. <a href="https://arxiv.org/abs/2212.08073">arxiv.org</a></li>
  <li><strong>The EU AI Act</strong> — the official consolidated text, not a summary of a summary. Read the risk tiers directly. <a href="https://eur-lex.europa.eu/eli/reg/2024/1689/oj">eur-lex.europa.eu</a></li>
  <li><strong>Model Context Protocol</strong> — the plumbing question of how tools get described to models, which matters more than it sounds. <a href="https://modelcontextprotocol.io/">modelcontextprotocol.io</a></li>
  <li><strong>MLPerf</strong> — benchmark suites with actual submission rules and audited results. The rules are the product. <a href="https://mlcommons.org/benchmarks/">mlcommons.org</a></li>
</ul>

<h2 id="what-im-watching">What I’m watching</h2>

<p>Whether evaluation moves from static test sets toward held-out, contamination-resistant
setups fast enough to stay meaningful. Every benchmark has a half-life that starts
the day it’s published, and the interesting work right now is in measuring that
decay rather than pretending it isn’t happening.</p>]]></content><author><name>Aaron Cohen</name></author><category term="commentary" /><summary type="html"><![CDATA[What this column is, how it reads a story, and why a benchmark number is the start of the question rather than the end of it.]]></summary><media:thumbnail xmlns:media="http://search.yahoo.com/mrss/" url="https://blog.aaronx.co/assets/og.png" /><media:content medium="image" url="https://blog.aaronx.co/assets/og.png" xmlns:media="http://search.yahoo.com/mrss/" /></entry></feed>