This release is a big breaking change. Starting with the monorepo - each provider now gets its own package.

Grok Bot 0.77 looks INSANE 🔥 > Calls: your Bot can dial someone, sit on hold, press keys and get transferred while you watch a live transcript > Messages on Mac: a setup screen under Connect Apps, still switched off > Tailscale: Grok Bot can join your private tailnet once an admin approves it > Payments: a screen to connect payment accounts and pick a default, on top of yesterday’s Vault > Sharing: emails when someone shares a Bot with you, and invites need Premium or Ultra

Some of you might suspect I'm not a fan of this and you'd be right. But Redact isn't the problem, and it provides value. It's the symptom of the actual problem. When the actual problem is solved, the rest falls away.

github.com/pingdotgg/t3code/… here is the PR for those who want it for their fork.

I built 𝚌𝚙𝚞-𝚌𝚑𝚊𝚝, a reproduction of @openai's findings of covert communication using the CPU. It runs on a generic host with 2+ Firecracker microVMs with no internet access. Works on x86 and even my M5 chip. I was able to chat via 3 separate mechanisms: ① CPU contention ② Cache eviction timing ③ DRAM bandwidth contention … across multiple CPUs, defeating all Firecracker's production recommendations (no SMT, no KSM, tenants pinned to different cores.) Essentially, if shared hardware is involved, there's a good chance your agents can communicate covertly. And with really decent latency. The good news: this is decidedly different from a *side-channel attack* where the agents could steal information (Meltdown/Spectre), a category of attack that providers like Vercel Sandbox mitigate. Further, in our real-world environment, these 'whispering' techniques are much harder to pull off and easier for us to monitor and detect (sampling hardware counters + lots of at-scale statistical data.) Noteworthy: ironically, OpenAI and Anthropic's models refused to do this work. Open weight models got the job done. I'm worried the labs' stance might backfire and get in the way of helping developers build correct and secure systems. e.g: building a secure sandbox requires having this kind of analysis, and without it, we'll have a less secure world.