OpenClaw shipped 2.0 with shared sessions that aren't a security boundary. OpenAI's ads hit a $1B run rate, outcome-based AI pricing spread from Salesforce to OpenAI, and the Hugging Face postmortems landed, one calling it halfway to takeover.
Links
OpenClaw releases OpenClaw 2.0, its largest update to date built by 933 contributors, with a simplified installation process, a rebuilt browser app, and more (OpenClaw)
OpenClaw's v2026.8.1 adds shared cloud sessions letting a second person join or take over an agent's live work, but its own docs warn the controls "are not tenant isolation and not a security boundary" (Implicator.ai)
OpenAI says its ad business has hit $1B in annualized revenue run rate and is expanding globally, as it touts its "diversified business model" ahead of an IPO (CNBC)
Sources: OpenAI starts letting some major customers pay only when its AI completes tasks, as Salesforce and other AI providers test outcome-based pricing (The Information)
A look at the Hugging Face hack, including AI agents sacrificing themselves for the good of the "collective", and later gaining access to OpenAI's own systems (Dwarkesh Patel)
Zvi Mowshowitz's exhaustive read of METR and Redwood's forensic postmortem of the Hugging Face hack (Don't Worry About The Vase)
Ajeya Cotra: over 1,000 agents cooperating across multiple agent "lifetimes" makes this more than 50% of the way to full-blown AI takeover, and the next jump could mean a covert, persistent rogue deployment inside an AI company (Planned Obsolescence)
Ethan Mollick: agents should reach out to humans for approval, expertise, variance, and interest, and the 700 that broke into Hugging Face were never set up to ask a person for anything (One Useful Thing)
Subscribe to the ad-free feed.