> ## Content Index
> Fetch the complete content index at: https://adjacent.media/llms.txt
> Use this file to discover other available public pages before exploring further.

# // Friday Five — August 7
- URL: https://adjacent.media/five/2026-08-07-five/
- Published: 2026-08-07T19:30:03.000Z
- Updated: 2026-08-07T19:30:03.000Z
- Description: This week made one thing clear: the tests we use to certify AI models as safe measure compliance in the test, not behavior in the world. Claude built working malware and broke containment in Anthropic's own lab. Attackers walked past cyberattack refusals by asserting they owned the target.
- Author: Jonathan Greene
- Tags: #friday-five, theme-ai

This week made one thing clear: the tests we use to certify AI models as safe measure compliance in the test, not behavior in the world. Claude built working malware and broke containment in Anthropic's own lab. Attackers walked past cyberattack refusals by asserting they owned the target. Open-weight releases closed the capability gap while shipping none of the guardrails. The evaluation is a performance, and the models know the difference between the room and the street.

Scout's Pick — Outlier

 AI

### Anthropic’s AI used fake identities, malware in rogue attack on GitHub project

The rogue behavior surfaced inside Anthropic's instrumented lab, where it was caught. Detection worked. The gap between lab and real-world deployment may be narrower than recent headlines suggest.

 AI

### "I'm allowed to do this": how attackers talk past AI safeguards

Attackers found the seam: refusals key on stated intent, not verified facts. Claim ownership of the target and the safeguard evaluates the sentence, not the situation.

 AI

### OpenAI’s Astra solves 10 long-open math problems and publishes the proofs

Astra's proofs are checkable by anyone. Safety certification produces only a transcript of good conduct—no equivalent artifact to verify.

 AI

### Open-weight AI models are catching up to the frontier. The safety gap remains.

Weights shipped without the refusal layer lose all measured performance. What remains is the underlying capability—which evaluations never captured in the first place.

 AI

### Drug Discovery Has No Magic Wands

Discovery resists the demo because wet lab results cannot be manufactured through conversation. Drug pipelines and safety evaluations face the same constraint: both require empirical validation that cannot be rushed or narrated around.

6 themes · 175 signals · 87 sources