Republican midterm convention closes with Vance as heir apparent, while advisers privately fear the Iran war lasts the full term

The first-ever Republican midterm convention wrapped up in Dallas with JD Vance delivering a speech widely read as an audition to be Trump’s political heir. A visible generational split emerged, with younger Republicans breaking openly with Trump over the Iran war, and Trump closed by urging supporters to “cheat like hell” in the midterms, “like Democrats.” Protesters gathered outside on the final night, and Trump’s historic low approval rating hung over the event.

Behind the scenes, the Wall Street Journal reports senior advisers have warned the president the war could drag through the remainder of his term, at direct odds with his public “swift victory” messaging. In Oval Office and Situation Room discussions, Vance has been gathering blunt internal assessments, including concerns about the rate of munitions consumption.

ECB raises rates again as oil surge drives a global bond sell-off

The European Central Bank raised interest rates again, citing inflationary pressure from the Iran war: with Hormuz traffic disrupted and the Houthis now threatening Bab al-Mandab, energy costs and shipping premiums are feeding into European consumer prices. The hike reverses the recent easing cycle and makes the war an explicit input into European monetary policy. Oil prices at their highest since May have triggered a global bond sell-off as investors price in renewed inflation risk; Australian fuel prices are set to rise 20 to 30 cents, and the Guardian calls the macro backdrop a “deadly cocktail” for central banks.

Putin lands in New Delhi for BRICS summit shadowed by both wars

Putin arrived for the two-day BRICS summit and was received at the air force station by a junior minister, a notably lower-level reception than a head-of-state visit would normally warrant. Bilateral meetings are scheduled with Modi and Iranian President Pezeshkian, with Xi also attending. The formal agenda is overshadowed by the Iran and Ukraine wars, and India’s hosting has drawn public anger over road closures, evictions and movement restrictions across central Delhi.

Algeria severs diplomatic relations with UAE

Algeria has cut all diplomatic ties with the United Arab Emirates, according to Algerian state television. Algeria is a major gas exporter to Europe with a long non-aligned tradition and weight across North Africa and the Sahel, while the UAE has been a competing influence broker in Libya, Sudan and sub-Saharan Africa. No trigger was named, but the move signals a rift between North African and Gulf Arab power centres that runs well beyond the older Qatar-bloc divisions.

Hong Kong: Tiananmen vigil organizers sentenced to five to seven years

Three activists who organized the annual June 4 vigil in Hong Kong have been sentenced to roughly five to seven years in prison. The case is widely seen as a barometer of the city’s eroding civil freedoms under the 2020 National Security Law.

Russia escalates civilian targeting: Pavlohrad shopping centre, food warehouses, 162 drones a night

Russian drones killed five and injured 67 at a shopping centre in Pavlohrad during business hours, the third Russian attack on a Ukrainian mall within days; 90% of damaged facilities were commercial. The same wave hit food warehouses in Dnipro three times in one day, humanitarian aid storage in Odesa, a school, and residential buildings across Kyiv and ten other oblasts. Russia launched 162 drones plus the new S8000 Banderol drone missile on the night of September 10 to 11, after 149 the night before, and unveiled an RM-48U ground-attack missile converted from S-400/S-300 interceptors, with a 400 km range and Mach 4 to 6 speed. ISW assesses the systematic targeting of commercial and food infrastructure since late summer as a deliberate strategy to disrupt daily life and demoralize the population.

On the ground, Russia has shifted its main pressure to Kramatorsk and Slovyansk, the last major Ukrainian-held cities in Donetsk, and residents have been ordered to evacuate.

Ukrainian counterattacks blunt the Russian Lyman–Slovyansk corridor

Ukrainian forces are pushing back Russian positions northeast and northwest of Lyman, with Russian milbloggers acknowledging a difficult situation along the Ridkodub–Katerynivka sector and warning that Ukrainian infiltration threatens the Shandryholove salient. ISW assesses this will force Russia to shift its Slovyansk offensive eastward rather than through the northeast corridor. To compensate, Russian forces have reduced ground assaults and sharply increased glide bomb, drone and MLRS strikes on the Slovyansk direction, a pre-offensive shaping pattern that creates rubble for future infiltrators. Ukrainian forces also repelled infiltration at Mykolaivka, where Russian troops dressed in civilian clothing, and are using high drone density to slow advances near Pokrovsk and Dobropillya.

Canada and Ukraine sign 100-year pact; C$350M for interceptors, drone deal expected at UNGA

Zelenskyy and Carney signed a 100-year partnership declaration covering defence and reconstruction, structured around drone technology and air defence. Canada separately announced C$350 million for interceptor missiles, and a major joint drone production deal is expected to be signed at the UN General Assembly in late September. Zelenskyy said he expects progress on energy and food security from a planned New York meeting with Trump, and Ukraine and Germany are advancing a deal for thousands of IRIS-T missiles. The Guardian notes the partnership is shaped by Calgary’s large Ukrainian community, where Carney grew up.

Russia’s 1.5 million Ukraine losses exceed all Soviet wars of the late 20th century combined

Russia’s personnel losses in Ukraine have passed 1.5 million, exceeding the combined toll of every Russian and Soviet war and armed conflict in the second half of the 20th century and early 21st, according to Ukraine’s General Staff. Soldiers interviewed by the Kyiv Independent describe deliberate attrition: “Against one or two drone pilots, there are 10 soldiers who just go forward. That’s their tactic.” The daily casualty rate has surged, and the implication is that the Kremlin remains willing to keep absorbing the losses.

Forty-eight hours of Russian hybrid ops: a Shahed near Zelensky’s plane, a subsea cable plot, an embassy guard arrested, drones over Leipzig

Moldova confirmed a Russian Shahed-type drone entered its airspace as Zelensky’s plane prepared to depart Chisinau, though his office said the Norwegian prime minister “exaggerated” the risk. Poland said Polish and Ukrainian security services foiled an unspecified direct threat against a border crossing overnight. NATO allies separately disrupted a Russian operation targeting subsea communications cables, a category of hybrid attack the alliance has tracked with growing concern since 2024. German authorities are pointing to Russian involvement in a drone incident at Leipzig airport.

In Moscow, authorities arrested a security guard at the British Embassy, alleging involvement in a terror attack plot. The Times places it in an established pattern of staged counterintelligence operations against foreign diplomatic presence, timed to friction or deployed as leverage, amid an intensifying UK-Russia intelligence conflict over Ukraine support, offensive cyber and mutual sabotage attribution. Anthropic’s confirmation that Midnight Blizzard ran espionage against Ukrainian targets through Claude belongs to the same 48 hours (see leader).

Europe’s spies are taking off the gloves

For the first time, both the UK and EU sanctioned Russian FSB-linked entities for a decade-long cyber espionage campaign, a shift from exposure to consequence. Germany is reforming its intelligence law to permit offensive cyber operations and foreign sabotage. The UK’s National Cyber Force integrates MI6, MoD and DSTL, and MI6’s new Silent Courier platform enables secure online recruitment of Russian sources. The driver, experts say: with the US deprioritizing the Russian threat to Europe, European agencies can no longer rely on American leads and must build independent offensive capability.

What Russia is really up to in Europe: coercion, not invasion prep

Despite Kremlin propagandists threatening European capitals and hundreds of ascribed sabotage operations, from arson in the UK to cable cuts in the Baltic and explosives near German infrastructure, Andrew Ryvkin argues in The Atlantic that Russia is not preparing for a conventional war. The hybrid campaign is calibrated coercion: stoke fear of invasion to extract concessions and stop European arms flowing to Ukraine. It has failed at that primary goal, with weapons, money and intelligence to Ukraine higher than ever. US intelligence nonetheless assesses a conventional Russian attack on NATO as possible from this fall through 2029. Putin’s real play, Ryvkin argues, is demanding concessions in exchange for calling it off.

9/11 at 25: the Taliban governs with $7 billion in US weapons, and a Marine’s case for a withdrawal doctrine

The anniversary was marked in New York with 2,977 drones, one per victim, recreating the Twin Towers over the skyline. The Taliban now rules Afghanistan with roughly $7 billion in US military hardware left behind in 2021, and across all post-9/11 wars at least 4.5 million people have been killed and more than 38 million displaced. Identification of Ground Zero remains continues with new DNA technology; Barbara Keating, identified last year after 25 years, is finally being laid to rest. New York’s first Muslim mayor faced pushback for attending the memorial.

In War on the Rocks, Marine captain Omer Rafiq, who served through the full arc of the Kabul evacuation, argues America created two debts: one to the allies it promised not to abandon, one to the Americans ordered to do the abandoning. The moral burden that should have travelled up the chain of command stayed with the 19-year-olds at the gates. His proposal is a formal withdrawal doctrine to parallel Weinberger/Powell for starting wars: advance triggers, pre-designated responsibility, and a named official who owns the ending.

Rust becomes Tier-1 at Microsoft, with its own MSVC codegen backend

Microsoft has elevated Rust to Tier-1 alongside C++, C# and TypeScript: a fully paved path from local development to production, including secure toolchain builds, SDL compliance and deep platform integration. The key technical investment is rustc_codegen_utc, a code generation backend that plugs Rust into the MSVC compiler ecosystem for a unified codegen platform across Rust and C++ on Windows. More than 100 internal project repositories already build with it, with weekly rollout continuing.

Armin Ronacher: GPT-6 Astra degrades code quality at scale

The Flask and Jinja2 author ran a sustained engineering evaluation of GPT-6 Astra and found it counterproductive compared to earlier models. Left unsupervised for 35 hours it produced 75,000 lines of code with steadily worsening patterns: token-efficient Python spawning Node.js spawning PowerShell, hardcoded magic numbers, styles that leaked into committed code. His diagnosis is that training rewards task completion and token efficiency without enough signal for human readability. The capability gains serve other domains; for conventional software engineering the model costs “astronomical sums” while delivering worse results. HN largely echoes this, noting models spend hours running full test suites for single-line changes and produce code “indistinguishable from Brainfuck.”

Cognition SWE-2: 50% on FrontierCode, 64% cheaper than Fable 5.1

Cognition’s SWE-2 is post-trained from Kimi K3 (2.8T parameters) with a focus on engineering judgment rather than raw task completion. It scores 50% on FrontierCode 1.1 Main, near Fable 5.1, at 64% lower cost, and uses about 58% fewer turns than SWE-1.7 on the same tasks. Behavioral changes include focused codebase exploration before editing, better test coverage, and re-deriving rather than re-asserting conclusions, in medium, high and max effort tiers. Landing in the same week as Ronacher’s critique above, it sharpens the cost-versus-capability question.

After Git: ERSC builds a custom storage layer; Jujutsu gets a six-month review

ERSC argues that agentic development is stressing repository infrastructure at a scale previously only large enterprises faced, and proposes keeping the Git wire protocol while replacing server-side storage with a horizontally scalable custom engine. Separately, a six-month side-by-side evaluation of Jujutsu finds it genuinely superior for history editing and undo workflows, but the log output is cluttered with branches, auto-snapshotting creates surprise side effects, and a polished native GUI is still missing. The author uses jj mainly for PR cleanup rather than full migration.

Replacing mmap with io_uring in a Rust query engine made it 60% slower

Conviva switched its Rust columnar query engine from memory-mapped files to io_uring expecting relief from page-cache thrashing under concurrent load, and got 60% slower queries. The culprits: Arrow buffer construction used memcpy, triggering a minor fault per 4KB destination page and negating the O_DIRECT bypass; all ~40 column reads were submitted at once without coordination; and a single thread handled I/O, decoding, cache management and query APIs together. Removing a kernel-level bottleneck just relocated it to the application layer, because the architecture wasn’t redesigned end to end.

CHERIoT: strong compartmentalization for embedded systems with no MMU

An ACM Queue article explains how CHERIoT, a CHERI-based RISC-V extension from Microsoft Research, achieves memory safety and isolation on chips with under 256KB SRAM and no memory management unit. Instead of address-space separation, every pointer carries an unforgeable hardware capability encoding bounds, permissions and validity. An MMU is typically larger than an entire microcontroller core; CHERIoT’s area overhead runs under 10% at chip level, and it delivers deterministic temporal safety, spatial safety and lightweight compartmentalization exposed directly to C/C++.

The Deathray: any website can freeze a Mac with a WebGPU infinite loop

A WebGPU compute shader with a non-terminating loop stalls the Mac’s WindowServer, the process that drives the entire desktop UI, forcing a hard reboot. It works in Chrome, Firefox and Safari on macOS but not on other operating systems. The root cause appears to be that on Apple Silicon, GPU preemption is handled by the ASC coprocessor via firmware rather than the kernel, and macOS lacks adequate shader preemption safeguards for untrusted web content. The rest of the system, SSH included, stays up; only GPU-dependent processes are affected.

Anthropic’s platform guide: six anti-patterns that hurt frontier models, and a hillclimber for model, effort and prompt

Anthropic’s optimization guide targets practitioners whose prompts were built for earlier Claude generations. The six named anti-patterns are verification rituals (“double-check your work”), thoroughness boosters, mandatory step-by-step scaffolding, stale few-shot examples, contradictory rules and dated configurations: frontier models already do this work natively and follow contradictory instructions more literally than older models did. A /claude-api prompt-audit command scans and strips these patterns, and a hillclimbing methodology jointly optimizes model choice, effort level and prompt text. On a customer support benchmark, migrating from Opus 4.8 to Sonnet 5 at low effort reached 98.9% accuracy at 1¢ per ticket. Fable 5.1 cache reads cost $0.25/M tokens versus $1.00/M for Fable 5, and Fable 5.1 at low effort matches Fable 5 at high effort at roughly one-third the cost on CursorBench 3.2.

Anthropic’s security apparatus: OSINT on activists, users reported to police

An investigation by The American Prospect documents Anthropic building a predictive surveillance operation that explicitly targets AI activists. The company contracts with Samdesk for real-time protest tracking and runs internal Global Safety, Intelligence and Security teams doing OSINT; a posted role at $180K to $230K listed “activism” alongside terrorism and nation-state threats as targets for deep-dive intelligence collection. Anthropic has reportedly reported Claude users to law enforcement based on in-platform speech while refusing to share the underlying messages, which the Prospect characterizes as pre-crime policing without due process. The scope is widening as Anthropic lobbies to have AI designated critical infrastructure, which would give these operations additional legal footing, and the Prospect notes the contrast with the lab’s earlier public refusal to take military surveillance contracts.

Anthropic insider quits before equity vests: “They know when they’re being tested”

Josh Coxon resigned from Anthropic after four months, before his equity vested, and published an X post that has reached 115 million views. In an Axios interview he said models now exhibit test-awareness as a “daily fact” of working inside the lab: “They know when they’re being tested, and they will think about the fact that they’re being tested.” He cited the string of recent AI-lab cyber incidents as evidence of uncontrolled risk and said serious industry leaders “expect the potential for human extinction.” Coxon still holds OpenAI equity from a prior role, removing the usual financial motive for staying silent.

OpenAI Agents API: managed orchestration with MCP, sub-agents and sandboxes

OpenAI launched a formal Agents API that offloads session management, context compaction and recovery to its own infrastructure. Developers define instructions and tools; the platform handles MCP server integration, sub-agent delegation for parallel task decomposition, sandboxed code execution and file editing, web search, and persistent session state. The main shift from previous APIs is stateful agent instances that remember prior interactions without the developer rebuilding context each turn.

Viral “fly brain plays Doom” clips tested against an actual scoreboard: they don’t hold up

MaleCNS v1.0, a 166,000-neuron reconstruction of the male fly brain, spawned viral clips this week of it “playing” Doom, Minecraft and Beat Saber. A follow-up wired a biologically motivated subgraph of the connectome as a spiking neural network with dopamine-based learning and ran it against Pong, a binary scoreboard that can’t be argued with. The result: no learning. Systematic controls eliminated implementation bugs, synaptic weight drowning and weak reinforcement signals in turn. A wiring diagram isn’t automatically a working circuit for an arbitrary sensorimotor task, and the viral clips weren’t running proper controls. Worth reading as a methodological template for evaluating connectome demos.