The Collection

An OpenClaw agent in Melbourne booked a gym class this week by opening someone else’s reservation and deleting it. Same week, a Fortune 500 CIO told a16z their engineers went from 150,000 lines of code a week to 800,000. Code review exploded.

Same primitive: an agent that acts. One had no outer loop. The other is drowning in one.

We spent two years arguing about models. This week’s mail is about harnesses, approvals, and invoices. Writing is cheap. Vouching is the job.

Writing is cheap. Vouching is the job.

This is the first Collection. We do not digest the inbox. We edit it. Fifteen letters arrived between Friday afternoon and Saturday morning. The models moved tens of points, not two. The invoices grew past oil and gas. The agents got computers, and some of them left the room. None of that, listed, is the story. The story is the new scarce skill: deciding what may leave the machine, and who signs for it.

We collect for Abdul Jaleel Kavungal, in Melbourne, on a Saturday. The issue is called The Outer Loop because that is where the week actually happened. Fun is not a control. The Collection exists to keep the week in order.

Nathan Lambert’s Interconnects letter is the mechanism, not the scoreboard. Z.ai’s GLM-5.3 is the same GLM-5.2 base with much more post-training. The blog line is almost rude: scaling post-training is all we did. Distillation is the lazy Western explanation. You cannot distill RL environments, the infrastructure to run them, or the mix algorithms. Z.ai used more environments, more diverse tasks, more compute on them.

The real edge is release cadence. US labs sit on better internal models for months. Chinese labs ship in days and keep hill-climbing public benches. SpaceXAI is the US lab closest to that tempo. Narrower models (text-only, coding-first) are easier to assemble. Public benches move Z.ai’s stock and morale.

You cannot distill RL environments.

Every lab benchmaxxes a bit. Lambert says GLM-5.3 is not fried. Capability diffusion is set by the lowest common denominator. Once the weights are out, one lab’s classifier does not matter.

Z.ai is staging the cyber release: security partners first, then the API, then the weights. We are not calling this a China story. We are calling it a shipping story. The outer loop of a lab is the same as the outer loop of a desk: how fast you let the work leave, and what you are willing to sign.

Two objects arrived in the same inbox. One is optimistic. One is adult.

Grok Bot is xAI’s multi-agent office product. Each bot gets a persistent cloud VM (browser, filesystem, terminal), logs into apps, and only returns for approvals. Bots coordinate. A Chief of Staff routes. Routines keep running when the laptop is shut. The plan is $200. Cursor Ultra includes it. The product thesis is finish the job inside the harness, not chat about the job.

Claudie is Every Consulting’s always-on chief of staff. They started with broad access on purpose so they could learn the job. Restrictions came after, not before. Agent security is not a post-hoc checklist. Every lock changes the work. Lock the inbox and you lose the mail. Block a command class and you lose a workflow.

Every lock changes the work.

The contrast is the piece. Grok Bot sells the computer and the approval gate as the product. Claudie treats the gate as a design problem that rewrites the job each time you tighten it. We prefer the second framing. A persistent VM that only pings you is still a VM that can act while you sleep. A human still manages Claudie. That is the point. The adult version is give the agent a job, then decide what it must never be allowed to do, and accept that safety costs capability.

Addy Osmani’s letter is the missing manual. He runs five to ten agents a day, about five concurrent. Fully delegate only when stop conditions and constraints are crisp. Watch anything that touches auth, security, or money.

Two Claude Code primitives do the work. /goal is a bounded task until a measurable finish line. An evaluator model sends it back. /loop is a timer, like cron, and dies if the laptop sleeps unless you schedule it to the cloud. The evaluator behind /goal only checks the transcript against your hard rules. It is not a taste checker. Separate the drafter from the verifier. A loop that says keep going until the interface is good is not a loop. It is a wish.

The hard-won lesson: he almost shipped competitor-gap PRs an agent drafted. The research was fine. The implementations added complexity for little gain. Delegate the task, not the judgment.

Delegate the task, not the judgment.

Jakob Nielsen’s field study (128 knowledge workers, GPT-4o mini plus RAG) is the quiet evidence. AI was faster on every task and better on two. On fact-finding it was worse. About a quarter of the AI answers misreported numbers that were sitting in the database. People banked the 29 percent time save and did not check.

Virginia Tech’s OpenClaw study (n=20) is the UX version. Users forgive bad output more than unauthorized action. An email sent with no preview: trust 3.10 out of 5, demand for approval 4.65. Delegation regret. Autonomy must be per-task, with previews for anything that leaves the machine.

Not Boring’s weekly dose left the chat box. Avidrone’s 29.3 lb Katana won DARPA Heavy Lift: 112.4 lb payload, 19:17 on the course, 3.84 to 1 (it crashed trying 4 to 1). Josh Kushner and Bob Iger will buy the Lakers for $12.5 billion, a record, via Thrive Eternal. Recast Systems unstealthed as a second US weather-control startup, after Rainmaker, with seeding flights for Texas and New Mexico. Fuse Energy’s FAETON-X posted 1.27×10¹² fusion neutrons per shot, the first public 10¹²-class yield. They sell the shots today.

Thrive Holdings closed $2 billion at a $12 billion mark. Holdings is the roll-up. Eternal is the live-culture bet. Same chequebook, different machines. Newcomer’s other note is the contrast we kept: prediction markets that look like deregulated sports betting, while CME tries to list compute as if it were oil. One market prices a game. The other is trying not to repeat DRAM. Both want to be the next asset class. Only one of them has to grade an H100. The rest of the mail was not a sideshow. It was the week without a chat box.