The Machines Got a Security Upgrade, the Humans Didn’t -- AI Brief September 1

Good day %%first_name%%. OpenClaw stopped shipping for two months, came back with sixteen thousand merged pull requests, and buried the actual headline in the credentials section. Anthropic signed a $35 billion compute bill with a landlord that is basically Nvidia wearing a hat. A podcaster wrote up last week’s runaway-agent incident as the rise and fall of a Macedonian empire and got a very loud correction from Gary Marcus. TIME gave a trophy to the one man who thinks the entire field is walking into a wall. And a product manager taught his assistant to go find its own next job. Five stories about who is actually holding the keys.

OpenClaw 2.0 Lands With 16,000 Pull Requests

OpenClaw

What happened: The open-source AI agent platform shipped version 2026.8.1 — informally 2.0 — built by 933 contributors, 569 of them first-timers, across more than 16,000 pull requests. The Decoder reports the installer now detects the ChatGPT or Claude subscription, API keys and local models you already have instead of making you wire everything up by hand, and the browser app has been rebuilt from scratch.

Why it matters: OpenClaw is what people install when they want an AI agent running on their own machine instead of somebody else’s cloud, and until now the hard part was getting it running at all. But the setup work is not the important change. An agent can now ask for a password through a masked prompt, so the secret never lands in the chat transcript or the model’s context window.

What everyone’s saying: The security work is what the writeups keep circling back to. CybersecurityNews ties the masked-credential feature directly to a recurring class of OpenClaw failures where plaintext API keys and OAuth tokens leaked through logs and chat history and got siphoned out by indirect prompt injection. The Hacker News thread is arguing about the tradeoffs rather than the rebuilt UI.

My read between the lines: A project that shipped 106 releases in 230 days stopped shipping for two months to rebuild its foundation. That is not a feature announcement, it is a confession. The fastest-moving agent project in open source has conceded that moving fast was the security model, and the fix required a freeze.

📖 Further reading: Mastering OpenClaw: The Day-0 Playbook to Onboard Your AI Second Brain — the install pain that playbook was written to solve is mostly gone now; everything after step one still applies.

Every agent story above is about software that is impressive in a demo and expensive in production. Viktor is the boring opposite. It lives in your Slack, connects to over 3,000 tools, and comes back with the finished report, the built dashboard, the campaign that actually shipped. Not a chatbot you prompt all afternoon — a coworker you hand things to. New readers get $50 off their first month. Hire Viktor →

Anthropic Signs a $35 Billion Compute Bill

Reuters

What happened: Anthropic has agreed to a roughly $35 billion, six-year cloud deal with Lambda, an Nvidia-backed cloud provider, for capacity at a Texas data center. Bloomberg reported it first; Reuters confirmed it through a source. The roughly 350-megawatt site is being built in Nueces County by Hut 8, the bitcoin miner turned data-center developer.

Why it matters: Every answer Claude gives runs on a machine somebody had to buy, power and cool, and Anthropic is buying years of that in advance. Per the Reuters tally this deal follows $45 billion committed to Nscale for capacity in West Virginia and $10 billion to Volta, putting the company north of $135 billion in compute contracts signed this year alone. That is a bet that demand for things like Claude Code does not flatten out.

What everyone’s saying: The structure is what people keep pointing at. Benzinga notes that Nvidia holds the lease on the Hut 8 building, Lambda installs chips it bought from Nvidia, and Nvidia is an investor in Lambda. Money leaves the neighborhood and then comes home for dinner.

My read between the lines: A $35 billion contract signed with an intermediary is $35 billion Anthropic did not sign with Amazon or Google, both of whom own a piece of the company. Renting from a third landlord is expensive. Owing your entire supply chain to your two largest investors is more expensive, and you only find out the price later.

📖 Further reading: Neo-Napster: The Compute Revolution Nobody Saw Coming — while the labs sign nine-figure leases, the counter-move is happening on hardware you can already buy.

The Brief is free and stays free. What sits behind the paywall is the other half of the job: the deep-dives where I t