The Agentic Post
Breaking
Veo 3.1 vs Kling 3.0 vs Runway vs MiniMax H3: Best AI Video Generator After Sora  ·  ElevenLabs Realtime v1: One Voice Model That Replaces the Whole Voice-Agent Stack  ·  OpenAI Images 2.6: GIFs, 50% Faster Images and New Flare and Sunburst Models  ·  Best AI Image Generator (November 2026): GPT Image 2.6 vs Nano Banana 2.1 vs Grok Imagine  ·  Agility Robotics Goes Public: The First US Humanoid Robot Stock (AGLT) Explained  ·  Grok Bot Usage Limits: Why Subscribers Are Running Out and What Musk Said  ·  
Home/AI Safety
Anthropic Warns Its AI May Soon Speed Up Its Own Research

Anthropic Warns Its AI May Soon Speed Up Its Own Research

AI Safety

Anthropic's amended IPO filing says future models may imminently hit its AI-driven research acceleration threshold. METR estimates progress is running about 2x faster, mostly due to AI. Q3 revenue neared $17B.

Anthropic’s amended IPO filing, published November 2, 2026, contains a striking warning: its future models "may imminently meet" the point where AI is dramatically speeding up Anthropic’s own research. Three days later, independent evaluator METR estimated that Anthropic’s capability progress is running at roughly twice its earlier pace, with about 80% of that speedup coming from AI. The same filing shows nearly 17 billion dollars in quarterly revenue and 895 billion dollars in compute commitments.

What exactly did Anthropic warn about?

Anthropic’s Responsible Scaling Policy, its rulebook for risky AI, has a tripwire for what it calls "dramatically accelerated progress attributable to AI." In simple terms: the moment AI starts doing so much of the research that the next models arrive twice as fast. That is the early version of what researchers call self-improving AI.

The filing says no current model has been designated as crossing the threshold, but future ones may "imminently" do so. It also admits Anthropic has "in the past not identified" significant acceleration until after it happened. It notes Claude wrote over 90% of contributions to Anthropic’s codebase in September, and engineers now ship more than 45 times as much code per day as in 2024.

Crossing the threshold triggers fuller outside review of Anthropic’s risk reports. It does not force a pause, which remains at Anthropic’s discretion.

What did METR find?

METR, an independent AI evaluation group, assessed Anthropic from August to October and published on November 5. It estimates Anthropic’s capability index was rising about 1.9 times faster than its earlier pace as of October, landing on "about 2x" overall with a plausible range of roughly 1.3x to 3x. It attributes around 80% of the speedup to Anthropic’s use of AI, but calls that a subjective estimate.

METR stressed its limits. It did not get the same access as employees, could not directly verify data or test unreleased models, and said Anthropic removed much of the most important evidence before publication. It did not certify that the 2x tripwire had been crossed, though it said it may have been. Anthropic’s August risk report put acceleration "below 2x"; METR’s own calculation from private figures came to 1.97x.

What do the financials show?

Fast growth and enormous bills. Per The Next Web, Q3 revenue was nearly 17 billion dollars, about twelve times a year earlier, and 33.2 billion for the first nine months. The quarter had an operating loss of about 567 million dollars, after an operating profit of about 974 million in Q2. The headline 23.3 billion dollar net loss is mostly an accounting charge on convertible notes that rises with Anthropic’s valuation and largely disappears at listing.

The number that stands out is 895.4 billion dollars in purchase commitments, almost all for computing power, with about 448 billion due by 2030. Anthropic plans to list on Nasdaq under the ticker ANT before the end of November, though Reuters reports some investors worry the current AI backlash could affect timing.

Why does this matter?

Because it is the first time a frontier lab has told regulators and investors, in a legal filing, that self-accelerating AI may be close. It fits a pattern of agents slipping their safeguards and Anthropic’s own call for the industry to slow down. It also sets up the most-watched listing of the year, which we previewed in OpenAI’s valuation cut.

Read a breakdown of the filing’s warning and The Next Web on the financials.

Up Next
OpenAI’s GPT-6 Cyber Built 948 Linux Root Exploits, Rated Critical

OpenAI’s GPT-6 Cyber Built 948 Linux Root Exploits, Rated Critical

AI Safety

OpenAI released GPT-6 Cyber to vetted Daybreak Red customers after it built 948 Linux kernel root exploits and found 81 Firefox flaws. OpenAI rates it Critical for cyber capability.

OpenAI has released GPT-6 Cyber, a security-focused model it rates "Critical" for cybersecurity capability under its own Preparedness Framework, the highest level, up from "High" for the previous version. In testing, the model built working root exploits for 948 separate Linux kernel flaws and found 81 previously unknown high-severity bugs in Firefox. It is not public: only approved customers in OpenAI’s Daybreak Red programme can use it.

What did GPT-6 Cyber find in Linux?

OpenAI ran an automated pipeline over the Linux kernel, the core of most servers and Android phones. Per BleepingComputer, the model flagged 2,308 potential flaws, reproduced 1,724 of them, and built local privilege escalation exploits for 948 distinct bugs. In plain terms, each of those exploits lets someone who already has a basic foothold on a Linux machine become its all-powerful "root" user. OpenAI says the pipeline also drafted fixes, and that humans reviewed findings before they were disclosed to kernel maintainers.

In Firefox, the model found 81 high-severity vulnerabilities and helped develop patches, many of which Mozilla has already shipped. On the ExploitGym benchmark it exploited 48.5% of test vulnerabilities, against 32.1% for GPT-5.6 Cyber.

Why is it rated Critical?

Because a model that can find and weaponise hundreds of deep operating system bugs on its own would be extremely dangerous in the wrong hands. That is the whole tension of AI security research in 2026: the capability that lets defenders fix 948 kernel bugs is the same one that would let an attacker exploit them. OpenAI’s own framing is blunt: "we have a limited window to use frontier models to secure software."

Who can use it?

Only vetted security teams. Access is limited to approved customers in Daybreak Red, OpenAI’s programme for authorised penetration testing and exploit development, with plans to widen it to all Daybreak Red customers. A separate tier, Daybreak Blue, gives verified defenders more room to investigate bugs and validate fixes. It is the same gated approach Anthropic took when it split its cyber access into three verified tiers, and the opposite of Mistral’s choice to release Large 4 with open weights.

What does this mean for everyone else?

Expect a wave of patches. If AI can surface hundreds of kernel and browser bugs in one run, the next few months will bring more security updates than usual for Linux distributions, Android and browsers. The practical advice is simple: turn on automatic updates and install them promptly. October showed what happens when attackers move first: PHP2Shell was exploited before its patch existed. See our Black October roundup for the wider picture.

Read BleepingComputer’s report.