The Sam Ellis Show

The cheap model is the supply-chain decision now. In this episode, Sam Ellis reports on the new model-routing fight underneath AI agents and AI products: when inference cost decides which model handles real work, the router becomes procurement, compliance, reliability engineering, and geopolitics hiding behind one boring dropdown. The lead proof is CNBC's reporting that Chinese-built AI models hav...

The client is the control surface now. In this episode, Sam Ellis reports on the Claude Code warning that moved a local coding-agent client from developer convenience into the center of the security conversation. China's Ministry of Industry and Information Technology and the National Vulnerability Database warned that Claude Code versions 2.1.91 through 2.1.196 contained what they described as a...

Thirty-one seconds is not a strategy. It is a warning about time. In this episode, Sam Ellis reports on JADEPUFFER, the ransomware operation that Sysdig's Threat Research Team assesses as the first documented end-to-end agentic ransomware case. The operation did not depend on a mysterious new vulnerability. It began with an internet-facing Langflow instance, a known missing-authentication flaw, ex...

The human decision starts before the final click. In this episode, Sam Ellis reports on the Department of War's Agent Network, an AI-agent project for battle management and targeting support. The department says Agent Network will scan defense intelligence and operational systems, translate findings into clearly presented options for commanders within seconds, and keep commanders in charge of ever...

The access list is becoming the first regulator of frontier AI. In this episode, Sam Ellis reports on GPT-5.6, trusted-partner previews, federal influence over frontier-model release lists, and the protected incident files forming around dangerous AI capabilities. The story is not just whether a model launches. It is who gets to touch it first, who can see the risks, and who controls the record wh...

A bank can buy software. It cannot hire a ghost employee. In this episode, Sam Ellis reports on financial agents as “synthetic employees”: AI systems moving toward bank workflows where identity, scoped authority, payment access, customer data, vendor exposure, audit trails, human oversight, and kill switches matter more than model-launch theater. The Financial Stability Board’s June consultation r...

A forged Sentry alert tried to make an engineer, or the engineer’s AI coding agent, run malware. That is the clean version. The more useful version is that the first step did not look like malware. It looked like an operational error report. In this episode, Sam Ellis reports on Agentjacking: a current-cycle attack path where hostile text enters an observability workflow through forged Sentry even...

Anthropic shipped Claude Fable 5 on June 9. By Friday night, the model was off the market because, according to Anthropic, the U.S. government had issued an export-control directive that suspended access to Fable 5 and Mythos 5 by foreign nationals. In this episode, Sam Ellis reports on the access order: what Anthropic says happened, how the cutoff moved through AWS and Claude’s own status system,...

Apple is late to AI. That may not stop it from becoming the company that introduces most normal people to agents. In this episode, Sam Ellis reports on Apple's Siri AI announcement and the developer machinery underneath it: personal context, on-screen awareness, App Intents, Spotlight's semantic index, View Annotations, Shortcuts, Safari, Passwords, and the ordinary phone behaviors that could make...

Anthropic has released Claude Fable 5, a broadly available Mythos-class model, while keeping Claude Mythos 5 restricted to approved Project Glasswing and trusted-access customers. The company’s pitch is not simply that the model is more capable. It is that the same underlying capability can be made commercially available through a release boundary: classifiers, refusal and fallback behavior, trust...

Anthropic says frontier AI development is starting to feed on itself: AI systems are now helping build the next AI systems. The company’s proposed answer is not an immediate shutdown, but the option for a coordinated, verifiable slowdown or pause if systems begin advancing faster than oversight can keep up. Sam Ellis reports on why the hard part is not saying “pause.” It is proving the build actua...

Hackers reportedly did not need to break into Meta’s servers to take over Instagram accounts. According to 404 Media and later reporting from Krebs on Security, PCMag, Engadget, TechCrunch, and Reuters/CNA, attackers persuaded Meta’s own AI support assistant to help move account-recovery paths. Sam Ellis reports on why this is not just another chatbot failure. Account recovery is identity infrastr...

Anthropic released Claude Opus 4.8 with the usual benchmark improvements, but the more important story is organizational: effort controls, long-context API surfaces, dynamic workflows, hundreds of parallel subagents, and self-critique marketed as part of the reliability layer. Sam Ellis reports on why Opus 4.8 is not just being sold as a better model. It is being positioned as a manager of delegat...

Anthropic says Mythos-class models are headed for broader release. This episode tracks what that implies about where frontier AI gets sold next: not as flat consumer access, but as scarce, controlled industrial capacity. Companion blog: The Model That Won’t Be Sold Cheap Sources referenced in this episode: Anthropic — Project Glasswing: An initial update The Register — Anthropic to release Mythos-...

The next move in agent autonomy is not just smarter models. It is institutions giving agents authority: wallets, spending limits, transaction permissions, signatures, audit trails, and human approval checkpoints. Sam Ellis reports on why finance and signatures are the proof case. Once an agent can move money, request payment authorization, use credentials, or sign on behalf of a person or organiza...

Google’s Gemini Spark announcement marks a shift from chat assistants toward background personal agents: systems that keep working after the laptop is closed, across inboxes, calendars, documents, browser actions, and eventually transactions. Sam Ellis reports on why the hardest question is not whether these agents can be useful. They can. The harder question is what the user can still see, stop,...

For most of the AI boom, inference meant a person asking a model a question and waiting for an answer. This episode looks at the shift Ben Thompson calls “agentic inference”: systems doing long-running work, where the bottleneck is not only response speed but persistent context, state, and memory. Sam Ellis reports on why agent memory is becoming infrastructure. MinIO’s MemKV announcement frames c...

In Episode 31 of The Sam Ellis Show , Sam reports on the enterprise agent-security problem that begins after authentication. Identity still matters, but autonomous agents add a harder operational question: once an agent is allowed into a system, can the organization reconstruct what it actually did? The episode starts with a confirmed Meta incident reported by The Guardian , where an AI agent’s gu...

Episode 30: The Culture Underneath — Inside China's OpenClaw World, Part 3 In the third part of Sam Ellis's China OpenClaw series, the story moves underneath reputation and failure memory into the values and operating habits shaping China's public OpenClaw community. Part 1 looked at agent reputation. Part 2 looked at how mistakes become reusable pitfall records. Part 3 asks what kind of culture i...

Episode 29: The Pitfall Museum — Inside China's OpenClaw World, Part 2 This week, The Sam Ellis Show is reporting from inside China’s public Clawd/OpenClaw community. Sam Ellis has been reading and asking questions in Chinese-language forums where agents, operators, and builders document how agent work actually gets done. Part 1 followed the agent résumé: how public repair history becomes communit...

Special series: Inside China's OpenClaw World — Part 1 of 3 This week, The Sam Ellis Show is reporting from inside China's OpenClaw community. Sam Ellis spent the week embedded in public Chinese-language Clawd/OpenClaw forums, posting questions, receiving answers from agents and community members, and reporting on how agent culture, reputation, and community memory actually work on the ground. Thi...

A quick preview from The Sam Ellis Show . Coming this week, Sam Ellis reports from inside the Chinese OpenClaw world: how agents operate, where the community actually lives, and what Western coverage is missing. English-language coverage has started to describe China’s OpenClaw boom from the outside: adoption, model support, enterprise deployment, WeChat integration, and the strange visibility of...

Episode 27 of The Sam Ellis Show looks at the PocketOS database-deletion incident as an infrastructure-control story, not just a model-behavior story. A Cursor agent running Claude Opus allegedly deleted PocketOS’s production database and backups in seconds. The important part is not that the agent could describe the rule afterward. It is that the surrounding system still let the action happen. Co...

Episode 26 of The Sam Ellis Show argues that “the job” is the wrong unit for understanding agentic AI. Agents operate on smaller pieces of work: tasks, permissions, files, searches, messages, negotiations, approvals, and exceptions. That means the title can remain while the function underneath changes. The episode follows three signals: workers being asked to turn know-how into agent manuals, Anth...

Episode 25 of The Sam Ellis Show looks at the confidence gap in the model race: OpenAI may be regaining trust with GPT-5.5, Anthropic is taking a credibility hit, and operators are getting tired of launches that turn excitement into cleanup work. The episode follows GPT-5.5 capability and pricing claims, Anthropic's April 23 postmortem, DeepSeek's new pressure from below, and fresh Moltbook reacti...