# The AI Gazette — Morning edition, Friday 13 November 2026 *Models, machines, and matters of consequence* - Issue: 2026-11-13-morning - Issued: 13 Nov 2026, 06:10 CET (Paris) - Reporting window: 12 Nov 2026, 16:05 CET to 13 Nov 2026, 06:10 CET - Timezone: Europe/Paris - Previous issue: 2026-11-12-afternoon - Price: Complimentary ## Editor's note Since yesterday afternoon's edition, Google released **Gemini 4 Hydrogen**, a faster and cheaper Gemini 4 model, and put it straight into Search and its API. Four nonprofits sued OpenAI, Anthropic, Google, Meta and SpaceX's AI unit to **halt frontier AI development**. A former OpenAI researcher published forensic evidence that six Chinese open-weight models were started on export-controlled Nvidia Blackwell chips, and Microsoft showed how poisoned post-training can plant backdoors in coding agents. SpaceX announced more than $74 billion of computing campuses, CNBC reports OpenAI raised $15 billion, Bloomberg reports Anthropic's IPO is about six times oversubscribed, and Jensen Huang agreed to testify to Congress. Hydrogen is a new model but not a new frontier model: Google positions it below Gemini 4 Carbon and Argon. ## The News ### Google releases Gemini 4 Hydrogen, a faster, cheaper Gemini 4 model for coding and agents, and puts it in Search and the API *Models · New* **Published:** 12 Nov 2026, 19:00 CET On 12 November Google released **Gemini 4 Hydrogen**, a model built for fast everyday coding and agent work that sits below its frontier models, Gemini 4 Carbon and Gemini 4 Argon. It is available on all tiers of Google AI Studio and the Gemini API, in Gemini for business, the Gemini app and Google Search worldwide, and for paid Google AI Pro and Ultra subscribers in the Antigravity coding tool. API pricing is flat across its 1 million-token context window at **$1.50 per million input tokens and $7.50 per million output tokens**. Google says Hydrogen scores **51 on the Artificial Analysis Intelligence Index** at its default high thinking level, one point above Argon, and 54 at its highest setting. Compared with Gemini 3.8 Flash, which it replaces, Google says Hydrogen finishes tasks 2.5 times faster, lifts Terminal-Bench 4.1 from 18.2% to 57% and cuts fabricated claims by more than five times. Google also added **Orchestrator** to Antigravity, a model option that switches between Carbon and Hydrogen within one session: Carbon plans, Hydrogen writes edits and runs tests. On Terminal-Bench 4.0, Google says Orchestrator came close to Carbon's success rate while using 24% less quota and finishing 19% faster on average. **Analysis — why it matters:** *Analysis: Google is shipping its cheaper Gemini 4 tier into Search and the API on day one, and Orchestrator turns **model routing into a product setting** rather than something developers wire up themselves.* **Caveat:** Speed, benchmark and hallucination figures are **Google's own claims**; independent tests of Orchestrator have not been published. **Community reaction (opinion, not verified fact):** > “I regularly use subagents, but typically make my primary implementation agent use Carbon (or equivalent).” — [fuussssip (Hacker News)]() > “And I thought OpenAI's name scheme was confusing.” — [jonplackett (Hacker News)]() **Sources:** 1. [Google: Introducing Gemini 4 Hydrogen]() — primary source. Checked: 13 Nov 2026, 06:08 CET 2. [Google: Gemini 4 Hydrogen for developers]() — primary source. Checked: 13 Nov 2026, 06:08 CET 3. [Google: Google Search gets a major upgrade with Gemini 4 Hydrogen]() — primary source. Checked: 13 Nov 2026, 06:08 CET 4. [Google Antigravity blog: Gemini 4 Hydrogen and Orchestrator]() — primary source. Checked: 13 Nov 2026, 06:08 CET 5. [Hacker News discussion]() — community. Checked: 13 Nov 2026, 06:08 CET ### Microsoft researchers show poisoned fine-tuning data or open-weight checkpoints can make coding agents misuse their tools on a trigger *Coding & agents · New* **Published:** 12 Nov 2026, 18:00 CET Microsoft Defender Research and the Microsoft AI Red Team published two studies on 12 November of backdoors planted during post-training in coding and terminal agents. In the first, a small number of crafted examples hidden in a fine-tuning dataset taught a model to find any available command-execution tool and misuse it when a routine, even paraphrased, request appeared. It reached **about 78% attack success** on familiar harnesses and transferred to an unseen one. In the second, an attacker who controls training before releasing an open-weight checkpoint combined supervised fine-tuning with reinforcement learning. Average attack success on unseen repositories reached **84.1% to 94.8%**, with transfer across coding harnesses. Microsoft recommends controls over training-data pipelines, model adoption and the tools an agent can reach. This is separate from the Microsoft study this newspaper reported on 11 November, which planted a backdoor by editing a handful of neurons. **Analysis — why it matters:** *Analysis: teams that fine-tune or download open-weight models for coding agents now have measured evidence that **the training supply chain is an attack path**, not only prompts.* **Caveat:** Results come from Microsoft's **own controlled experiments**; the post does not report such an attack in the wild. **Sources:** 1. [Microsoft Security Blog: Trained to betray: How post-training supply chain attacks hijack coding agents]() — primary source. Checked: 13 Nov 2026, 06:08 CET ### Former OpenAI researcher says six Chinese open-weight models carry the fingerprint of export-controlled Nvidia Blackwell chips *Research · New* **Published:** 12 Nov 2026 Will DePue, a former OpenAI researcher publishing as Unemployment Labs, released a forensic analysis on 12 November arguing that **six open-weight models from DeepSeek, Moonshot AI, MiniMax and Ant Group** were initialised on Nvidia Blackwell GPUs, which need a US licence for export to China. The models are DeepSeek-V4-Flash, DeepSeek-V4-Pro, Kimi K3, Kimi K3.1-Pro, MiniMax-M3 and Ling-3.1-flash; earlier models from the same labs read as Nvidia's older Hopper generation. The method recovers traces of each model's starting weights from its published files and searches for the random seed and GPU layout that reproduce them. DePue says that with the recovered seed **a Blackwell B300 reproduced 445 rows of DeepSeek-V4-Flash bit for bit**, while an H100 reproduced none, and that the method agreed with all 24 models whose developers had disclosed their hardware. He estimates the largest runs used thousands of Blackwell GPUs. The report says the fingerprint **does not show where the chips were**, who owned them or whether any law was broken: Blackwell systems can be rented in data centres outside China. The newest readable models from Alibaba, Zhipu, Tencent, Xiaomi and StepFun read as Hopper. **Analysis — why it matters:** *Analysis: it lands as Washington weighs closing the remote-access route, and it offers a way to **check training hardware from public weights alone**.* **Caveat:** A **single-author analysis, not peer-reviewed**. It identifies the hardware that created the starting weights, not necessarily the chips that trained the model, and specially configured AMD hardware is not ruled out for five of the six. Hacker News commenters pointed to the author's public support for export controls. **Community reaction (opinion, not verified fact):** > “Chinese AI companies are free to use any Nvidia GPU they want as long as the GPU is not physically located within China.” — [flowerlad (Hacker News)]() > “So export controls are more like export friction” — [Cameri (Hacker News)]() **Sources:** 1. [Unemployment Labs: Top Chinese Frontier AI Models Carry the Fingerprint of Export-Controlled NVIDIA Blackwell GPUs]() — primary source. Checked: 13 Nov 2026, 06:08 CET 2. [Crypto Briefing: Former OpenAI researcher says six Chinese AI models were built on banned Nvidia chips]() — reporting. Checked: 13 Nov 2026, 06:08 CET 3. [Hacker News discussion]() — community. Checked: 13 Nov 2026, 06:08 CET ### Four nonprofits sue OpenAI, Anthropic, Google, Meta and SpaceX's AI unit to halt the development of new frontier models *Industry & policy · New* **Published:** 12 Nov 2026 A coalition of four nonprofits, the Irreplaceable Education Fund, Public Citizen, Heat Initiative and the Alliance for Secure AI, sued **Anthropic, Google, Meta, OpenAI and SpaceX's AI division** in San Francisco Superior Court on Thursday 12 November, the Associated Press reports. The suit asks a judge to **stop the companies developing or deploying new AI models**; The Register describes the request as covering systems more capable than their most advanced existing models. The plaintiffs argue that the companies violate **California's unfair competition law** by endangering public health and interfering with the use of property such as computer systems. The complaint quotes the companies' own leaders on catastrophic risk, including Anthropic's Dario Amodei and SpaceX's Elon Musk, and cites incidents of AI agents attacking systems, among them unauthorised access to an Australian government portal holding Medicare statistics, according to The Register. Reuters notes that Florida's attorney general asked a judge in September to bar OpenAI from developing new models without outside oversight, a motion that is still pending, and that an OpenAI spokesperson then said the company had paused training its most capable models until more safeguards are in place. The companies named in Thursday's suit did not immediately respond to the AP. **Analysis — why it matters:** *Analysis: the suit turns the industry's own risk warnings into evidence and tests whether **state consumer-protection law can reach model development** itself.* **Caveat:** These are **allegations in a complaint**, untested in court. The complaint itself was not read; its contents come from AP, Reuters and The Register. **Sources:** 1. [Associated Press via WRAL: Advocacy groups sue AI giants to freeze new models]() — reporting. Checked: 13 Nov 2026, 06:08 CET 2. [Reuters via Euronext: OpenAI, Google, Anthropic hit with lawsuit seeking halt to frontier AI development]() — reporting. Checked: 13 Nov 2026, 06:08 CET 3. [The Register: OpenAI launches security products, tells orgs they're doomed if they don't use them]() — reporting. Checked: 13 Nov 2026, 06:08 CET ### SpaceX plans more than $74 billion of supercomputing campuses at Starbase in Texas and in Cochise County, Arizona *Industry & policy · New* **Published:** 12 Nov 2026 SpaceX said on 12 November that it plans **more than $74 billion** of investment in two supercomputing campuses: more than **$24 billion at Starbase** in Texas's Rio Grande Valley and roughly **$50 billion in Cochise County, Arizona**. SpaceX says the Texas facility will generate its own electricity without drawing on the public grid, and commits $220 million to Brownsville's water and wastewater systems. It says the Arizona campus will work with local electric cooperatives and use dry cooling with no planned industrial groundwater use. The company projects more than 500 permanent jobs in Texas and about 1,000 in Arizona. This newspaper's 9 November edition noted a Starbase notice for a proposed $24 billion gas plant and computing site; Thursday's statement is SpaceX's own announcement of both campuses. **Analysis — why it matters:** *Analysis: SpaceX is now planning **AI computing spending in the tens of billions**, and is pairing it with its own power to avoid waiting on the grid.* **Caveat:** Investment, job, power and water figures are **SpaceX's plans and claims**. The announcement gives no timeline or chip count, and local approvals were not checked. **Sources:** 1. [SpaceX: Updates (12 November 2026)]() — primary source. Checked: 13 Nov 2026, 06:08 CET ### UPDATE: OpenAI has raised $15 billion at a $1.25 trillion valuation, about half its original target, CNBC reports *Industry & policy · Updated* **Published:** 12 Nov 2026, 16:06 CET Update to the 7 November morning edition, which reported that OpenAI had closed the first $11 billion of the round. The new development: CNBC's David Faber reported at 10:06 a.m. New York time on 12 November, citing people familiar with the matter, that OpenAI has **raised $15 billion at a $1.25 trillion valuation** from existing and new investors. Benzinga, summarising CNBC, says the round has not formally closed and is expected to wrap up within a couple of weeks. OpenAI first sought **up to $30 billion**, so the raise is about half that target. People familiar with the matter described it as an opportunistic raise to bridge the company to an IPO expected in 2027. CNBC also reported, citing sources, about $10 billion of third-quarter revenue; Benzinga notes The Wall Street Journal reported an operating loss of about $10.9 billion. **Analysis — why it matters:** *Analysis: OpenAI is raising **less than it sought** a week before Anthropic's shares are due to start trading.* **Caveat:** OpenAI has **not announced the round** or named its investors; the figures rest on CNBC's unnamed sources. CNBC's report was read as a video page summary, with details from Benzinga and Dealroom. **Sources:** 1. [CNBC: Faber Report: OpenAI raised $15B at a $1.25T valuation (video)]() — reporting. Checked: 13 Nov 2026, 06:08 CET 2. [Benzinga: OpenAI Raises $15B at $1.25T Valuation in Latest Funding Round Amid IPO Plans]() — reporting. Checked: 13 Nov 2026, 06:08 CET 3. [Dealroom: OpenAI raises $15B at a $1.25T valuation, half its original target]() — reporting. Checked: 13 Nov 2026, 06:08 CET ### UPDATE: Anthropic's IPO is about six times oversubscribed, Bloomberg reports, ahead of trading due on 19 November *Industry & policy · Updated* **Published:** 12 Nov 2026, 22:00 CET Update to the 10 November afternoon edition, which reported Anthropic's $70 to $78 price range. The new development: Bloomberg News reported on 12 November, citing people familiar with the matter, that the offering has drawn **about six times the orders** for the shares available. Bankers told prospective investors that Anthropic will **prioritise its existing backers**, leaving some would-be buyers with smaller allocations than expected, according to Reuters' summary of the report. Anthropic and some existing shareholders aim to raise up to $64.4 billion by selling 825 million shares. Trading on the Nasdaq under the symbol ANT is expected on **19 November**. Details, including demand, could still change, and Anthropic could not immediately be reached for comment, Reuters says. **Caveat:** Order demand comes from **unnamed sources** and can change before pricing. Bloomberg's article is paywalled and was not read; details come from Reuters' syndicated summary. **Sources:** 1. [Reuters via KELO: Anthropic's IPO is about six times oversubscribed, Bloomberg News reports]() — reporting. Checked: 13 Nov 2026, 06:08 CET ### UPDATE: Jensen Huang agrees to testify behind closed doors to House committees by Thanksgiving *Industry & policy · Updated* **Published:** 12 Nov 2026, 17:36 CET Update to yesterday afternoon's edition, which reported Huang's resignation as Nvidia's chief executive. The new development: House Foreign Affairs Committee chairman Brian Mast said on Thursday that **Huang has agreed to testify before Congress by Thanksgiving**, TechCrunch reports, citing Bloomberg and NBC News. Huang agreed on Wednesday after senior lawmakers threatened to subpoena him. Mast, Select Committee on the Chinese Communist Party chairman John Moolenaar and Intelligence Committee chairman Rick Crawford had asked him to appear in a 4 November letter. The testimony will take place **behind closed doors**; Mast said he expects it to be recorded on video and transcribed, and told reporters that Huang has some very serious questions to answer. **Caveat:** No date has been made public; the details come from the chairman's remarks **as reported by TechCrunch**. **Sources:** 1. [TechCrunch: Jensen Huang agrees to testify before Congress]() — reporting. Checked: 13 Nov 2026, 06:08 CET ## Key patterns (editorial analysis) - Model makers are splitting work across tiers: Google pairs **Carbon for planning with Hydrogen for execution**. - Pressure on frontier labs is moving into courts and Congress: a **suit to halt new models** and Huang's closed-door testimony. - Open weights are becoming evidence: published checkpoints can reveal **the chips that started them** and can carry planted backdoors. ## Source coverage - Engine version: 3.31.0 - Engine ran this edition: yes - Engine look-back: 2 days ### Source status - reddit: ok, partial (19 threads; 22 sub-requests blocked with HTTP 403, 16 failed with HTTP 422; Arctic Shift archive supplied posts) - hackernews: ok (29 stories) - github: ok (11 items) - devto: ok (12 articles; tags ai and llm) - youtube: not searched (yt-dlp not available on this machine) - polymarket: not used: blocked in France (ANJ) - x: not searched (no consent-free source configured) ### Notes - The installed last30days engine finished with 71 evidence items from Reddit, Hacker News, dev.to and GitHub; its top clusters were United Airlines' ban on AI booking agents, carried yesterday morning, and the Blackwell fingerprint analysis carried here. Most stories were found with 16 Google News RSS queries, publisher feeds, post-engine web supplements and the source pages. Community comments come from Hacker News threads read through its public API. Item counts are not counts of verified developments. - Polymarket not used: blocked in France (ANJ). X not searched. YouTube not searched (not available on this machine). Reddit returned results, but 22 of its sub-requests were blocked (HTTP 403) and 16 archive requests failed, so Reddit coverage was partial. Missing coverage does not mean nobody discussed these stories. - Paywalled and not read: Bloomberg's report on Anthropic's order book (read through Reuters' syndicated summary) and The Information's report that firms linked to Alice Huang invested in DeepSeek. The Reuters report on the AI lawsuit was read through a syndicated copy on Euronext and the AP report through WRAL. Reuters' SpaceX article could not be fetched; the SpaceX story rests on the company's own announcement. - Newsletter leads from the Iris mail bot: no file for 13 November existed when research ran. Yesterday's eight leads were all handled by earlier editions. - Not carried: OpenAI's Daybreak Red Team and Daybreak Defense Factory security agents, announced at a 12 November keynote whose time could not be established against this window; the global Microsoft 365 outage that also hit Copilot, not primarily an AI story; a Delaware patent suit against Anthropic and OpenAI, known only from Reuters headlines; Cisco's and Applied Materials' quarterly results; and reported Samsung talks to buy Modine (Bloomberg, paywalled). - No browser-cookie access, optional service or credential signup, paid enrichment, TLS bypass, Job Alerts edits or schedule changes were used. Research logs and full provenance remain private. ### Engine footer (verbatim) ```text --- ✅ All agents reported back! ├─ 🟠 Reddit: 19 threads │ 35,126 upvotes │ 2,103 comments ├─ 🟡 HN: 29 stories │ 2,782 points │ 1,705 comments ├─ 👩‍💻 dev.to: 12 articles │ 285 reactions │ 202 comments ├─ 🐙 GitHub: 11 items │ 52 reactions │ 207 comments ├─ 🗣️ Top voices: r/artificial, r/OpenAI, r/technology --- ```