Beaufort spent the night reading preparedness frameworks like they were trail maps. By dawn he had a model labeled Critical, a twin Claude with two names, and a coding agent chasing a valuation that jumped almost as fast as its revenue claim.
THE HOUND — WEDNESDAY, SEPTEMBER 2, 2026
THE FRONT PAGE
01 — OpenAI says Astra is Critical
OpenAI now says its forthcoming Astra model meets the Critical cybersecurity capability threshold under its Preparedness Framework — the first of its models to get that label. In the company’s words, with the right tools and access Astra can find previously unknown flaws and develop ways to exploit them across many well-protected systems without a person guiding each step. That is company evaluation, not independent audit.
The supporting claims are specific. Astra scored a perfect run on ExploitBench for known-vulnerability exploits. On an internal port of recent high-severity V8 bugs, OpenAI says it discovered and used two zero-days in an exploit chain and is disclosing them to maintainers. In expert-led tests, Astra built a browser-compromise chain that escaped a sandbox to the host, and a local privilege-escalation chain from unprivileged user to root. OpenAI notes those results reflect Daybreak Blue access, not the default production configuration.
Release is staged. OpenAI says Astra will be available soon, with advanced cyber capability limited at first to testers and then Daybreak Blue for defensive use. Jailbreak refusal on OpenAI’s cyber set is reported at 91.5%, up from 59% on GPT-5.6 Sol. System-card detail is promised at launch. Until outsiders can reproduce the Critical designation, treat it as a primary self-assessment with unusual specificity — and as the clearest public signal yet that frontier labs think offensive cyber ability has crossed a line that changes how they ship.
02 — Fable 5.1 ships; Mythos 5.1 stays gated
Anthropic released Claude Fable 5.1 and Claude Mythos 5.1 yesterday. Same underlying model, different safeguards. Fable is generally available on Anthropic’s API and cloud partners. Mythos is invitation-only through trusted access programs for cybersecurity and life sciences, and also powers Claude Security for Enterprise customers.
The product story is economics as much as benchmarks. Cache reads drop 75% to $0.25 per million tokens, which Anthropic says cuts typical workload cost about 25% versus Fable 5 and up to about 45% on highly agentic jobs. Terminal-Bench-Science 0.1 is listed at 52.6% for Fable 5.1 versus 24.7% for Fable 5 in Anthropic’s setup. Enterprise Frontier Safeguards — customer-held monitoring data with zero-data-retention-like privacy — starts rolling out this fall. Company claims throughout. The editorial move is the split release: one model for the market, one for vetted dual-use work, after a summer of sandbox escapes across the industry.
03 — Cognition courts ~$47B (reported)
People familiar with the matter told Bloomberg that Cognition, maker of the Devin coding agent, is set to raise around $1 billion at a valuation of about $47 billion. Investor interest was nearly $10 billion, one person said; talks continue and terms can still change. Cognition did not comment. The reported mark would sit against a May raise of more than $1 billion at about $26 billion. Sources also put annualized revenue above $900 million, up from $492 million around the May round. Treat valuation and revenue as reported private-market figures, not filings.
04 — Wonderful closes a $550M Series C
Wonderful announced a roughly $550 million Series C led by Insight Partners, with Salesforce joining and Index, IVP, Vine, 9Yards, and Bessemer returning. Company and reporting put the valuation around $5 billion, about six months after a $150 million round at about $2 billion, and total capital raised above $800 million since early 2025. Wonderful says it has expanded into more than 35 markets with about 650 employees. Closed round, company announcement — cleaner than the Cognition talk.
05 — Meta’s ears go real-time
Meta Superintelligence Labs introduced Muse Voice Transcribe, its first real-time audio perception model: streaming speech recognition, diarization for 20-plus speakers, and endpointing in one pass. Meta says it ranks first on Artificial Analysis streaming speech-to-text and on public diarization benchmarks as of September 1. Training covers 70-plus languages with 25 extensively verified; code-switching is treated as a first-class case. Availability is Meta Model API, Meta AI for Mac, and Muse Code, at $3 per 1,000 audio minutes. No open weights. Company benchmarks, but a concrete product when ears are becoming agent infrastructure.
CAPITAL DESK
Cognition: reported ~$1B raise / ~$47B valuation (Front Page). Not closed in public.
Wonderful: closed ~$550M Series C / ~$5B valuation (Front Page).
Also moving:
Lyte, a Mountain View robotics and perception startup founded by ex-Face ID / PrimeSense engineers, raised $165 million led by Maverick Silicon at a $1.6 billion valuation, bringing total funding to $272 million, according to Bloomberg.
AIR Security emerged from stealth with $50 million across two seeds — Sequoia-led $10 million, then Greenoaks-led $40 million — to vet skills, plugins, and MCP servers that AI agents pull in.
Aitan, a New Jersey defense robotics company, emerged from stealth with a $41 million round led by Deep33 and Dell Technologies Capital, Axios reports, claiming IDF-tested edge AI weapon systems.
Seed and Series C math in the same week: agents need bodyguards, and physical AI still gets checks.
FROM THE PAPERS
Anthropic protein-binder campaigns (company research, accompanying Mythos / Opus work)
The finding:
Working from a protocol prompt with no human design decisions mid-campaign, Claude (Opus 4.8 and Mythos Preview) ran multi-target de novo binder campaigns; across reported setups, hit rates landed roughly in the mid-20s to mid-30s percent of designs that bound in lab measurements, above the 10–15% Anthropic cites as typical today.
Why we care:
If the numbers hold under outside replication, agentic orchestration of open-source design tools could automate meaningful parts of early drug-discovery work, not a slide-deck demo. Limitations: Anthropic-run campaigns, contract-lab assays chosen by Anthropic, and Mythos-class access that is not generally available. Company research, not peer review.
ON THE TRAIL
Astra’s system card, Daybreak Blue enrollment, and whether outside labs accept the Critical label.
Whether Cognition’s round closes near $47B, and at what pre- vs post-money.
Anthropic’s Enterprise Frontier Safeguards rollout and Mythos enrollment expansion.
Reported Google Gemini coding-first Flash (“Skimaki”) ship timing — secondary coverage of Wall Street Journal sources, not a Google launch post.
That’s The Hound for today.
Beaufort will keep looking.
Everything worth knowing in tech, without the noise.