Good morning. Today belongs to the Chinese open-weights crowd: Moonshot dropped Kimi K2.6, Alibaba countered with Qwen 3.6 Max (but kept the weights), and a ternary-weight 8B model is making the rounds as a reminder that not all the action is at the frontier. Meanwhile, Anthropic locked in another $5B from Amazon, and the NSA is apparently using a model the Pentagon blacklisted.
Moonshot releases Kimi K2.6, and people are paying attention. The 1.1 trillion-parameter model landed on Hugging Face under a Modified MIT license that lets anyone use it with attribution requirements for large corporations — a cleaner arrangement than some recent “open” releases. Moonshot’s accompanying blog post pitches it as the new top open-weights model for one-shot coding reasoning, with a notable demo where the model autonomously optimized a financial matching engine over 13 hours for a 185% throughput gain. Early testers on HN report performance in the neighborhood of Claude Sonnet 4.6, though one tester found it only marginally better than K2.5 on puzzle-style reasoning, and several commenters flagged the “Deepseek moment” vibes if the benchmarks hold up in real use.
Kimi also quietly shipped something arguably more important: a vendor verifier. Buried in the K2.6 launch discussion is Moonshot’s new standardized framework for evaluating third-party hosting services — a response to the persistent complaint that the same open-weights model behaves differently depending on who’s serving it. For anyone who’s compared Kimi across OpenRouter providers and gotten wildly different outputs, this is overdue.
Qwen 3.6 Max Preview goes live, stays closed. Alibaba’s new flagship tops the AA-Intelligence Index among Chinese models at 52 and launched on Qwen Chat the same day as Kimi K2.6 — except Qwen Max is proprietary, cloud-only, and priced at $1.30/$7.80 per million tokens versus Kimi’s $0.95/$4.00. HN commenters were quick to note Alibaba benchmarked against the older Opus 4.5 rather than 4.6, and LocalLLaMA consensus is that 122B is now the ceiling for open-weighted Qwen releases. The broader worry: Chinese labs are following the classic playbook of releasing open weights to build goodwill, then closing the top tier once they have mindshare.
Ternary Bonsai squeezes an 8B model into 1.75GB. PrismML’s new model family uses 1.58-bit ternary weights {-1, 0, +1} throughout, achieving roughly 9x memory reduction versus 16-bit baselines while scoring 75.5 average on benchmarks — trailing only Qwen3 8B (which needs 16.38GB). An independent benchmark from an HN commenter found the 8B on par with Qwen3.5-4B on accuracy and decisively ahead on accuracy-per-byte. The valid critique: comparisons are against full 16-bit models rather than the 2-4 bit quants most people actually run. Still, ternary weights mean no multiplications at inference, which opens the door to much simpler hardware.
Anthropic takes another $5B from Amazon, pledges $100B back. Per TechCrunch, Amazon’s total investment now sits at $13B, and Anthropic will spend over $100B on AWS over the next decade, securing up to 5 GW of Trainium-based capacity. The structure mirrors Amazon’s recent OpenAI arrangement — compute-credit-flavored investments that look increasingly like a way for hyperscalers to book AI revenue through one pocket while paying for it from another. VCs are reportedly circling a new Anthropic round at an $800B+ valuation.
The NSA is using Anthropic’s blacklisted Mythos model. Axios broke the story, with TechCrunch adding that the NSA is using Mythos Preview — the offensive cyber model Anthropic withheld from public release — for vulnerability scanning, despite the DoD having labeled Anthropic a supply-chain risk after the company refused Pentagon demands around model access and surveillance use cases. HN commenters noted the DoD was granted a contract exemption giving it several months to divest, so the reporting is less scandalous than it first appears; the more interesting read is that the blacklisting was always more political than technical.
Atlassian opts everyone into AI training by default. Both free and paid customers now have their Confluence pages, Jira tickets, and possibly Bitbucket code used for training by default, per Let’s Data Science. Data residency selections don’t exempt you, and some users on HN report the opt-out toggle fails to render at all. The rumored Anthropic acquisition of Atlassian would make the timing suspicious — clean, high-signal business task data is exactly what a frontier lab would want — and a r/PoisonFountain community has already started coordinating data poisoning efforts.
That’s the morning. Two strong open-weights releases in one day, one hyperscaler deal that looks more like financial engineering than investment, and another reminder that your SaaS vendor’s privacy settings deserve a re-read. See you tomorrow.