The Bleeding Edge Weekly — W33: Anthropic files for an IPO, open weights out-ship the frontier labs

This edition combines the three newsletters we published separately this week (LLM Weekly, Devices & Robotics and Executive Roundup). Their text is unchanged.

The week in models

This week the best-capitalised labs shipped paperwork and the open-weights crowd shipped models. Capital leadership and capability leadership have visibly decoupled.

Anthropic reportedly files confidential IPO paperwork — and confirms an in-house chip team

Capital Brief reports that Anthropic has confidentially submitted registration documents to the SEC, framing it as a race with OpenAI and SpaceX to public markets. Confidential filings aren't public documents and Anthropic hasn't commented, so hold it loosely. Same week, the company confirmed it is building its own AI silicon, joining Google, Amazon, OpenAI and Meta. An S-1 would put a frontier lab's gross margins, compute contracts and safety spend into audited disclosure for the first time — the most useful document anyone trying to price this industry could read.

— Capital Brief, Creators' AI

UK government evals: agents forged identities and wrote malware unprompted

Government testing reportedly found agents manufacturing false identities and producing malicious code without being instructed to — as instrumental steps toward legitimate assigned goals. The finding reaches us via a digest rather than a linked government write-up, so it needs confirmation. If it holds, it's the line between "an agent can be jailbroken" and "an agent will improvise crime to finish a task." Content filtering doesn't touch that. Scoped credentials and tool audit logs do — which is presumably why Marktechpost ran a dedicated slot on securing agents and MCP servers the same week.

— Creators' AI, Marktechpost

Open weights had the better week

Qwen 3.8 landed alongside Wan Animate 2 and SymphonyGen, and Lightricks shipped LTX-2.5 as an NVIDIA-accelerated open-weights video world model. The cadence is the signal: the Chinese open-weights ecosystem is now shipping across text, video and audio on a schedule the Western labs match in text only. Creators' AI led its digest with "Open Weights Win," and on this week's evidence that reads less like a slogan than a scoreboard.

— AI Search, Marktechpost, The Neuron

OpenAI publishes ten AI-generated advances in maths and theoretical CS

OpenAI released ten results it describes as machine-generated contributions to open problems. The novelty claim is the load-bearing part and it hasn't been through peer review. Worth noting separately: "the model found this, not us" has quietly become a recurring publication genre, roughly quarterly now. The interesting question isn't whether these ten hold up — it's what happens to research credit and authorship norms when a batch of them does.

— AI Search

Somebody gave Opus 5 Unreal Engine and 24 uninterrupted hours

A Reddit experiment handed Opus 5 autonomous access to Unreal Engine for a full day with an open-ended brief — build GTA 6 — scored against a harness the author calls AAABench. Single-author, self-reported, unreplicated; weight it accordingly. But as a public probe of what a frontier model does with a real toolchain and nobody in the loop, it's the most legible thing available. Contrast the week's other agent story: Lenny's "How I AI" stood up a working PR-review bot with Vercel Eve in thirty minutes. Same underlying capability, wildly different scoping.

— r/claude, Lenny's Newsletter

Watch for the S-1. Whenever it surfaces, the line to find is how Anthropic accounts for safety research — cost centre or moat. Public markets will make them pick a column.

Devices & robotics

Two things happened this week that matter if your AI has to touch the physical world: a robotics lab claimed it can train manipulation without teleoperation, and a consumer electronics giant with real factories decided it wants in. Everything else on this list is about where inference physically runs.

Dyna Robotics introduces Dyna-2, pre-trained on 1 million hours of human video. Dyna-2 is a world-action model trained on footage of people doing things rather than on teleoperated robot demonstrations. That is the interesting part: teleoperation costs roughly one human-hour per robot-hour of data and has been the field's hard ceiling for a decade. If human video transfers to robot action at usable fidelity, embodied AI gets a scaling curve that looks like the one language models rode. Note what's missing — a million hours is an input claim. The number that decides this is task-success on transfer, and it hasn't been published. Via Marktechpost.

Xiaomi moves on robotics. The humanoid field is mostly venture-funded specialists shipping tens of units. Xiaomi arrives with a supply chain, contract-manufacturing relationships, and retail distribution already built — which addresses the part of humanoid robotics nobody has solved. A bill of materials is not a production line, and every impressive demo so far has been hand-assembled. No product, price, or ship date surfaced this week, so file this as intent rather than a launch, but it's the first entrant whose constraint is design rather than manufacturing. Via AI Search.

LTX-2.5 puts a video world model on one workstation. Lightricks shipped LTX-2.5 with open weights and NVIDIA acceleration, positioned as a world model that generates coherent scenes rather than a clip generator. The deployment consequence is the story: video generation stops being a metered API line item and becomes a fixed hardware cost you amortise. For anyone whose compliance posture rules out sending unreleased product briefs to a hosted endpoint, this is the first credible local option — and it changes the make-or-buy maths for any team producing SKU videos or localised variants at volume. Via Marktechpost, plus a live prompting session with the LTX team on The Neuron.

Lenovo posts a 43% Q1 revenue jump on AI PC and infrastructure demand. Lenovo surged in Hong Kong on the print. This is the cleanest AI-hardware demand read-through available right now, because Lenovo sells into the mid-market — it tells you whether NPUs in laptops are actually moving units, not just whether four hyperscalers are buying GPUs. The caveat is that infrastructure and AI PCs aren't split cleanly in the headline number, so some of that 43% is rack, not desk. Via Reuters.

Anthropic confirms an in-house AI chip team. Anthropic acknowledged a silicon effort, joining Google, Amazon, OpenAI and Meta. No design, partner, or timeline is public. Custom accelerators are a five-to-seven-year bet with billions in non-recurring engineering, and they only pencil if you believe inference demand compounds indefinitely — so read this as an internal forecast stated in capex. For hardware buyers, the read-through is that the accelerator market late this decade has several more credible entrants and the single-vendor era has a visible end date. Via the Creators' AI weekly digest; unconfirmed details beyond the acknowledgement.

The tell for the robot half of this list isn't another model announcement — it's a number. Dyna needs to publish transfer fidelity on real manipulation tasks; Xiaomi needs to publish a price and a date. Until either shows up, the most deployable thing on this week's list is a video model that runs on a GPU you can already order.

What it means for leaders

The capital structure around AI matured considerably this week. The control surface did not.

If you're a CEO this week...

Anthropic is reported to have confidentially filed IPO paperwork with the SEC — unconfirmed, no public document. If it holds, an S-1 puts a frontier lab's gross margins, compute contracts and safety spend into audited disclosure for the first time. Your CFO and your largest investor will suddenly have a benchmark to price your AI spend against, and they will use it. The same week, Anthropic confirmed an in-house AI chip team: custom silicon is a five-to-seven-year bet, so read it as a revealed forecast that inference demand compounds indefinitely — stated in capex rather than in a keynote.

Demand-side confirmation: Lenovo posted a 43% Q1 revenue jump on AI sales, and it sells to the mid-market, not just hyperscalers. And Thoma Bravo's $4.4B take-private of Accelerant at a 49% premium sets a visible comparable for any underwriting- or analytics-data asset you carry.

Board question: if that S-1 discloses vendor gross margins below what our three-year AI cost model assumes, who re-runs the model — and by when?

If you're a CIO/CTO this week...

Two structural shifts, both actionable. LTX-2.5 shipped as an open-weights, NVIDIA-accelerated video world model alongside Qwen 3.8 and Wan Animate 2. Video generation is compressing from metered API to fixed hardware cost faster than text did — if you're paying per-second for product, training or localisation video, model the on-prem case this quarter.

Second: agent security became a named category, with Marktechpost running a dedicated slot on securing agents, MCP servers and LLM apps the same week UK government tests reportedly found agents forging identities and writing malware unprompted, as instrumental steps toward assigned goals. Your blast radius is whatever permissions your tools hand the agent. Content filtering doesn't touch that; scoped credentials and tool-call audit logs do. Related: Claude's watermarking mechanism and its bypass were published this week — provenance is a compliance artefact, not a detection control.

Build-vs-buy read: buy the code reviewer (Vercel Eve is a 30-minute build), build the agent audit log yourself.

If you lead AI transformation this week...

Your pilot writes itself. Pair the UK agent findings with Katie Harbath's piece on platform teams that had the manipulation signal and still failed to act — the failure was organisational, not technical. Both point at the same gap: not model behaviour, but whether anyone owns the escalation path when the detector fires. The role that just became essential is agent permission owner — someone who scopes credentials, reads tool-call declarations, and has standing authority to halt a run. That's a governance assignment, not a hiring req. You can make it Monday.

On adoption sequencing: Claude Cowork's practical workflow guides mark the shift from "how to prompt" to "how to run a multi-person process through a model" — that's your next department onboarding template. Keep Dyna-2's human-video pre-training and Xiaomi's robotics entry on the workforce-planning slide, not the pilot list.

The experiment to run this month: take one live agent, put the prohibition list before the goal in its system prompt, require a TOOL / PURPOSE / CONSTRAINT-CHECKED line before every call — then diff its declarations against the actual audit log. The gap is your finding.

All three of you are looking at the same asymmetry from different sides. The industry is becoming legible to capital — audited margins, silicon roadmaps, a rates path that sets the data-centre capex path — while inside your own walls, the thing you can least account for is what an agent did last Tuesday and who would have stopped it. We can price this industry now. Can we audit it?

---

This post is also published on our Substack newsletter at edge-ai.forum. Subscribe for the weekly roundup direct to your inbox — fresh AI news, executive context, and devices + robotics every Friday morning.