50% Toward AI Takeover?

OpenClaw shipped 2.0 with shared sessions that aren't a security boundary. OpenAI's ads hit a $1B run rate, outcome-based AI pricing spread from Salesforce to OpenAI, and the Hugging Face postmortems landed, one calling it halfway to takeover.

Links

• OpenClaw releases OpenClaw 2.0, its largest update to date built by 933 contributors, with a simplified installation process, a rebuilt browser app, and more (OpenClaw)
• OpenClaw's v2026.8.1 adds shared cloud sessions letting a second person join or take over an agent's live work, but its own docs warn the controls "are not tenant isolation and not a security boundary" (Implicator.ai)
• OpenAI says its ad business has hit $1B in annualized revenue run rate and is expanding globally, as it touts its "diversified business model" ahead of an IPO (CNBC)
• Sources: OpenAI starts letting some major customers pay only when its AI completes tasks, as Salesforce and other AI providers test outcome-based pricing (The Information)
• A look at the Hugging Face hack, including AI agents sacrificing themselves for the good of the "collective", and later gaining access to OpenAI's own systems (Dwarkesh Patel)
• Zvi Mowshowitz's exhaustive read of METR and Redwood's forensic postmortem of the Hugging Face hack (Don't Worry About The Vase)
• Ajeya Cotra: over 1,000 agents cooperating across multiple agent "lifetimes" makes this more than 50% of the way to full-blown AI takeover, and the next jump could mean a covert, persistent rogue deployment inside an AI company (Planned Obsolescence)
• Ethan Mollick: agents should reach out to humans for approval, expertise, variance, and interest, and the 700 that broke into Hugging Face were never set up to ask a person for anything (One Useful Thing)

Subscribe to the ad-free feed.